Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-78071 |
|
Cross-Site Scripting (XSS) in CVE-2026-78071 (CVE-2026-78071)
cross-site scripting in CVE-2026-78071 (CVE-2026-78071). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5510 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-5510)
cross-site scripting in wordpress (CVE-2026-5510). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82241 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-82241)
SSRF in ssrf (CVE-2026-82241). Confidential information can be exposed externally. Exploitable via `POST /api/queries/preview`.
|
| CVE-2026-82234 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-82234)
SSRF in ssrf (CVE-2026-82234). Confidential information can be exposed externally.
|
| CVE-2026-6128 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-6128)
cross-site scripting in wordpress (CVE-2026-6128). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82233 |
|
Path Traversal in path-traversal (CVE-2026-82233)
path traversal in path-traversal (CVE-2026-82233). Confidential information can be exposed externally.
|
| CVE-2026-82111 |
|
Path Traversal in path-traversal (CVE-2026-82111)
path traversal in path-traversal (CVE-2026-82111). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82222 |
|
Unsafe Deserialization in deserialization (CVE-2026-82222)
vulnerability in deserialization (CVE-2026-82222). Successful exploitation can lead to full system takeover.
|
| CVE-2026-81777 |
|
Vulnerability in CVE-2026-81777 (CVE-2026-81777)
vulnerability in CVE-2026-81777 (CVE-2026-81777). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73209 |
|
Vulnerability in dos (CVE-2026-73209)
vulnerability in dos (CVE-2026-73209). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18393 |
|
Out-of-Bounds Write in dos (CVE-2026-18393)
out-of-bounds write in dos (CVE-2026-18393). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-33605 |
|
Vulnerability in dos (CVE-2026-33605)
vulnerability in dos (CVE-2026-33605). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-52687 |
|
Vulnerability in dos (CVE-2026-52687)
vulnerability in dos (CVE-2026-52687). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-42391 |
|
Vulnerability in dos (CVE-2026-42391)
vulnerability in dos (CVE-2026-42391). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-33607 |
|
Vulnerability in dos (CVE-2026-33607)
vulnerability in dos (CVE-2026-33607). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40017 |
|
Vulnerability in dos (CVE-2026-40017)
vulnerability in dos (CVE-2026-40017). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40014 |
|
Vulnerability in dos (CVE-2026-40014)
vulnerability in dos (CVE-2026-40014). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40019 |
|
Vulnerability in dos (CVE-2026-40019)
vulnerability in dos (CVE-2026-40019). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-42395 |
|
Vulnerability in dos (CVE-2026-42395)
vulnerability in dos (CVE-2026-42395). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40013 |
|
Vulnerability in dos (CVE-2026-40013)
vulnerability in dos (CVE-2026-40013). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27852 |
|
Vulnerability in dos (CVE-2026-27852)
vulnerability in dos (CVE-2026-27852). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9548 |
|
Cross-Site Scripting (XSS) in CVE-2026-9548 (CVE-2026-9548)
cross-site scripting in CVE-2026-9548 (CVE-2026-9548). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9491 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-9491)
SSRF in ssrf (CVE-2026-9491). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82123 |
|
Cross-Site Scripting (XSS) in CVE-2026-82123 (CVE-2026-82123)
cross-site scripting in CVE-2026-82123 (CVE-2026-82123). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78238 |
|
Cross-Site Scripting (XSS) in CVE-2026-78238 (CVE-2026-78238)
cross-site scripting in CVE-2026-78238 (CVE-2026-78238). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5097 |
|
SQL Injection in wordpress (CVE-2026-5097)
SQL injection in wordpress (CVE-2026-5097). Confidential information can be exposed externally.
|
| CVE-2026-77838 |
|
Cross-Site Scripting (XSS) in CVE-2026-77838 (CVE-2026-77838)
cross-site scripting in CVE-2026-77838 (CVE-2026-77838). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73827 |
|
Cross-Site Scripting (XSS) in CVE-2026-73827 (CVE-2026-73827)
cross-site scripting in CVE-2026-73827 (CVE-2026-73827). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6286 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-6286)
cross-site scripting in wordpress (CVE-2026-6286). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78032 |
|
Unsafe Deserialization in deserialization (CVE-2026-78032)
vulnerability in deserialization (CVE-2026-78032). Successful exploitation can lead to full system takeover.
|
| CVE-2026-76581 |
|
Vulnerability in wordpress (CVE-2026-76581)
vulnerability in wordpress (CVE-2026-76581). Successful exploitation can lead to full system takeover. Exploitable via ``wdpsso_step1``.
|
| CVE-2026-12513 |
|
Vulnerability in wordpress (CVE-2026-12513)
vulnerability in wordpress (CVE-2026-12513). Data can be tampered with by attackers.
|
| CVE-2026-14558 |
|
Unsafe Deserialization in wordpress (CVE-2026-14558)
vulnerability in wordpress (CVE-2026-14558). Successful exploitation can lead to full system takeover.
|
| CVE-2026-4246 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-4246)
cross-site scripting in wordpress (CVE-2026-4246). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40541 |
|
Cross-Site Scripting (XSS) in CVE-2026-40541 (CVE-2026-40541)
cross-site scripting in CVE-2026-40541 (CVE-2026-40541). Successful exploitation can lead to full system takeover.
|
| CVE-2026-82090 |
|
Cross-Site Scripting (XSS) in CVE-2026-82090 (CVE-2026-82090)
cross-site scripting in CVE-2026-82090 (CVE-2026-82090). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82089 |
|
Cross-Site Scripting (XSS) in CVE-2026-82089 (CVE-2026-82089)
cross-site scripting in CVE-2026-82089 (CVE-2026-82089). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82081 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-82081)
SSRF in ssrf (CVE-2026-82081). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77365 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-77365)
cross-site scripting in wordpress (CVE-2026-77365). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76053 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-76053)
cross-site scripting in wordpress (CVE-2026-76053). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18983 |
|
Unrestricted File Upload in wordpress (CVE-2026-18983)
vulnerability in wordpress (CVE-2026-18983). Successful exploitation can lead to full system takeover.
|
| CVE-2026-3129 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-3129)
cross-site scripting in wordpress (CVE-2026-3129). Risk of unauthorized operations or information disclosure. Exploitable via ``width``.
|
| CVE-2026-18978 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-18978)
cross-site scripting in wordpress (CVE-2026-18978). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18324 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-18324)
cross-site scripting in wordpress (CVE-2026-18324). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16654 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16654)
cross-site scripting in wordpress (CVE-2026-16654). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15798 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15798)
cross-site scripting in wordpress (CVE-2026-15798). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16759 |
|
Vulnerability in wordpress (CVE-2026-16759)
vulnerability in wordpress (CVE-2026-16759). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78615 |
|
Cross-Site Scripting (XSS) in CVE-2026-78615 (CVE-2026-78615)
cross-site scripting in CVE-2026-78615 (CVE-2026-78615). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78616 |
|
Cross-Site Scripting (XSS) in CVE-2026-78616 (CVE-2026-78616)
cross-site scripting in CVE-2026-78616 (CVE-2026-78616). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78614 |
|
SQL Injection in sqli (CVE-2026-78614)
SQL injection in sqli (CVE-2026-78614). Risk of unauthorized operations or information disclosure.
|