CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-05-02 (3)

2026-05-02 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-05-02

3 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-4882 — 9.8 — The User Registration Advanced Fields plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'URAF_AJAX::method_upload' function in all versions up to, and including, 1.6.…
  • CVE-2026-7458 — 9.8 — The User Verification by PickPlugins plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.0.46. This is due to the use of a loose PHP comparison operator to validate OTP cod…
  • CVE-2026-43824 — 9.6 — In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.