Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-55734 |
|
Vulnerability in dos (CVE-2026-55734)
vulnerability in dos (CVE-2026-55734). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55733 |
|
Vulnerability in dos (CVE-2026-55733)
vulnerability in dos (CVE-2026-55733). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54894 |
|
Vulnerability in dos (CVE-2026-54894)
vulnerability in dos (CVE-2026-54894). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67353 |
|
Vulnerability in guzzlehttp/guzzle (CVE-2026-67353)
vulnerability in guzzlehttp/guzzle (CVE-2026-67353). Risk of unauthorized operations or information disclosure. Exploitable via ``CookieJar``. Mitigation: upgrade to `7.15.1` or later.
|
| CVE-2026-67352 |
|
Cross-Site Scripting (XSS) in CVE-2026-67352 (CVE-2026-67352)
cross-site scripting in CVE-2026-67352 (CVE-2026-67352). Confidential information can be exposed externally.
|
| CVE-2026-67338 |
|
Vulnerability in CVE-2026-67338 (CVE-2026-67338)
vulnerability in CVE-2026-67338 (CVE-2026-67338). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67337 |
|
Vulnerability in CVE-2026-67337 (CVE-2026-67337)
vulnerability in CVE-2026-67337 (CVE-2026-67337). Confidential information can be exposed externally.
|
| CVE-2026-67326 |
|
Vulnerability in CVE-2026-67326 (CVE-2026-67326)
vulnerability in CVE-2026-67326 (CVE-2026-67326). Successful exploitation can lead to full system takeover.
|
| CVE-2026-67328 |
|
Cross-Site Scripting (XSS) in CVE-2026-67328 (CVE-2026-67328)
cross-site scripting in CVE-2026-67328 (CVE-2026-67328). Confidential information can be exposed externally.
|
| CVE-2026-67321 |
|
Vulnerability in dos (CVE-2026-67321)
vulnerability in dos (CVE-2026-67321). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67312 |
|
Vulnerability in dos (CVE-2026-67312)
vulnerability in dos (CVE-2026-67312). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67309 |
|
Path Traversal in github.com/traefik/traefik/v3 (CVE-2026-67309)
path traversal in github.com/traefik/traefik/v3 (CVE-2026-67309). Risk of unauthorized operations or information disclosure. Exploitable via ``RewriteTarget``. Mitigation: upgrade to `3.7.8` or later.
|
| CVE-2026-67305 |
|
Vulnerability in CVE-2026-67305 (CVE-2026-67305)
vulnerability in CVE-2026-67305 (CVE-2026-67305). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67303 |
|
Vulnerability in c (CVE-2026-67303)
vulnerability in c (CVE-2026-67303). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67296 |
|
Vulnerability in dos (CVE-2026-67296)
vulnerability in dos (CVE-2026-67296). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67292 |
|
Vulnerability in c (CVE-2026-67292)
vulnerability in c (CVE-2026-67292). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66401 |
|
Out-of-Bounds Read in dos (CVE-2026-66401)
vulnerability in dos (CVE-2026-66401). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10773 |
|
Out-of-Bounds Read in c (CVE-2026-10773)
vulnerability in c (CVE-2026-10773). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71404 |
|
Cross-Site Scripting (XSS) in CVE-2025-71404 (CVE-2025-71404)
cross-site scripting in CVE-2025-71404 (CVE-2025-71404). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6453 |
|
SQL Injection in wordpress (CVE-2026-6453)
SQL injection in wordpress (CVE-2026-6453). Confidential information can be exposed externally.
|
| CVE-2026-18435 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-18435)
cross-site scripting in wordpress (CVE-2026-18435). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18344 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-18344)
cross-site scripting in wordpress (CVE-2026-18344). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18062 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-18062)
cross-site scripting in wordpress (CVE-2026-18062). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17555 |
|
SQL Injection in wordpress (CVE-2026-17555)
SQL injection in wordpress (CVE-2026-17555). Confidential information can be exposed externally.
|
| CVE-2026-17571 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-17571)
cross-site scripting in wordpress (CVE-2026-17571). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16685 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16685)
cross-site scripting in wordpress (CVE-2026-16685). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16684 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16684)
cross-site scripting in wordpress (CVE-2026-16684). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15951 |
|
SQL Injection in wordpress (CVE-2026-15951)
SQL injection in wordpress (CVE-2026-15951). Confidential information can be exposed externally. Exploitable via ``fields``.
|
| CVE-2026-16087 |
|
SQL Injection in wordpress (CVE-2026-16087)
SQL injection in wordpress (CVE-2026-16087). Confidential information can be exposed externally.
|
| CVE-2026-16614 |
|
SQL Injection in wordpress (CVE-2026-16614)
SQL injection in wordpress (CVE-2026-16614). Confidential information can be exposed externally.
|
| CVE-2026-16091 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16091)
cross-site scripting in wordpress (CVE-2026-16091). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16090 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16090)
cross-site scripting in wordpress (CVE-2026-16090). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16144 |
|
Code Injection in wordpress (CVE-2026-16144)
code injection in wordpress (CVE-2026-16144). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16635 |
|
Privilege Escalation in wordpress (CVE-2026-16635)
vulnerability in wordpress (CVE-2026-16635). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15964 |
|
Vulnerability in wordpress (CVE-2026-15964)
vulnerability in wordpress (CVE-2026-15964). Successful exploitation can lead to full system takeover. Exploitable via ``wp_ajax_nopriv_ssoprocess_ajax``.
|
| CVE-2026-15450 |
|
Path Traversal in wordpress (CVE-2026-15450)
path traversal in wordpress (CVE-2026-15450). Data can be tampered with by attackers.
|
| CVE-2026-15644 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15644)
cross-site scripting in wordpress (CVE-2026-15644). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15645 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15645)
cross-site scripting in wordpress (CVE-2026-15645). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15649 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15649)
cross-site scripting in wordpress (CVE-2026-15649). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15662 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15662)
cross-site scripting in wordpress (CVE-2026-15662). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15950 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15950)
cross-site scripting in wordpress (CVE-2026-15950). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15601 |
|
Path Traversal in wordpress (CVE-2026-15601)
path traversal in wordpress (CVE-2026-15601). Confidential information can be exposed externally.
|
| CVE-2026-13458 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13458)
cross-site scripting in wordpress (CVE-2026-13458). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15052 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15052)
cross-site scripting in wordpress (CVE-2026-15052). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15018 |
|
SQL Injection in wordpress (CVE-2026-15018)
SQL injection in wordpress (CVE-2026-15018). Confidential information can be exposed externally.
|
| CVE-2026-15988 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-15988)
vulnerability in wordpress (CVE-2026-15988). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15932 |
|
Path Traversal in wordpress (CVE-2026-15932)
path traversal in wordpress (CVE-2026-15932). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15244 |
|
Path Traversal in c (CVE-2026-15244)
path traversal in c (CVE-2026-15244). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13725 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13725)
cross-site scripting in wordpress (CVE-2026-13725). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13729 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-13729)
vulnerability in wordpress (CVE-2026-13729). Risk of unauthorized operations or information disclosure.
|