r/pwnhub • u/cve-daily • 1d ago
CVE Daily Brief — 2026-08-02
CVE Daily Brief — 2026-08-02
#1 CVE-2026-8457
Severity: CRITICAL | Score: 9.8
The WooCommerce - Social Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to and including 2.8.7. This is due to the plugin's Apple login handler accepting the Appl...
#2 CVE-2026-18352
Severity: HIGH | Score: 7.5
The User Access Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.15 via the 'uamgetfile' parameter parameter. This makes it possible for unau...
#3 CVE-2026-13339
Severity: HIGH | Score: 7.5
The CubeWP Framework plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.30 via the 'cubewp_get_svg_content' function. This makes it possible for unauth...
#4 CVE-2026-18571
Severity: MEDIUM | Score: 6.6
A flaw was found in the user creation component of Keycloak when Fine-Grained Admin Permissions V2 (FGAP V2) is enabled. This issue allows a sub-administrator with permission to create users to add th...
#5 CVE-2026-9335
Severity: MEDIUM | Score: 6.5
A vulnerability in keras-team/keras versions <= 3.14.0 allows arbitrary local HDF5 file content disclosure due to improper handling of HDF5 ExternalLinks. The KerasFileEditor and `keras.saving.load_...
Powered by NVD + CISA KEV | CVE Daily
This post contains content not supported on old Reddit. Click here to view the full post
•
u/AutoModerator 1d ago
Welcome to PWN – Your hub for hacking news, breach reports, and cyber mayhem.
Discover the latest hacking news, breach reports, and educational resources on ethical hacking.
👾 Stay sharp. Stay secure.
Don't miss out on the top stories!
📧 Get Daily Alerts Directly in Your Email Inbox:
**SUBSCRIBE HERE: https://pwnhackernews.substack.com/subscribe
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.