Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cms Clear
ID Title
CVE-2026-15149 Vulnerability in wordpress (CVE-2026-15149)
vulnerability in wordpress (CVE-2026-15149). Risk of unauthorized operations or information disclosure.
CVE-2026-15147 Vulnerability in wordpress (CVE-2026-15147)
vulnerability in wordpress (CVE-2026-15147). Risk of unauthorized operations or information disclosure.
CVE-2026-14936 Vulnerability in wordpress (CVE-2026-14936)
vulnerability in wordpress (CVE-2026-14936). Risk of unauthorized operations or information disclosure.
CVE-2026-14842 Vulnerability in wordpress (CVE-2026-14842)
vulnerability in wordpress (CVE-2026-14842). Risk of unauthorized operations or information disclosure.
CVE-2026-14831 Vulnerability in wordpress (CVE-2026-14831)
vulnerability in wordpress (CVE-2026-14831). Risk of unauthorized operations or information disclosure.
CVE-2026-14812 Vulnerability in wordpress (CVE-2026-14812)
vulnerability in wordpress (CVE-2026-14812). Successful exploitation can lead to full system takeover.
CVE-2026-14306 Vulnerability in wordpress (CVE-2026-14306)
vulnerability in wordpress (CVE-2026-14306). Risk of unauthorized operations or information disclosure.
CVE-2026-14225 Vulnerability in wordpress (CVE-2026-14225)
vulnerability in wordpress (CVE-2026-14225). Risk of unauthorized operations or information disclosure.
CVE-2026-13399 Vulnerability in wordpress (CVE-2026-13399)
vulnerability in wordpress (CVE-2026-13399). Data can be tampered with by attackers.
CVE-2026-13342 Vulnerability in wordpress (CVE-2026-13342)
vulnerability in wordpress (CVE-2026-13342). Risk of unauthorized operations or information disclosure.
CVE-2026-12901 Vulnerability in wordpress (CVE-2026-12901)
vulnerability in wordpress (CVE-2026-12901). Data can be tampered with by attackers.
CVE-2026-12584 Vulnerability in wordpress (CVE-2026-12584)
vulnerability in wordpress (CVE-2026-12584). Data can be tampered with by attackers.
CVE-2026-12501 Vulnerability in wordpress (CVE-2026-12501)
vulnerability in wordpress (CVE-2026-12501). Risk of unauthorized operations or information disclosure.
CVE-2026-11361 Vulnerability in wordpress (CVE-2026-11361)
vulnerability in wordpress (CVE-2026-11361). Data can be tampered with by attackers.
CVE-2026-10599 Vulnerability in wordpress (CVE-2026-10599)
vulnerability in wordpress (CVE-2026-10599). Data can be tampered with by attackers.
CVE-2026-10524 Vulnerability in wordpress (CVE-2026-10524)
vulnerability in wordpress (CVE-2026-10524). Data can be tampered with by attackers.
CVE-2025-15674 Authorization Flaw in wordpress (CVE-2025-15674)
vulnerability in wordpress (CVE-2025-15674). Risk of unauthorized operations or information disclosure.
CVE-2026-3430 SQL Injection in wordpress (CVE-2026-3430)
SQL injection in wordpress (CVE-2026-3430). Confidential information can be exposed externally.
CVE-2026-66705 Unauthenticated Cross Site Scripting (XSS) in Facebook for WordPress <= 5.2.1 versions.
Unauthenticated Cross Site Scripting (XSS) in Facebook for WordPress <= 5.2.1 versions.
CVE-2026-66447 Unauthenticated SQL Injection in WordPress File Upload <= 5.1.7 versions.
Unauthenticated SQL Injection in WordPress File Upload <= 5.1.7 versions.
CVE-2026-15246 Vulnerability in wordpress (CVE-2026-15246)
vulnerability in wordpress (CVE-2026-15246). Risk of unauthorized operations or information disclosure.
CVE-2026-18501 Cross-Site Scripting (XSS) in wordpress (CVE-2026-18501)
cross-site scripting in wordpress (CVE-2026-18501). Risk of unauthorized operations or information disclosure.
CVE-2026-0673 Vulnerability in wordpress (CVE-2026-0673)
vulnerability in wordpress (CVE-2026-0673). Risk of unauthorized operations or information disclosure. Exploitable via ``element_pack_contact_form``.
CVE-2026-5158 Cross-Site Scripting (XSS) in wordpress (CVE-2026-5158)
cross-site scripting in wordpress (CVE-2026-5158). Risk of unauthorized operations or information disclosure.
CVE-2026-5391 Cross-Site Scripting (XSS) in wordpress (CVE-2026-5391)
cross-site scripting in wordpress (CVE-2026-5391). Risk of unauthorized operations or information disclosure.
CVE-2026-11983 Vulnerability in wordpress (CVE-2026-11983)
vulnerability in wordpress (CVE-2026-11983). Risk of unauthorized operations or information disclosure. Exploitable via ``ai_ajax``.
CVE-2025-9266 Vulnerability in wordpress (CVE-2025-9266)
vulnerability in wordpress (CVE-2025-9266). Risk of unauthorized operations or information disclosure.
CVE-2025-15028 Cross-Site Scripting (XSS) in wordpress (CVE-2025-15028)
cross-site scripting in wordpress (CVE-2025-15028). Risk of unauthorized operations or information disclosure.
CVE-2026-18510 Cross-Site Scripting (XSS) in wordpress (CVE-2026-18510)
cross-site scripting in wordpress (CVE-2026-18510). Risk of unauthorized operations or information disclosure.
CVE-2026-18400 Cross-Site Scripting (XSS) in wordpress (CVE-2026-18400)
cross-site scripting in wordpress (CVE-2026-18400). Risk of unauthorized operations or information disclosure.
CVE-2026-18395 Cross-Site Scripting (XSS) in wordpress (CVE-2026-18395)
cross-site scripting in wordpress (CVE-2026-18395). Risk of unauthorized operations or information disclosure.
CVE-2026-18050 Information Disclosure in wordpress (CVE-2026-18050)
vulnerability in wordpress (CVE-2026-18050). Confidential information can be exposed externally.
CVE-2026-16954 Information Disclosure in wordpress (CVE-2026-16954)
vulnerability in wordpress (CVE-2026-16954). Confidential information can be exposed externally.
CVE-2026-16734 Vulnerability in wordpress (CVE-2026-16734)
vulnerability in wordpress (CVE-2026-16734). Data can be tampered with by attackers.
CVE-2026-16537 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16537)
cross-site scripting in wordpress (CVE-2026-16537). Risk of unauthorized operations or information disclosure.
CVE-2026-16290 Vulnerability in wordpress (CVE-2026-16290)
vulnerability in wordpress (CVE-2026-16290). Risk of unauthorized operations or information disclosure.
CVE-2026-16268 SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-16268)
SSRF in wordpress (CVE-2026-16268). Data can be tampered with by attackers.
CVE-2026-16065 SQL Injection in wordpress (CVE-2026-16065)
SQL injection in wordpress (CVE-2026-16065). Confidential information can be exposed externally.
CVE-2026-16054 Vulnerability in wordpress (CVE-2026-16054)
vulnerability in wordpress (CVE-2026-16054). Data can be tampered with by attackers.
CVE-2026-14240 Information Disclosure in wordpress (CVE-2026-14240)
vulnerability in wordpress (CVE-2026-14240). Risk of unauthorized operations or information disclosure.
CVE-2026-13153 Information Disclosure in wordpress (CVE-2026-13153)
vulnerability in wordpress (CVE-2026-13153). Confidential information can be exposed externally.
CVE-2026-13154 Information Disclosure in wordpress (CVE-2026-13154)
vulnerability in wordpress (CVE-2026-13154). Confidential information can be exposed externally.
CVE-2026-13703 Vulnerability in wordpress (CVE-2026-13703)
vulnerability in wordpress (CVE-2026-13703). Risk of unauthorized operations or information disclosure.
CVE-2026-14313 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-14313)
vulnerability in wordpress (CVE-2026-14313). Risk of unauthorized operations or information disclosure.
CVE-2026-14547 Authentication Bypass in wordpress (CVE-2026-14547)
authentication bypass in wordpress (CVE-2026-14547). Risk of unauthorized operations or information disclosure.
CVE-2026-14829 Vulnerability in wordpress (CVE-2026-14829)
vulnerability in wordpress (CVE-2026-14829). Data can be tampered with by attackers.
CVE-2026-14204 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-14204)
vulnerability in wordpress (CVE-2026-14204). Data can be tampered with by attackers.
CVE-2026-14314 Information Disclosure in wordpress (CVE-2026-14314)
vulnerability in wordpress (CVE-2026-14314). Risk of unauthorized operations or information disclosure.
CVE-2025-15678 Cross-Site Scripting (XSS) in wordpress (CVE-2025-15678)
cross-site scripting in wordpress (CVE-2025-15678). Risk of unauthorized operations or information disclosure.
CVE-2026-12713 SQL Injection in wordpress (CVE-2026-12713)
SQL injection in wordpress (CVE-2026-12713). Confidential information can be exposed externally.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →