5 vulnerabilities across 4 products scored HIGH or above on August 16, 2026.

  • 🟠 HIGH: 5

Exploit Status Upgrades

The following CVEs from previous bulletins have been upgraded based on new exploit intelligence:

  • [UPGRADED] CVE-2026-17083 (ibm/i) — F1: exploitable → functional, AAS: 10.9 → 12.9 (HIGH → CRITICAL). Originally in 2026-08-12 bulletin.
  • [UPGRADED] CVE-2026-72886 (dokploy/dokploy) — F1: exploitable → functional, AAS: 10.1 → 12.1 (HIGH → CRITICAL). Originally in 2026-08-10 bulletin.
  • [UPGRADED] CVE-2026-72882 (dokploy/dokploy) — F1: exploitable → functional, AAS: 10.1 → 12.1 (HIGH → CRITICAL). Originally in 2026-08-10 bulletin.
  • [UPGRADED] CVE-2026-72901 (dokploy/dokploy) — F1: exploitable → functional, AAS: 10.1 → 12.1 (HIGH → CRITICAL). Originally in 2026-08-10 bulletin.
  • [UPGRADED] CVE-2026-72737 (dokploy/dokploy) — F1: exploitable → functional, AAS: 9.7 → 11.7 (HIGH → HIGH). Originally in 2026-08-10 bulletin.

🟠 [HIGH] shabti/frontend_admin_by_dynamiapps

1 CVE | CVSS 3.1: 9.8 | AAS 10.9

  • cpe:2.3:a:shabti:frontend_admin_by_dynamiapps:*:*:*:*:*:*:*:* (< 3.29.10)

Frontend Admin by DynamiApps (WordPress Plugin) — 1 Critical Vulnerability

The Frontend Admin by DynamiApps plugin for WordPress contains a critical privilege escalation vulnerability (CVE-2026-18432, CVSS 9.8) affecting all versions through 3.29.9. The flaw stems from a flawed authorization check in the user action handler, where a numeric type check on the user ID parameter causes the capability verification to be bypassed entirely when a crafted non-numeric value is supplied. An attacker can exploit this to escalate privileges without authentication, potentially gaining full administrative control of the WordPress site.

All WordPress site administrators using the Frontend Admin by DynamiApps plugin should update immediately to a patched version beyond 3.29.9. If a patch is not yet available, consider temporarily disabling the plugin until a fix is released. This is particularly urgent for any site that exposes frontend user management forms to unauthenticated or low-privileged users.

Vendor Advisory

🟠 [HIGH] prosolution/prosolution_wp_client

2 CVEs | CVSS 3.1: 9.8 | AAS 10.9

  • cpe:2.3:a:prosolution:prosolution_wp_client:*:*:*:*:*:*:*:* (< 2.0.9)

ProSolution WP Client (WordPress Plugin) — 2 Critical Vulnerabilities

The ProSolution WP Client plugin for WordPress is affected by 2 vulnerabilities, including at least one rated CVSS 9.8, impacting all versions through 2.0.10. The most severe issue is an arbitrary file upload flaw in the file upload handler, where an attacker-controlled Content-Disposition header filename bypasses the allow-list validation, and a post-save extension check fails to remove the already-written malicious file. This allows unauthenticated attackers to upload executable files to the server, potentially achieving full remote code execution on the affected WordPress installation.

All WordPress administrators running the ProSolution WP Client plugin should update beyond version 2.0.10 immediately or disable the plugin until a patch is available. Given that exploitation requires no authentication, exposed sites are at significant risk of compromise. Security teams should also review web server logs for any signs of unexpected file uploads targeting the plugin’s upload handler.

Vendor Advisory

🟠 [HIGH] solacewp/solace_extra

1 CVE | CVSS 3.1: 9.1 | AAS 9.4

  • cpe:2.3:a:solacewp:solace_extra:*:*:*:*:*:*:*:* (< 1.6.1)

Solace Extra (WordPress Plugin) — 1 High-Severity Vulnerability

The Solace Extra plugin for WordPress contains a high-severity authorization bypass vulnerability (CVE-2026-18316, CVSS 9.1) affecting all versions through 1.6.0. The plugin’s ZIP import function is exposed to both authenticated and unauthenticated AJAX requests and relies solely on a nonce value for protection, but that nonce is leaked to all authenticated users — including subscribers — through the admin script localization hook. This allows low-privileged attackers to import arbitrary ZIP archives, leading to unauthorized modification or destruction of site data.

WordPress administrators using the Solace Extra plugin should update to a version beyond 1.6.0 immediately or deactivate the plugin until a fix is available. Any site that permits open user registration is especially at risk, as even subscriber-level accounts can exploit this flaw. Security teams should review site content for unauthorized changes that may indicate prior exploitation.

Vendor Advisory

🟠 [HIGH] wproyal/royal_addons_for_elementor_–_addons_and_templates_kit_for_elementor

1 CVE | CVSS 3.1: 8.8 | AAS 9.1

  • cpe:2.3:a:wproyal:royal_addons_for_elementor_addons_and_templates_kit_for_elementor:*:*:*:*:*:*:*:* (< 1.7.1065)

Royal Addons for Elementor (WordPress Plugin) — 1 High-Severity Vulnerability

The Royal Elementor Addons plugin for WordPress contains a server-side request forgery vulnerability (CVE-2026-17123, CVSS 8.8) affecting all versions through 1.7.1064. The Form Builder widget’s webhook URL setting allows an attacker with as little as Contributor-level access to inject an arbitrary URL that gets stored persistently during page rendering. An unauthenticated AJAX handler then reads and requests that URL without validation, enabling attackers to proxy requests through the server to internal services, cloud metadata endpoints, or other protected resources.

WordPress administrators using the Royal Elementor Addons plugin should update beyond version 1.7.1064 immediately or disable the plugin until a patch is available. Sites that allow Contributor or Author roles are particularly exposed, as these users can inject the malicious webhook URL simply by previewing a draft. Security teams should audit outbound server traffic for unusual requests that may indicate exploitation of this SSRF vector.

Vendor Advisory