Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cms Clear
ID Title
CVE-2026-13110 Vulnerability in wordpress (CVE-2026-13110)
vulnerability in wordpress (CVE-2026-13110). Risk of unauthorized operations or information disclosure.
CVE-2026-16774 Vulnerability in wordpress (CVE-2026-16774)
vulnerability in wordpress (CVE-2026-16774). Risk of unauthorized operations or information disclosure.
CVE-2026-14785 SQL Injection in wordpress (CVE-2026-14785)
SQL injection in wordpress (CVE-2026-14785). Confidential information can be exposed externally.
CVE-2026-14328 Privilege Escalation in wordpress (CVE-2026-14328)
vulnerability in wordpress (CVE-2026-14328). Successful exploitation can lead to full system takeover. Exploitable via `GET /wp-json/epm/v1/admin/login`.
CVE-2026-11598 Cross-Site Scripting (XSS) in wordpress (CVE-2026-11598)
cross-site scripting in wordpress (CVE-2026-11598). Risk of unauthorized operations or information disclosure.
CVE-2026-10207 SQL Injection in wordpress (CVE-2026-10207)
SQL injection in wordpress (CVE-2026-10207). Confidential information can be exposed externally.
CVE-2026-14516 SQL Injection in wordpress (CVE-2026-14516)
SQL injection in wordpress (CVE-2026-14516). Confidential information can be exposed externally.
CVE-2026-15673 SQL Injection in wordpress (CVE-2026-15673)
SQL injection in wordpress (CVE-2026-15673). Confidential information can be exposed externally.
CVE-2026-15671 SQL Injection in wordpress (CVE-2026-15671)
SQL injection in wordpress (CVE-2026-15671). Confidential information can be exposed externally.
CVE-2026-15670 SQL Injection in wordpress (CVE-2026-15670)
SQL injection in wordpress (CVE-2026-15670). Confidential information can be exposed externally.
CVE-2026-12800 SQL Injection in wordpress (CVE-2026-12800)
SQL injection in wordpress (CVE-2026-12800). Confidential information can be exposed externally. Exploitable via `POST /wp-json/wpdmpp/v1/cart/coupon`.
CVE-2026-15267 SQL Injection in wordpress (CVE-2026-15267)
SQL injection in wordpress (CVE-2026-15267). Confidential information can be exposed externally.
CVE-2026-13161 SQL Injection in wordpress (CVE-2026-13161)
SQL injection in wordpress (CVE-2026-13161). Confidential information can be exposed externally.
CVE-2026-15730 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15730)
cross-site scripting in wordpress (CVE-2026-15730). Risk of unauthorized operations or information disclosure.
CVE-2026-15014 Vulnerability in wordpress (CVE-2026-15014)
vulnerability in wordpress (CVE-2026-15014). Successful exploitation can lead to full system takeover. Exploitable via ``billing_phone``.
CVE-2026-12741 SQL Injection in wordpress (CVE-2026-12741)
SQL injection in wordpress (CVE-2026-12741). Confidential information can be exposed externally.
CVE-2026-16811 SQL Injection in wordpress (CVE-2026-16811)
SQL injection in wordpress (CVE-2026-16811). Confidential information can be exposed externally.
CVE-2026-6251 SQL Injection in wordpress (CVE-2026-6251)
SQL injection in wordpress (CVE-2026-6251). Confidential information can be exposed externally.
CVE-2026-16587 Vulnerability in wordpress (CVE-2026-16587)
vulnerability in wordpress (CVE-2026-16587). Risk of unauthorized operations or information disclosure.
CVE-2026-16797 Vulnerability in wordpress (CVE-2026-16797)
vulnerability in wordpress (CVE-2026-16797). Risk of unauthorized operations or information disclosure.
CVE-2026-15136 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-15136)
vulnerability in wordpress (CVE-2026-15136). Risk of unauthorized operations or information disclosure.
CVE-2026-14870 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14870)
cross-site scripting in wordpress (CVE-2026-14870). Risk of unauthorized operations or information disclosure.
CVE-2026-16585 Path Traversal in wordpress (CVE-2026-16585)
path traversal in wordpress (CVE-2026-16585). Successful exploitation can lead to full system takeover.
CVE-2026-14926 Vulnerability in wordpress (CVE-2026-14926)
vulnerability in wordpress (CVE-2026-14926). Risk of unauthorized operations or information disclosure.
CVE-2026-14924 Vulnerability in wordpress (CVE-2026-14924)
vulnerability in wordpress (CVE-2026-14924). Data can be tampered with by attackers.
CVE-2026-14819 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14819)
cross-site scripting in wordpress (CVE-2026-14819). Risk of unauthorized operations or information disclosure.
CVE-2026-14545 Privilege Escalation in wordpress (CVE-2026-14545)
vulnerability in wordpress (CVE-2026-14545). Successful exploitation can lead to full system takeover.
CVE-2026-15012 Information Disclosure in wordpress (CVE-2026-15012)
vulnerability in wordpress (CVE-2026-15012). Risk of unauthorized operations or information disclosure.
CVE-2026-14821 Vulnerability in wordpress (CVE-2026-14821)
vulnerability in wordpress (CVE-2026-14821). Risk of unauthorized operations or information disclosure.
CVE-2026-14490 Path Traversal in wordpress (CVE-2026-14490)
path traversal in wordpress (CVE-2026-14490). Confidential information can be exposed externally. Exploitable via ``demi_restore_step``.
CVE-2026-12124 Vulnerability in c (CVE-2026-12124)
vulnerability in c (CVE-2026-12124). Risk of unauthorized operations or information disclosure. Exploitable via ``pdfdraft_embed_pdf``.
CVE-2026-65446 Unauthenticated Cross Site Scripting (XSS) in Kali Forms <= 2.4.18 versions.
Unauthenticated Cross Site Scripting (XSS) in Kali Forms <= 2.4.18 versions.
CVE-2026-65447 Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.6 versions.
Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.6 versions.
CVE-2026-66473 Unauthenticated Broken Access Control in Xendit Payment <= 7.1.0 versions.
Unauthenticated Broken Access Control in Xendit Payment <= 7.1.0 versions.
CVE-2026-65442 Unauthenticated Server Side Request Forgery (SSRF) in FormCraft <= 3.9.15 versions.
Unauthenticated Server Side Request Forgery (SSRF) in FormCraft <= 3.9.15 versions.
CVE-2026-65441 Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.3 versions.
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.3 versions.
CVE-2026-65443 Unauthenticated Cross Site Scripting (XSS) in BackWPup <= 5.7.4 versions.
Unauthenticated Cross Site Scripting (XSS) in BackWPup <= 5.7.4 versions.
CVE-2026-65437 Unauthenticated Cross Site Scripting (XSS) in Spam protection, AntiSpam, FireWall by CleanTalk <=...
Unauthenticated Cross Site Scripting (XSS) in Spam protection, AntiSpam, FireWall by CleanTalk <=...
CVE-2026-61953 Unauthenticated Server Side Request Forgery (SSRF) in Simple Link Directory Pro <= 15.0.6 versions.
Unauthenticated Server Side Request Forgery (SSRF) in Simple Link Directory Pro <= 15.0.6 versions.
CVE-2026-61957 Unauthenticated Cross Site Scripting (XSS) in miniorange otp verification <= 5.5.1 versions.
Unauthenticated Cross Site Scripting (XSS) in miniorange otp verification <= 5.5.1 versions.
CVE-2026-65564 Unauthenticated Sensitive Data Exposure in MapPress Maps for WordPress <= 2.97.6 versions.
Unauthenticated Sensitive Data Exposure in MapPress Maps for WordPress <= 2.97.6 versions.
CVE-2026-59551 Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions.
Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions.
CVE-2026-65561 Contributor Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.0 versions.
Contributor Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.0 versions.
CVE-2026-59549 Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions.
Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions.
CVE-2026-59531 Unauthenticated Unknown in Falcon – WordPress Optimizations & Tweaks <= 2.10.0 versions.
Unauthenticated Unknown in Falcon – WordPress Optimizations & Tweaks <= 2.10.0 versions.
CVE-2026-9830 Authentication Bypass in wordpress (CVE-2026-9830)
authentication bypass in wordpress (CVE-2026-9830). Confidential information can be exposed externally.
CVE-2026-14827 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14827)
cross-site scripting in wordpress (CVE-2026-14827). Successful exploitation can lead to full system takeover.
CVE-2026-14820 Information Disclosure in wordpress (CVE-2026-14820)
vulnerability in wordpress (CVE-2026-14820). Risk of unauthorized operations or information disclosure.
CVE-2026-13714 Unrestricted File Upload in wordpress (CVE-2026-13714)
vulnerability in wordpress (CVE-2026-13714). Successful exploitation can lead to full system takeover.
CVE-2026-13400 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13400)
cross-site scripting in wordpress (CVE-2026-13400). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →