CVE-2026-19598

CVE-2026-19598: Pods Plugin Flaw Enables Complete Site Takeover, Attacks Seen in the Wild

Do Son August 21, 2026

TL;DR CVE-2026-19598 is a CVSS 9.8 privilege escalation flaw in the Pods WordPress plugin. It lets unauthenticated...

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2026-97229CVSS 10.0
GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary...
Admin intel📅 Updated: Oct 29, 2026
CVE-2026-76418CVSS 8.6
A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software...
Admin intel📅 Updated: Oct 29, 2026
CVE-2026-116690CVSS 7.5
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From...
Admin intel📅 Updated: Oct 28, 2026
CVE-2026-101767CVSS 9.8
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are...
Admin intel📅 Updated: Oct 28, 2026
CVE-2020-13125CVSS 7.2
An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
Watchtower Verified📅 Updated: Oct 28, 2026
CVE-2020-13126CVSS 9.9
An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
Watchtower Verified📅 Updated: Oct 28, 2026
CVE-2019-20180CVSS 8.0
The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
Watchtower Verified📅 Updated: Oct 28, 2026
CVE-2016-20097CVSS 8.7
Weaver (Fanwei) E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet that allows unauthenticated remote attackers...
Watchtower Verified📅 Updated: Oct 28, 2026

CVE-2026-97229CVSS 10.0
GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary...
Admin intel📅 Updated: Oct 28, 2026
CVE-2026-61567CVSS 10.0
AVideo is a video-sharing Platform. Prior to 8.1.0, the live-streaming endpoint `view/videosListToLive.php` accepts an attacker-named streamer in `webSiteRootURL`,...
📅 Updated: Oct 28, 2026
CVE-2026-61564CVSS 10.0
AVideo is a video-sharing Platform. Prior to 8.1.0, the unauthenticated installer endpoint `install/checkConfiguration.php` assembles `videos/configuration.php` by interpolating request...
📅 Updated: Oct 28, 2026
CVE-2026-91243CVSS 9.6
Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions...
📅 Updated: Oct 28, 2026
CVE-2026-91250CVSS 9.9
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected...
📅 Updated: Oct 28, 2026
CVE-2026-91251CVSS 9.9
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected...
📅 Updated: Oct 28, 2026
CVE-2026-91241CVSS 9.1
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Administration). Supported versions...
📅 Updated: Oct 28, 2026
CVE-2026-118690CVSS 9.3
Signal K Server before 2.33.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to download log...
📅 Updated: Oct 28, 2026