CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-08-09 (2)

2026-08-09 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-08-09

2 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-15038 — 9.8 — The InfiniteWP Client WordPress plugin before 1.13.6 does not properly verify the site-connection state and the authenticity of requests to its remote-management endpoint on WordPress Multisite installations, allowing un…
  • CVE-2026-18473 — 9.1 — The WP Directory Kit WordPress plugin before 1.5.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users.

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.