Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-16594 |
|
Information Disclosure in wordpress (CVE-2026-16594)
vulnerability in wordpress (CVE-2026-16594). Confidential information can be exposed externally.
|
| CVE-2026-16590 |
|
Information Disclosure in wordpress (CVE-2026-16590)
vulnerability in wordpress (CVE-2026-16590). Confidential information can be exposed externally.
|
| CVE-2026-16589 |
|
SQL Injection in wordpress (CVE-2026-16589)
SQL injection in wordpress (CVE-2026-16589). Confidential information can be exposed externally.
|
| CVE-2026-16578 |
|
Information Disclosure in wordpress (CVE-2026-16578)
vulnerability in wordpress (CVE-2026-16578). Confidential information can be exposed externally.
|
| CVE-2026-16574 |
|
Vulnerability in wordpress (CVE-2026-16574)
vulnerability in wordpress (CVE-2026-16574). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16562 |
|
Information Disclosure in wordpress (CVE-2026-16562)
vulnerability in wordpress (CVE-2026-16562). Confidential information can be exposed externally.
|
| CVE-2026-16559 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16559)
cross-site scripting in wordpress (CVE-2026-16559). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16558 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16558)
cross-site scripting in wordpress (CVE-2026-16558). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16535 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16535)
cross-site scripting in wordpress (CVE-2026-16535). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16282 |
|
Authentication Bypass in wordpress (CVE-2026-16282)
authentication bypass in wordpress (CVE-2026-16282). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16269 |
|
Authentication Bypass in wordpress (CVE-2026-16269)
authentication bypass in wordpress (CVE-2026-16269). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16267 |
|
Unsafe Deserialization in wordpress (CVE-2026-16267)
vulnerability in wordpress (CVE-2026-16267). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14526 |
|
Privilege Escalation in wordpress (CVE-2026-14526)
vulnerability in wordpress (CVE-2026-14526). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18988 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-18988)
cross-site scripting in wordpress (CVE-2026-18988). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64638 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-64638)
cross-site scripting in wordpress (CVE-2026-64638). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48093 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-48093)
cross-site scripting in wordpress (CVE-2026-48093). Risk of unauthorized operations or information disclosure. Exploitable via ``unfiltered_html``.
|
| CVE-2026-48094 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-48094)
cross-site scripting in wordpress (CVE-2026-48094). Risk of unauthorized operations or information disclosure. Exploitable via ``href``.
|
| CVE-2026-15148 |
|
Vulnerability in wordpress (CVE-2026-15148)
vulnerability in wordpress (CVE-2026-15148). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15211 |
|
Vulnerability in wordpress (CVE-2026-15211)
vulnerability in wordpress (CVE-2026-15211). Data can be tampered with by attackers.
|
| CVE-2026-15239 |
|
Vulnerability in wordpress (CVE-2026-15239)
vulnerability in wordpress (CVE-2026-15239). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16258 |
|
Unsafe Deserialization in wordpress (CVE-2026-16258)
vulnerability in wordpress (CVE-2026-16258). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14331 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14331)
cross-site scripting in wordpress (CVE-2026-14331). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15359 |
|
Vulnerability in wordpress (CVE-2026-15359)
vulnerability in wordpress (CVE-2026-15359). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14205 |
|
Authentication Bypass in wordpress (CVE-2026-14205)
authentication bypass in wordpress (CVE-2026-14205). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16262 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-16262)
vulnerability in wordpress (CVE-2026-16262). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15214 |
|
Vulnerability in wordpress (CVE-2026-15214)
vulnerability in wordpress (CVE-2026-15214). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16263 |
|
Path Traversal in wordpress (CVE-2026-16263)
path traversal in wordpress (CVE-2026-16263). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15386 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15386)
cross-site scripting in wordpress (CVE-2026-15386). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15361 |
|
SQL Injection in wordpress (CVE-2026-15361)
SQL injection in wordpress (CVE-2026-15361). Confidential information can be exposed externally.
|
| CVE-2026-14943 |
|
Information Disclosure in wordpress (CVE-2026-14943)
vulnerability in wordpress (CVE-2026-14943). Confidential information can be exposed externally. Mitigation: upgrade to `2.6.7` or later.
|
| CVE-2026-16039 |
|
Vulnerability in wordpress (CVE-2026-16039)
vulnerability in wordpress (CVE-2026-16039). Confidential information can be exposed externally.
|
| CVE-2026-15032 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15032)
cross-site scripting in wordpress (CVE-2026-15032). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16041 |
|
Vulnerability in wordpress (CVE-2026-16041)
vulnerability in wordpress (CVE-2026-16041). Data can be tampered with by attackers.
|
| CVE-2026-15215 |
|
Privilege Escalation in wordpress (CVE-2026-15215)
vulnerability in wordpress (CVE-2026-15215). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16265 |
|
Vulnerability in wordpress (CVE-2026-16265)
vulnerability in wordpress (CVE-2026-16265). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15245 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15245)
cross-site scripting in wordpress (CVE-2026-15245). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16030 |
|
Authentication Bypass in wordpress (CVE-2026-16030)
authentication bypass in wordpress (CVE-2026-16030). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16038 |
|
Vulnerability in wordpress (CVE-2026-16038)
vulnerability in wordpress (CVE-2026-16038). Confidential information can be exposed externally.
|
| CVE-2026-14365 |
|
Vulnerability in wordpress (CVE-2026-14365)
vulnerability in wordpress (CVE-2026-14365). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14364 |
|
Vulnerability in wordpress (CVE-2026-14364)
vulnerability in wordpress (CVE-2026-14364). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12801 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-12801)
cross-site scripting in wordpress (CVE-2026-12801). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11907 |
|
Vulnerability in wordpress (CVE-2026-11907)
vulnerability in wordpress (CVE-2026-11907). Confidential information can be exposed externally.
|
| CVE-2026-5336 |
|
Information Disclosure in wordpress (CVE-2026-5336)
vulnerability in wordpress (CVE-2026-5336). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16619 |
|
Vulnerability in wordpress (CVE-2026-16619)
vulnerability in wordpress (CVE-2026-16619). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16620 |
|
Vulnerability in wordpress (CVE-2026-16620)
vulnerability in wordpress (CVE-2026-16620). Data can be tampered with by attackers.
|
| CVE-2026-15256 |
|
Vulnerability in wordpress (CVE-2026-15256)
vulnerability in wordpress (CVE-2026-15256). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16067 |
|
Vulnerability in wordpress (CVE-2026-16067)
vulnerability in wordpress (CVE-2026-16067). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15208 |
|
Vulnerability in wordpress (CVE-2026-15208)
vulnerability in wordpress (CVE-2026-15208). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14831 |
|
Vulnerability in wordpress (CVE-2026-14831)
vulnerability in wordpress (CVE-2026-14831). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15152 |
|
Vulnerability in wordpress (CVE-2026-15152)
vulnerability in wordpress (CVE-2026-15152). Risk of unauthorized operations or information disclosure.
|