Daily High-Risk Vuln Digest 2026-08-30 (2)

Daily High-Risk Vulnerability Digest · 2026-08-30

2 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

• CVE-2026-15369 — 9.8 — The Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.3. This is due to the plugin accepting an attacker-controlled afreg_sel…
• CVE-2026-15980 — 9.8 — The MyHome Core plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 4.4.5. This is due to missing authorization in the send_link() AJAX handler and improper token validation …

---

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.