Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: attack-types Clear
ID Title
CVE-2026-78071 Cross-Site Scripting (XSS) in CVE-2026-78071 (CVE-2026-78071)
cross-site scripting in CVE-2026-78071 (CVE-2026-78071). Risk of unauthorized operations or information disclosure.
CVE-2026-5510 Cross-Site Scripting (XSS) in wordpress (CVE-2026-5510)
cross-site scripting in wordpress (CVE-2026-5510). Risk of unauthorized operations or information disclosure.
CVE-2026-82241 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-82241)
SSRF in ssrf (CVE-2026-82241). Confidential information can be exposed externally. Exploitable via `POST /api/queries/preview`.
CVE-2026-82234 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-82234)
SSRF in ssrf (CVE-2026-82234). Confidential information can be exposed externally.
CVE-2026-6128 Cross-Site Scripting (XSS) in wordpress (CVE-2026-6128)
cross-site scripting in wordpress (CVE-2026-6128). Risk of unauthorized operations or information disclosure.
CVE-2026-82233 Path Traversal in path-traversal (CVE-2026-82233)
path traversal in path-traversal (CVE-2026-82233). Confidential information can be exposed externally.
CVE-2026-82111 Path Traversal in path-traversal (CVE-2026-82111)
path traversal in path-traversal (CVE-2026-82111). Risk of unauthorized operations or information disclosure.
CVE-2026-82222 Unsafe Deserialization in deserialization (CVE-2026-82222)
vulnerability in deserialization (CVE-2026-82222). Successful exploitation can lead to full system takeover.
CVE-2026-81777 Vulnerability in CVE-2026-81777 (CVE-2026-81777)
vulnerability in CVE-2026-81777 (CVE-2026-81777). Risk of unauthorized operations or information disclosure.
CVE-2026-73209 Vulnerability in dos (CVE-2026-73209)
vulnerability in dos (CVE-2026-73209). Risk of unauthorized operations or information disclosure.
CVE-2026-18393 Out-of-Bounds Write in dos (CVE-2026-18393)
out-of-bounds write in dos (CVE-2026-18393). Risk of unauthorized operations or information disclosure.
CVE-2026-33605 Vulnerability in dos (CVE-2026-33605)
vulnerability in dos (CVE-2026-33605). Risk of unauthorized operations or information disclosure.
CVE-2026-52687 Vulnerability in dos (CVE-2026-52687)
vulnerability in dos (CVE-2026-52687). Risk of unauthorized operations or information disclosure.
CVE-2026-42391 Vulnerability in dos (CVE-2026-42391)
vulnerability in dos (CVE-2026-42391). Risk of unauthorized operations or information disclosure.
CVE-2026-33607 Vulnerability in dos (CVE-2026-33607)
vulnerability in dos (CVE-2026-33607). Risk of unauthorized operations or information disclosure.
CVE-2026-40017 Vulnerability in dos (CVE-2026-40017)
vulnerability in dos (CVE-2026-40017). Risk of unauthorized operations or information disclosure.
CVE-2026-40014 Vulnerability in dos (CVE-2026-40014)
vulnerability in dos (CVE-2026-40014). Risk of unauthorized operations or information disclosure.
CVE-2026-40019 Vulnerability in dos (CVE-2026-40019)
vulnerability in dos (CVE-2026-40019). Risk of unauthorized operations or information disclosure.
CVE-2026-42395 Vulnerability in dos (CVE-2026-42395)
vulnerability in dos (CVE-2026-42395). Risk of unauthorized operations or information disclosure.
CVE-2026-40013 Vulnerability in dos (CVE-2026-40013)
vulnerability in dos (CVE-2026-40013). Risk of unauthorized operations or information disclosure.
CVE-2026-27852 Vulnerability in dos (CVE-2026-27852)
vulnerability in dos (CVE-2026-27852). Risk of unauthorized operations or information disclosure.
CVE-2026-9548 Cross-Site Scripting (XSS) in CVE-2026-9548 (CVE-2026-9548)
cross-site scripting in CVE-2026-9548 (CVE-2026-9548). Risk of unauthorized operations or information disclosure.
CVE-2026-9491 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-9491)
SSRF in ssrf (CVE-2026-9491). Risk of unauthorized operations or information disclosure.
CVE-2026-82123 Cross-Site Scripting (XSS) in CVE-2026-82123 (CVE-2026-82123)
cross-site scripting in CVE-2026-82123 (CVE-2026-82123). Risk of unauthorized operations or information disclosure.
CVE-2026-78238 Cross-Site Scripting (XSS) in CVE-2026-78238 (CVE-2026-78238)
cross-site scripting in CVE-2026-78238 (CVE-2026-78238). Risk of unauthorized operations or information disclosure.
CVE-2026-5097 SQL Injection in wordpress (CVE-2026-5097)
SQL injection in wordpress (CVE-2026-5097). Confidential information can be exposed externally.
CVE-2026-77838 Cross-Site Scripting (XSS) in CVE-2026-77838 (CVE-2026-77838)
cross-site scripting in CVE-2026-77838 (CVE-2026-77838). Risk of unauthorized operations or information disclosure.
CVE-2026-73827 Cross-Site Scripting (XSS) in CVE-2026-73827 (CVE-2026-73827)
cross-site scripting in CVE-2026-73827 (CVE-2026-73827). Risk of unauthorized operations or information disclosure.
CVE-2026-6286 Cross-Site Scripting (XSS) in wordpress (CVE-2026-6286)
cross-site scripting in wordpress (CVE-2026-6286). Risk of unauthorized operations or information disclosure.
CVE-2026-78032 Unsafe Deserialization in deserialization (CVE-2026-78032)
vulnerability in deserialization (CVE-2026-78032). Successful exploitation can lead to full system takeover.
CVE-2026-76581 Vulnerability in wordpress (CVE-2026-76581)
vulnerability in wordpress (CVE-2026-76581). Successful exploitation can lead to full system takeover. Exploitable via ``wdpsso_step1``.
CVE-2026-12513 Vulnerability in wordpress (CVE-2026-12513)
vulnerability in wordpress (CVE-2026-12513). Data can be tampered with by attackers.
CVE-2026-14558 Unsafe Deserialization in wordpress (CVE-2026-14558)
vulnerability in wordpress (CVE-2026-14558). Successful exploitation can lead to full system takeover.
CVE-2026-4246 Cross-Site Scripting (XSS) in wordpress (CVE-2026-4246)
cross-site scripting in wordpress (CVE-2026-4246). Risk of unauthorized operations or information disclosure.
CVE-2026-40541 Cross-Site Scripting (XSS) in CVE-2026-40541 (CVE-2026-40541)
cross-site scripting in CVE-2026-40541 (CVE-2026-40541). Successful exploitation can lead to full system takeover.
CVE-2026-82090 Cross-Site Scripting (XSS) in CVE-2026-82090 (CVE-2026-82090)
cross-site scripting in CVE-2026-82090 (CVE-2026-82090). Risk of unauthorized operations or information disclosure.
CVE-2026-82089 Cross-Site Scripting (XSS) in CVE-2026-82089 (CVE-2026-82089)
cross-site scripting in CVE-2026-82089 (CVE-2026-82089). Risk of unauthorized operations or information disclosure.
CVE-2026-82081 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-82081)
SSRF in ssrf (CVE-2026-82081). Risk of unauthorized operations or information disclosure.
CVE-2026-77365 Cross-Site Scripting (XSS) in wordpress (CVE-2026-77365)
cross-site scripting in wordpress (CVE-2026-77365). Risk of unauthorized operations or information disclosure.
CVE-2026-76053 Cross-Site Scripting (XSS) in wordpress (CVE-2026-76053)
cross-site scripting in wordpress (CVE-2026-76053). Risk of unauthorized operations or information disclosure.
CVE-2026-18983 Unrestricted File Upload in wordpress (CVE-2026-18983)
vulnerability in wordpress (CVE-2026-18983). Successful exploitation can lead to full system takeover.
CVE-2026-3129 Cross-Site Scripting (XSS) in wordpress (CVE-2026-3129)
cross-site scripting in wordpress (CVE-2026-3129). Risk of unauthorized operations or information disclosure. Exploitable via ``width``.
CVE-2026-18978 Cross-Site Scripting (XSS) in wordpress (CVE-2026-18978)
cross-site scripting in wordpress (CVE-2026-18978). Risk of unauthorized operations or information disclosure.
CVE-2026-18324 Cross-Site Scripting (XSS) in wordpress (CVE-2026-18324)
cross-site scripting in wordpress (CVE-2026-18324). Risk of unauthorized operations or information disclosure.
CVE-2026-16654 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16654)
cross-site scripting in wordpress (CVE-2026-16654). Risk of unauthorized operations or information disclosure.
CVE-2026-15798 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15798)
cross-site scripting in wordpress (CVE-2026-15798). Risk of unauthorized operations or information disclosure.
CVE-2026-16759 Vulnerability in wordpress (CVE-2026-16759)
vulnerability in wordpress (CVE-2026-16759). Risk of unauthorized operations or information disclosure.
CVE-2026-78615 Cross-Site Scripting (XSS) in CVE-2026-78615 (CVE-2026-78615)
cross-site scripting in CVE-2026-78615 (CVE-2026-78615). Risk of unauthorized operations or information disclosure.
CVE-2026-78616 Cross-Site Scripting (XSS) in CVE-2026-78616 (CVE-2026-78616)
cross-site scripting in CVE-2026-78616 (CVE-2026-78616). Risk of unauthorized operations or information disclosure.
CVE-2026-78614 SQL Injection in sqli (CVE-2026-78614)
SQL injection in sqli (CVE-2026-78614). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →