Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-15293 |
|
Vulnerability in wordpress (CVE-2026-15293)
vulnerability in wordpress (CVE-2026-15293). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15292 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15292)
cross-site scripting in wordpress (CVE-2026-15292). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15301 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15301)
cross-site scripting in wordpress (CVE-2026-15301). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15297 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15297)
cross-site scripting in wordpress (CVE-2026-15297). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15296 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15296)
cross-site scripting in wordpress (CVE-2026-15296). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15298 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15298)
cross-site scripting in wordpress (CVE-2026-15298). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15299 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15299)
cross-site scripting in wordpress (CVE-2026-15299). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15300 |
|
SQL Injection in wordpress (CVE-2026-15300)
SQL injection in wordpress (CVE-2026-15300). Data can be tampered with by attackers. Mitigation: upgrade to `4.5.5` or later.
|
| CVE-2026-21052 |
|
Vulnerability in path-traversal (CVE-2026-21052)
vulnerability in path-traversal (CVE-2026-21052). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-21043 |
|
Vulnerability in path-traversal (CVE-2026-21043)
vulnerability in path-traversal (CVE-2026-21043). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15331 |
|
Path Traversal in path-traversal (CVE-2026-15331)
path traversal in path-traversal (CVE-2026-15331). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15302 |
|
Vulnerability in wordpress (CVE-2026-15302)
vulnerability in wordpress (CVE-2026-15302). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15282 |
|
Unrestricted File Upload in wordpress (CVE-2026-15282)
vulnerability in wordpress (CVE-2026-15282). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13430 |
|
Unrestricted File Upload in wordpress (CVE-2026-13430)
vulnerability in wordpress (CVE-2026-13430). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15070 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-15070)
vulnerability in wordpress (CVE-2026-15070). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14894 |
|
Unrestricted File Upload in wordpress (CVE-2026-14894)
vulnerability in wordpress (CVE-2026-14894). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15284 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15284)
cross-site scripting in wordpress (CVE-2026-15284). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15283 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15283)
cross-site scripting in wordpress (CVE-2026-15283). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15285 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15285)
cross-site scripting in wordpress (CVE-2026-15285). Risk of unauthorized operations or information disclosure. Exploitable via ``custom_attributes``.
|
| CVE-2026-15321 |
|
Cross-Site Scripting (XSS) in CVE-2026-15321 (CVE-2026-15321)
cross-site scripting in CVE-2026-15321 (CVE-2026-15321). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11392 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-11392)
cross-site scripting in wordpress (CVE-2026-11392). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15287 |
|
SQL Injection in wordpress (CVE-2026-15287)
SQL injection in wordpress (CVE-2026-15287). Confidential information can be exposed externally.
|
| CVE-2026-15290 |
|
SQL Injection in wordpress (CVE-2026-15290)
SQL injection in wordpress (CVE-2026-15290). Confidential information can be exposed externally.
|
| CVE-2026-15289 |
|
SQL Injection in wordpress (CVE-2026-15289)
SQL injection in wordpress (CVE-2026-15289). Confidential information can be exposed externally.
|
| CVE-2026-15326 |
|
Path Traversal in path-traversal (CVE-2026-15326)
path traversal in path-traversal (CVE-2026-15326). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15311 |
|
Cross-Site Scripting (XSS) in CVE-2026-15311 (CVE-2026-15311)
cross-site scripting in CVE-2026-15311 (CVE-2026-15311). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12595 |
|
Authentication Bypass in wordpress (CVE-2026-12595)
authentication bypass in wordpress (CVE-2026-12595). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12597 |
|
Authentication Bypass in wordpress (CVE-2026-12597)
authentication bypass in wordpress (CVE-2026-12597). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12598 |
|
Authentication Bypass in wordpress (CVE-2026-12598)
authentication bypass in wordpress (CVE-2026-12598). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59833 |
|
Cross-Site Scripting (XSS) in CVE-2026-59833 (CVE-2026-59833)
cross-site scripting in CVE-2026-59833 (CVE-2026-59833). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58123 |
|
Vulnerability in CVE-2026-58123 (CVE-2026-58123)
vulnerability in CVE-2026-58123 (CVE-2026-58123). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58143 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-58143)
vulnerability in csrf (CVE-2026-58143). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58144 |
|
Cross-Site Scripting (XSS) in CVE-2026-58144 (CVE-2026-58144)
cross-site scripting in CVE-2026-58144 (CVE-2026-58144). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58122 |
|
Vulnerability in CVE-2026-58122 (CVE-2026-58122)
vulnerability in CVE-2026-58122 (CVE-2026-58122). Confidential information can be exposed externally.
|
| CVE-2026-57032 |
|
Vulnerability in dos (CVE-2026-57032)
vulnerability in dos (CVE-2026-57032). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57027 |
|
Vulnerability in dos (CVE-2026-57027)
vulnerability in dos (CVE-2026-57027). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57029 |
|
Vulnerability in dos (CVE-2026-57029)
vulnerability in dos (CVE-2026-57029). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57030 |
|
Vulnerability in dos (CVE-2026-57030)
vulnerability in dos (CVE-2026-57030). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57021 |
|
Out-of-Bounds Write in dos (CVE-2026-57021)
out-of-bounds write in dos (CVE-2026-57021). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57022 |
|
Vulnerability in dos (CVE-2026-57022)
vulnerability in dos (CVE-2026-57022). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57023 |
|
Vulnerability in dos (CVE-2026-57023)
vulnerability in dos (CVE-2026-57023). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57024 |
|
Vulnerability in dos (CVE-2026-57024)
vulnerability in dos (CVE-2026-57024). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57025 |
|
Vulnerability in dos (CVE-2026-57025)
vulnerability in dos (CVE-2026-57025). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57026 |
|
Vulnerability in dos (CVE-2026-57026)
vulnerability in dos (CVE-2026-57026). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57019 |
|
Vulnerability in dos (CVE-2026-57019)
vulnerability in dos (CVE-2026-57019). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57020 |
|
Vulnerability in dos (CVE-2026-57020)
vulnerability in dos (CVE-2026-57020). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53963 |
|
Cross-Site Scripting (XSS) in discourse (CVE-2026-53963)
cross-site scripting in discourse (CVE-2026-53963). Confidential information can be exposed externally.
|
| CVE-2026-53962 |
|
Cross-Site Scripting (XSS) in discourse (CVE-2026-53962)
cross-site scripting in discourse (CVE-2026-53962). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39245 |
|
Path Traversal in path-traversal (CVE-2026-39245)
path traversal in path-traversal (CVE-2026-39245). Data can be tampered with by attackers.
|
| CVE-2026-15274 |
|
Vulnerability in dos (CVE-2026-15274)
vulnerability in dos (CVE-2026-15274). Risk of unauthorized operations or information disclosure.
|