Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-15149 |
|
Vulnerability in wordpress (CVE-2026-15149)
vulnerability in wordpress (CVE-2026-15149). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15147 |
|
Vulnerability in wordpress (CVE-2026-15147)
vulnerability in wordpress (CVE-2026-15147). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14936 |
|
Vulnerability in wordpress (CVE-2026-14936)
vulnerability in wordpress (CVE-2026-14936). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14842 |
|
Vulnerability in wordpress (CVE-2026-14842)
vulnerability in wordpress (CVE-2026-14842). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14831 |
|
Vulnerability in wordpress (CVE-2026-14831)
vulnerability in wordpress (CVE-2026-14831). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14812 |
|
Vulnerability in wordpress (CVE-2026-14812)
vulnerability in wordpress (CVE-2026-14812). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14306 |
|
Vulnerability in wordpress (CVE-2026-14306)
vulnerability in wordpress (CVE-2026-14306). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14225 |
|
Vulnerability in wordpress (CVE-2026-14225)
vulnerability in wordpress (CVE-2026-14225). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13399 |
|
Vulnerability in wordpress (CVE-2026-13399)
vulnerability in wordpress (CVE-2026-13399). Data can be tampered with by attackers.
|
| CVE-2026-13342 |
|
Vulnerability in wordpress (CVE-2026-13342)
vulnerability in wordpress (CVE-2026-13342). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12901 |
|
Vulnerability in wordpress (CVE-2026-12901)
vulnerability in wordpress (CVE-2026-12901). Data can be tampered with by attackers.
|
| CVE-2026-12584 |
|
Vulnerability in wordpress (CVE-2026-12584)
vulnerability in wordpress (CVE-2026-12584). Data can be tampered with by attackers.
|
| CVE-2026-12501 |
|
Vulnerability in wordpress (CVE-2026-12501)
vulnerability in wordpress (CVE-2026-12501). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11361 |
|
Vulnerability in wordpress (CVE-2026-11361)
vulnerability in wordpress (CVE-2026-11361). Data can be tampered with by attackers.
|
| CVE-2026-10599 |
|
Vulnerability in wordpress (CVE-2026-10599)
vulnerability in wordpress (CVE-2026-10599). Data can be tampered with by attackers.
|
| CVE-2026-10524 |
|
Vulnerability in wordpress (CVE-2026-10524)
vulnerability in wordpress (CVE-2026-10524). Data can be tampered with by attackers.
|
| CVE-2025-15674 |
|
Authorization Flaw in wordpress (CVE-2025-15674)
vulnerability in wordpress (CVE-2025-15674). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3430 |
|
SQL Injection in wordpress (CVE-2026-3430)
SQL injection in wordpress (CVE-2026-3430). Confidential information can be exposed externally.
|
| CVE-2026-66705 |
|
Unauthenticated Cross Site Scripting (XSS) in Facebook for WordPress <= 5.2.1 versions.
Unauthenticated Cross Site Scripting (XSS) in Facebook for WordPress <= 5.2.1 versions.
|
| CVE-2026-66447 |
|
Unauthenticated SQL Injection in WordPress File Upload <= 5.1.7 versions.
Unauthenticated SQL Injection in WordPress File Upload <= 5.1.7 versions.
|
| CVE-2026-15246 |
|
Vulnerability in wordpress (CVE-2026-15246)
vulnerability in wordpress (CVE-2026-15246). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18501 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-18501)
cross-site scripting in wordpress (CVE-2026-18501). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-0673 |
|
Vulnerability in wordpress (CVE-2026-0673)
vulnerability in wordpress (CVE-2026-0673). Risk of unauthorized operations or information disclosure. Exploitable via ``element_pack_contact_form``.
|
| CVE-2026-5158 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-5158)
cross-site scripting in wordpress (CVE-2026-5158). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5391 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-5391)
cross-site scripting in wordpress (CVE-2026-5391). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11983 |
|
Vulnerability in wordpress (CVE-2026-11983)
vulnerability in wordpress (CVE-2026-11983). Risk of unauthorized operations or information disclosure. Exploitable via ``ai_ajax``.
|
| CVE-2025-9266 |
|
Vulnerability in wordpress (CVE-2025-9266)
vulnerability in wordpress (CVE-2025-9266). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-15028 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2025-15028)
cross-site scripting in wordpress (CVE-2025-15028). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18510 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-18510)
cross-site scripting in wordpress (CVE-2026-18510). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18400 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-18400)
cross-site scripting in wordpress (CVE-2026-18400). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18395 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-18395)
cross-site scripting in wordpress (CVE-2026-18395). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18050 |
|
Information Disclosure in wordpress (CVE-2026-18050)
vulnerability in wordpress (CVE-2026-18050). Confidential information can be exposed externally.
|
| CVE-2026-16954 |
|
Information Disclosure in wordpress (CVE-2026-16954)
vulnerability in wordpress (CVE-2026-16954). Confidential information can be exposed externally.
|
| CVE-2026-16734 |
|
Vulnerability in wordpress (CVE-2026-16734)
vulnerability in wordpress (CVE-2026-16734). Data can be tampered with by attackers.
|
| CVE-2026-16537 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16537)
cross-site scripting in wordpress (CVE-2026-16537). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16290 |
|
Vulnerability in wordpress (CVE-2026-16290)
vulnerability in wordpress (CVE-2026-16290). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16268 |
|
SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-16268)
SSRF in wordpress (CVE-2026-16268). Data can be tampered with by attackers.
|
| CVE-2026-16065 |
|
SQL Injection in wordpress (CVE-2026-16065)
SQL injection in wordpress (CVE-2026-16065). Confidential information can be exposed externally.
|
| CVE-2026-16054 |
|
Vulnerability in wordpress (CVE-2026-16054)
vulnerability in wordpress (CVE-2026-16054). Data can be tampered with by attackers.
|
| CVE-2026-14240 |
|
Information Disclosure in wordpress (CVE-2026-14240)
vulnerability in wordpress (CVE-2026-14240). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13153 |
|
Information Disclosure in wordpress (CVE-2026-13153)
vulnerability in wordpress (CVE-2026-13153). Confidential information can be exposed externally.
|
| CVE-2026-13154 |
|
Information Disclosure in wordpress (CVE-2026-13154)
vulnerability in wordpress (CVE-2026-13154). Confidential information can be exposed externally.
|
| CVE-2026-13703 |
|
Vulnerability in wordpress (CVE-2026-13703)
vulnerability in wordpress (CVE-2026-13703). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14313 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-14313)
vulnerability in wordpress (CVE-2026-14313). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14547 |
|
Authentication Bypass in wordpress (CVE-2026-14547)
authentication bypass in wordpress (CVE-2026-14547). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14829 |
|
Vulnerability in wordpress (CVE-2026-14829)
vulnerability in wordpress (CVE-2026-14829). Data can be tampered with by attackers.
|
| CVE-2026-14204 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-14204)
vulnerability in wordpress (CVE-2026-14204). Data can be tampered with by attackers.
|
| CVE-2026-14314 |
|
Information Disclosure in wordpress (CVE-2026-14314)
vulnerability in wordpress (CVE-2026-14314). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-15678 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2025-15678)
cross-site scripting in wordpress (CVE-2025-15678). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12713 |
|
SQL Injection in wordpress (CVE-2026-12713)
SQL injection in wordpress (CVE-2026-12713). Confidential information can be exposed externally.
|