Critical Alert 2 Active Exploits Detected Today

CVE-2026-72530 TrueConf Server Code Injection Vulnerability →
CVE-2026-72529 TrueConf Server Missing Authentication for Critical Function Vulnerability →
Powered by CVE Watchtower
×
August 21, 2026

CVE Watchtower

Advanced Threat Data Export

Filter and download the raw CVE repository (CSV/JSON) for SIEM integration and internal reporting.

Data export is locked. Upgrade your package to enable filtering and downloading.

🔔 Premium Features
🔍 Filter Threats
Title
SeverityPoCActively ExploitedSourceDate
CVE-2026-73351
Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.1 versions.
HIGH??????????NVD2 days ago
CVE-2026-73343
Unauthenticated Remote Code Execution (RCE) in WP Compress < 7.20.01 versions.
CRITICAL??????????NVD2 days ago
CVE-2026-73341
Unauthenticated PHP Object Injection in RegistrationMagic <= 6.0.9.7 versions.
CRITICAL??????????NVD2 days ago
CVE-2026-73339
Unauthenticated SQL Injection in Modern Events Calendar < 7.35.0 versions.
CRITICAL??????????NVD2 days ago
CVE-2026-73338
Unauthenticated Cross Site Scripting (XSS) in Autopay <= 5.0.0 versions.
HIGH??????????NVD2 days ago
CVE-2026-73190
Unauthenticated Cross Site Scripting (XSS) in WPDM – Premium Packages <= 7.0.5 versions.
HIGH??????????NVD2 days ago
CVE-2026-73342
Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions.
HIGH??????????NVD2 days ago
CVE-2026-73189
Subscriber Insecure Direct Object References (IDOR) in WP Crowdfunding < 2.2.1 versions.
MEDIUM??????????NVD2 days ago
CVE-2026-70657
Copyparty is a portable file server. Prior to 1.20.17, copyparty volumes with the dk or dks directory-key flag combined with the fk or fka file-key fl...
MEDIUM??????????NVD2 days ago
CVE-2026-73187
Unauthenticated SQL Injection in Sticky Chat Widget <= 1.4.2 versions.
CRITICAL??????????NVD2 days ago
CVE-2026-73181
Unauthenticated Arbitrary File Download in Extra Product Options & Add-Ons for WooCommerce < 7.6 versions.
HIGH??????????NVD2 days ago
CVE-2026-66793
A flaw was found in the governance-policy-addon-controller component of Red Hat Advanced Cluster Management for Kubernetes. A user with permissions to...
HIGH??????????NVD2 days ago
CVE-2026-69189
Hoppscotch is an open source API development ecosystem. Prior to 2026.6.0, the team, teamMembers.user, RESTHistory, GQLHistory, currentRESTSession, cu...
HIGH??????????NVD2 days ago
CVE-2026-68568
Subscriber Privilege Escalation in MasterStudy LMS <= 3.7.41 versions.
MEDIUM??????????NVD2 days ago
CVE-2026-68567
Unauthenticated Cross Site Scripting (XSS) in Convert Pro <= 1.0.1 versions.
HIGH??????????NVD2 days ago
CVE-2026-68565
Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions.
MEDIUM??????????NVD2 days ago
CVE-2026-66679
Unauthenticated Broken Access Control in Appointment Hour Booking <= 1.5.91 versions.
MEDIUM??????????NVD2 days ago
CVE-2026-66667
Unauthenticated Cross Site Scripting (XSS) in Templately <= 3.7.1 versions.
HIGH??????????NVD2 days ago
CVE-2026-66651
Unauthenticated Broken Access Control in MultiVendorX <= 5.0.14 versions.
MEDIUM??????????NVD2 days ago
CVE-2026-66646
Contributor Cross Site Scripting (XSS) in WP Tab Widget <= 1.2.11 versions.
MEDIUM??????????NVD2 days ago