Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-14236 |
|
Open Redirect in wordpress (CVE-2026-14236)
vulnerability in wordpress (CVE-2026-14236). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14235 |
|
Vulnerability in wordpress (CVE-2026-14235)
vulnerability in wordpress (CVE-2026-14235). Confidential information can be exposed externally.
|
| CVE-2026-14203 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14203)
cross-site scripting in wordpress (CVE-2026-14203). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14190 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14190)
cross-site scripting in wordpress (CVE-2026-14190). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14189 |
|
SQL Injection in wordpress (CVE-2026-14189)
SQL injection in wordpress (CVE-2026-14189). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13726 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13726)
cross-site scripting in wordpress (CVE-2026-13726). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13714 |
|
Unrestricted File Upload in wordpress (CVE-2026-13714)
vulnerability in wordpress (CVE-2026-13714). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13597 |
|
Authentication Bypass in wordpress (CVE-2026-13597)
authentication bypass in wordpress (CVE-2026-13597). Confidential information can be exposed externally.
|
| CVE-2026-13400 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13400)
cross-site scripting in wordpress (CVE-2026-13400). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13390 |
|
Vulnerability in wordpress (CVE-2026-13390)
vulnerability in wordpress (CVE-2026-13390). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13332 |
|
Authentication Bypass in wordpress (CVE-2026-13332)
authentication bypass in wordpress (CVE-2026-13332). Confidential information can be exposed externally.
|
| CVE-2026-13152 |
|
Privilege Escalation in wordpress (CVE-2026-13152)
vulnerability in wordpress (CVE-2026-13152). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12982 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-12982)
cross-site scripting in wordpress (CVE-2026-12982). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12493 |
|
Authentication Bypass in wordpress (CVE-2026-12493)
authentication bypass in wordpress (CVE-2026-12493). Data can be tampered with by attackers.
|
| CVE-2026-12394 |
|
Privilege Escalation in wordpress (CVE-2026-12394)
vulnerability in wordpress (CVE-2026-12394). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12255 |
|
Authentication Bypass in wordpress (CVE-2026-12255)
authentication bypass in wordpress (CVE-2026-12255). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10082 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-10082)
cross-site scripting in wordpress (CVE-2026-10082). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-15662 |
|
SSRF (Server-Side Request Forgery) in wordpress (CVE-2025-15662)
SSRF in wordpress (CVE-2025-15662). Confidential information can be exposed externally.
|
| CVE-2026-15962 |
|
Unsafe Deserialization in wordpress (CVE-2026-15962)
vulnerability in wordpress (CVE-2026-15962). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64514 |
|
Vulnerability in wordpress (CVE-2026-64514)
vulnerability in wordpress (CVE-2026-64514). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15425 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15425)
cross-site scripting in wordpress (CVE-2026-15425). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14955 |
|
Path Traversal in wordpress (CVE-2026-14955)
path traversal in wordpress (CVE-2026-14955). Confidential information can be exposed externally.
|
| CVE-2026-10818 |
|
Unrestricted File Upload in wordpress (CVE-2026-10818)
vulnerability in wordpress (CVE-2026-10818). Successful exploitation can lead to full system takeover.
|
| CVE-2026-8789 |
|
Authorization Flaw in wordpress (CVE-2026-8789)
vulnerability in wordpress (CVE-2026-8789). Data can be tampered with by attackers. Exploitable via ``ea_delete_multiple_connections``.
|
| CVE-2026-15663 |
|
SQL Injection in wordpress (CVE-2026-15663)
SQL injection in wordpress (CVE-2026-15663). Confidential information can be exposed externally.
|
| CVE-2026-15401 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15401)
cross-site scripting in wordpress (CVE-2026-15401). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10033 |
|
Vulnerability in wordpress (CVE-2026-10033)
vulnerability in wordpress (CVE-2026-10033). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15346 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15346)
cross-site scripting in wordpress (CVE-2026-15346). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15739 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15739)
cross-site scripting in wordpress (CVE-2026-15739). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15821 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15821)
cross-site scripting in wordpress (CVE-2026-15821). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15755 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15755)
cross-site scripting in wordpress (CVE-2026-15755). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15665 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15665)
cross-site scripting in wordpress (CVE-2026-15665). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15653 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15653)
cross-site scripting in wordpress (CVE-2026-15653). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15648 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15648)
cross-site scripting in wordpress (CVE-2026-15648). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15464 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15464)
cross-site scripting in wordpress (CVE-2026-15464). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12654 |
|
Vulnerability in wordpress (CVE-2026-12654)
vulnerability in wordpress (CVE-2026-12654). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15334 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15334)
cross-site scripting in wordpress (CVE-2026-15334). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15333 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15333)
cross-site scripting in wordpress (CVE-2026-15333). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14603 |
|
Vulnerability in wordpress (CVE-2026-14603)
vulnerability in wordpress (CVE-2026-14603). Confidential information can be exposed externally.
|
| CVE-2026-12497 |
|
Privilege Escalation in wordpress (CVE-2026-12497)
vulnerability in wordpress (CVE-2026-12497). Confidential information can be exposed externally.
|
| CVE-2026-12688 |
|
Vulnerability in wordpress (CVE-2026-12688)
vulnerability in wordpress (CVE-2026-12688). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12689 |
|
Vulnerability in wordpress (CVE-2026-12689)
vulnerability in wordpress (CVE-2026-12689). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12690 |
|
Vulnerability in wordpress (CVE-2026-12690)
vulnerability in wordpress (CVE-2026-12690). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12877 |
|
Authentication Bypass in wordpress (CVE-2026-12877)
authentication bypass in wordpress (CVE-2026-12877). Confidential information can be exposed externally.
|
| CVE-2026-12981 |
|
Privilege Escalation in wordpress (CVE-2026-12981)
vulnerability in wordpress (CVE-2026-12981). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6454 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-6454)
cross-site scripting in wordpress (CVE-2026-6454). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15420 |
|
Path Traversal in wordpress (CVE-2026-15420)
path traversal in wordpress (CVE-2026-15420). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11354 |
|
Vulnerability in wordpress (CVE-2026-11354)
vulnerability in wordpress (CVE-2026-11354). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15100 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15100)
cross-site scripting in wordpress (CVE-2026-15100). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13464 |
|
Vulnerability in wordpress (CVE-2026-13464)
vulnerability in wordpress (CVE-2026-13464). Risk of unauthorized operations or information disclosure.
|