Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-65049 |
|
Authorization Flaw in wordpress (CVE-2026-65049)
vulnerability in wordpress (CVE-2026-65049). Data can be tampered with by attackers.
|
| CVE-2026-1771 |
|
Vulnerability in wordpress (CVE-2026-1771)
vulnerability in wordpress (CVE-2026-1771). Successful exploitation can lead to full system takeover.
|
| CVE-2026-1372 |
|
Vulnerability in wordpress (CVE-2026-1372)
vulnerability in wordpress (CVE-2026-1372). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15145 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15145)
cross-site scripting in wordpress (CVE-2026-15145). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8082 |
|
SQL Injection in wordpress (CVE-2026-8082)
SQL injection in wordpress (CVE-2026-8082). Confidential information can be exposed externally.
|
| CVE-2026-14185 |
|
Vulnerability in wordpress (CVE-2026-14185)
vulnerability in wordpress (CVE-2026-14185). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14184 |
|
Vulnerability in wordpress (CVE-2026-14184)
vulnerability in wordpress (CVE-2026-14184). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14183 |
|
Vulnerability in wordpress (CVE-2026-14183)
vulnerability in wordpress (CVE-2026-14183). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13694 |
|
Vulnerability in c (CVE-2026-13694)
vulnerability in c (CVE-2026-13694). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13693 |
|
Path Traversal in wordpress (CVE-2026-13693)
path traversal in wordpress (CVE-2026-13693). Confidential information can be exposed externally.
|
| CVE-2026-11767 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-11767)
cross-site scripting in wordpress (CVE-2026-11767). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13439 |
|
Privilege Escalation in wordpress (CVE-2026-13439)
vulnerability in wordpress (CVE-2026-13439). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15782 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15782)
cross-site scripting in wordpress (CVE-2026-15782). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15156 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15156)
cross-site scripting in wordpress (CVE-2026-15156). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12900 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-12900)
cross-site scripting in wordpress (CVE-2026-12900). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9833 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-9833)
cross-site scripting in wordpress (CVE-2026-9833). Risk of unauthorized operations or information disclosure. Exploitable via ``edit_pages``.
|
| CVE-2026-8825 |
|
Information Disclosure in wordpress (CVE-2026-8825)
vulnerability in wordpress (CVE-2026-8825). Confidential information can be exposed externally.
|
| CVE-2026-12898 |
|
Path Traversal in wordpress (CVE-2026-12898)
path traversal in wordpress (CVE-2026-12898). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12970 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-12970)
cross-site scripting in wordpress (CVE-2026-12970). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12972 |
|
Vulnerability in wordpress (CVE-2026-12972)
vulnerability in wordpress (CVE-2026-12972). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12973 |
|
Vulnerability in wordpress (CVE-2026-12973)
vulnerability in wordpress (CVE-2026-12973). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13142 |
|
Privilege Escalation in wordpress (CVE-2026-13142)
vulnerability in wordpress (CVE-2026-13142). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13147 |
|
Vulnerability in wordpress (CVE-2026-13147)
vulnerability in wordpress (CVE-2026-13147). Confidential information can be exposed externally.
|
| CVE-2026-13156 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-13156)
vulnerability in wordpress (CVE-2026-13156). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13432 |
|
Vulnerability in wordpress (CVE-2026-13432)
vulnerability in wordpress (CVE-2026-13432). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11349 |
|
SQL Injection in wordpress (CVE-2026-11349)
SQL injection in wordpress (CVE-2026-11349). Confidential information can be exposed externally.
|
| CVE-2026-10724 |
|
Vulnerability in wordpress (CVE-2026-10724)
vulnerability in wordpress (CVE-2026-10724). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10755 |
|
Authorization Flaw in wordpress (CVE-2026-10755)
vulnerability in wordpress (CVE-2026-10755). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11868 |
|
Vulnerability in wordpress (CVE-2026-11868)
vulnerability in wordpress (CVE-2026-11868). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12592 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-12592)
cross-site scripting in wordpress (CVE-2026-12592). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12723 |
|
Vulnerability in wordpress (CVE-2026-12723)
vulnerability in wordpress (CVE-2026-12723). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12724 |
|
Vulnerability in wordpress (CVE-2026-12724)
vulnerability in wordpress (CVE-2026-12724). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10081 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-10081)
cross-site scripting in wordpress (CVE-2026-10081). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57857 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-57857)
cross-site scripting in wordpress (CVE-2026-57857). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9734 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-9734)
vulnerability in wordpress (CVE-2026-9734). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63030 KEV |
|
WordPress Core — WordPress Core Interpretation Conflict Vulnerability
WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137.
|
| CVE-2026-60137 KEV |
|
[KEV] SQL Injection in Wordpress sqli (CVE-2026-60137)
SQL injection in Wordpress sqli (CVE-2026-60137). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
| CVE-2026-9656 |
|
Information Disclosure in wordpress (CVE-2026-9656)
vulnerability in wordpress (CVE-2026-9656). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9810 |
|
Privilege Escalation in wordpress (CVE-2026-9810)
vulnerability in wordpress (CVE-2026-9810). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13402 |
|
Information Disclosure in wordpress (CVE-2026-13402)
vulnerability in wordpress (CVE-2026-13402). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12393 |
|
Vulnerability in wordpress (CVE-2026-12393)
vulnerability in wordpress (CVE-2026-12393). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11966 |
|
Vulnerability in wordpress (CVE-2026-11966)
vulnerability in wordpress (CVE-2026-11966). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11961 |
|
Privilege Escalation in wordpress (CVE-2026-11961)
vulnerability in wordpress (CVE-2026-11961). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11575 |
|
Vulnerability in wordpress (CVE-2026-11575)
vulnerability in wordpress (CVE-2026-11575). Data can be tampered with by attackers.
|
| CVE-2026-10525 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-10525)
cross-site scripting in wordpress (CVE-2026-10525). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15094 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15094)
cross-site scripting in wordpress (CVE-2026-15094). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15982 |
|
Privilege Escalation in wordpress (CVE-2026-15982)
vulnerability in wordpress (CVE-2026-15982). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15349 |
|
Vulnerability in wordpress (CVE-2026-15349)
vulnerability in wordpress (CVE-2026-15349). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15457 |
|
Path Traversal in wordpress (CVE-2026-15457)
path traversal in wordpress (CVE-2026-15457). Confidential information can be exposed externally.
|
| CVE-2026-15161 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15161)
cross-site scripting in wordpress (CVE-2026-15161). Risk of unauthorized operations or information disclosure.
|