Critical Alert 2 Active Exploits Detected Today

CVE-2026-72530 TrueConf Server Code Injection Vulnerability →
CVE-2026-72529 TrueConf Server Missing Authentication for Critical Function Vulnerability →
Powered by CVE Watchtower
×
August 21, 2026

CVE Watchtower

Advanced Threat Data Export

Filter and download the raw CVE repository (CSV/JSON) for SIEM integration and internal reporting.

Data export is locked. Upgrade your package to enable filtering and downloading.

🔔 Premium Features
🔍 Filter Threats
Title
SeverityPoCActively ExploitedSourceDate
CVE-2026-73381
Unauthenticated Broken Authentication in Popup by Supsystic <= 1.13.0 versions.
CRITICAL??????????NVD2 days ago
CVE-2026-73379
Unauthenticated Bypass Vulnerability in Contact Form by Supsystic < 1.10.0 versions.
MEDIUM??????????NVD2 days ago
CVE-2026-73377
Unauthenticated Broken Access Control in Ultimate Maps by Supsystic < 1.5.0 versions.
HIGH??????????NVD2 days ago
CVE-2026-73375
Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsystic < 1.5.0 versions.
HIGH??????????NVD2 days ago
CVE-2026-73367
Unauthenticated Remote File Inclusion in Easy Google Maps < 1.14.2 versions.
HIGH??????????NVD2 days ago
CVE-2026-73378
Unauthenticated Cross Site Scripting (XSS) in Contact Form by Supsystic < 1.10.0 versions.
HIGH??????????NVD2 days ago
CVE-2026-73376
Unauthenticated PHP Object Injection in Ultimate Maps by Supsystic < 1.5.0 versions.
CRITICAL??????????NVD2 days ago
CVE-2026-73365
Unauthenticated SQL Injection in JetAppointment <= 2.5.2 versions.
CRITICAL??????????NVD2 days ago
CVE-2026-73362
Unauthenticated Cross Site Scripting (XSS) in URL Shortify <= 2.5.0 versions.
HIGH??????????NVD2 days ago
CVE-2026-73361
Unauthenticated Cross Site Scripting (XSS) in Recipe Card Blocks for Gutenberg & Elementor <= 3.4.18 versions.
HIGH??????????NVD2 days ago
CVE-2026-73360
Unauthenticated Cross Site Scripting (XSS) in Chaty Pro <= 3.5.8 versions.
HIGH??????????NVD2 days ago
CVE-2026-73358
Unauthenticated Cross Site Scripting (XSS) in Affiliates Manager <= 2.9.53 versions.
HIGH??????????NVD2 days ago
CVE-2026-73366
Unauthenticated PHP Object Injection in Easy Google Maps <= 1.13.0 versions.
CRITICAL??????????NVD2 days ago
CVE-2026-73359
Subscriber Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.3.9 versions.
MEDIUM??????????NVD2 days ago
CVE-2026-73356
Unauthenticated Arbitrary Content Deletion in Breeze <= 2.5.12 versions.
HIGH??????????NVD2 days ago
CVE-2026-73355
Unauthenticated SQL Injection in Affiliates Manager <= 2.9.53 versions.
CRITICAL??????????NVD2 days ago
CVE-2026-73352
Unauthenticated Broken Access Control in GiveWP <= 4.16.5.1 versions.
MEDIUM??????????NVD2 days ago
CVE-2026-73350
Unauthenticated Broken Authentication in SupportCandy <= 3.5.1 versions.
HIGH??????????NVD2 days ago
CVE-2026-73348
Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions.
MEDIUM??????????NVD2 days ago
CVE-2026-73345
Customer SQL Injection in License Manager for WooCommerce <= 3.0.18 versions.
HIGH??????????NVD2 days ago