Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cms Clear
ID Title
CVE-2026-65049 Authorization Flaw in wordpress (CVE-2026-65049)
vulnerability in wordpress (CVE-2026-65049). Data can be tampered with by attackers.
CVE-2026-1771 Vulnerability in wordpress (CVE-2026-1771)
vulnerability in wordpress (CVE-2026-1771). Successful exploitation can lead to full system takeover.
CVE-2026-1372 Vulnerability in wordpress (CVE-2026-1372)
vulnerability in wordpress (CVE-2026-1372). Risk of unauthorized operations or information disclosure.
CVE-2026-15145 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15145)
cross-site scripting in wordpress (CVE-2026-15145). Risk of unauthorized operations or information disclosure.
CVE-2026-8082 SQL Injection in wordpress (CVE-2026-8082)
SQL injection in wordpress (CVE-2026-8082). Confidential information can be exposed externally.
CVE-2026-14185 Vulnerability in wordpress (CVE-2026-14185)
vulnerability in wordpress (CVE-2026-14185). Risk of unauthorized operations or information disclosure.
CVE-2026-14184 Vulnerability in wordpress (CVE-2026-14184)
vulnerability in wordpress (CVE-2026-14184). Risk of unauthorized operations or information disclosure.
CVE-2026-14183 Vulnerability in wordpress (CVE-2026-14183)
vulnerability in wordpress (CVE-2026-14183). Risk of unauthorized operations or information disclosure.
CVE-2026-13694 Vulnerability in c (CVE-2026-13694)
vulnerability in c (CVE-2026-13694). Risk of unauthorized operations or information disclosure.
CVE-2026-13693 Path Traversal in wordpress (CVE-2026-13693)
path traversal in wordpress (CVE-2026-13693). Confidential information can be exposed externally.
CVE-2026-11767 Cross-Site Scripting (XSS) in wordpress (CVE-2026-11767)
cross-site scripting in wordpress (CVE-2026-11767). Successful exploitation can lead to full system takeover.
CVE-2026-13439 Privilege Escalation in wordpress (CVE-2026-13439)
vulnerability in wordpress (CVE-2026-13439). Successful exploitation can lead to full system takeover.
CVE-2026-15782 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15782)
cross-site scripting in wordpress (CVE-2026-15782). Risk of unauthorized operations or information disclosure.
CVE-2026-15156 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15156)
cross-site scripting in wordpress (CVE-2026-15156). Risk of unauthorized operations or information disclosure.
CVE-2026-12900 Cross-Site Scripting (XSS) in wordpress (CVE-2026-12900)
cross-site scripting in wordpress (CVE-2026-12900). Risk of unauthorized operations or information disclosure.
CVE-2026-9833 Cross-Site Scripting (XSS) in wordpress (CVE-2026-9833)
cross-site scripting in wordpress (CVE-2026-9833). Risk of unauthorized operations or information disclosure. Exploitable via ``edit_pages``.
CVE-2026-8825 Information Disclosure in wordpress (CVE-2026-8825)
vulnerability in wordpress (CVE-2026-8825). Confidential information can be exposed externally.
CVE-2026-12898 Path Traversal in wordpress (CVE-2026-12898)
path traversal in wordpress (CVE-2026-12898). Risk of unauthorized operations or information disclosure.
CVE-2026-12970 Cross-Site Scripting (XSS) in wordpress (CVE-2026-12970)
cross-site scripting in wordpress (CVE-2026-12970). Risk of unauthorized operations or information disclosure.
CVE-2026-12972 Vulnerability in wordpress (CVE-2026-12972)
vulnerability in wordpress (CVE-2026-12972). Risk of unauthorized operations or information disclosure.
CVE-2026-12973 Vulnerability in wordpress (CVE-2026-12973)
vulnerability in wordpress (CVE-2026-12973). Risk of unauthorized operations or information disclosure.
CVE-2026-13142 Privilege Escalation in wordpress (CVE-2026-13142)
vulnerability in wordpress (CVE-2026-13142). Successful exploitation can lead to full system takeover.
CVE-2026-13147 Vulnerability in wordpress (CVE-2026-13147)
vulnerability in wordpress (CVE-2026-13147). Confidential information can be exposed externally.
CVE-2026-13156 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-13156)
vulnerability in wordpress (CVE-2026-13156). Risk of unauthorized operations or information disclosure.
CVE-2026-13432 Vulnerability in wordpress (CVE-2026-13432)
vulnerability in wordpress (CVE-2026-13432). Risk of unauthorized operations or information disclosure.
CVE-2026-11349 SQL Injection in wordpress (CVE-2026-11349)
SQL injection in wordpress (CVE-2026-11349). Confidential information can be exposed externally.
CVE-2026-10724 Vulnerability in wordpress (CVE-2026-10724)
vulnerability in wordpress (CVE-2026-10724). Risk of unauthorized operations or information disclosure.
CVE-2026-10755 Authorization Flaw in wordpress (CVE-2026-10755)
vulnerability in wordpress (CVE-2026-10755). Risk of unauthorized operations or information disclosure.
CVE-2026-11868 Vulnerability in wordpress (CVE-2026-11868)
vulnerability in wordpress (CVE-2026-11868). Risk of unauthorized operations or information disclosure.
CVE-2026-12592 Cross-Site Scripting (XSS) in wordpress (CVE-2026-12592)
cross-site scripting in wordpress (CVE-2026-12592). Successful exploitation can lead to full system takeover.
CVE-2026-12723 Vulnerability in wordpress (CVE-2026-12723)
vulnerability in wordpress (CVE-2026-12723). Risk of unauthorized operations or information disclosure.
CVE-2026-12724 Vulnerability in wordpress (CVE-2026-12724)
vulnerability in wordpress (CVE-2026-12724). Risk of unauthorized operations or information disclosure.
CVE-2026-10081 Cross-Site Scripting (XSS) in wordpress (CVE-2026-10081)
cross-site scripting in wordpress (CVE-2026-10081). Successful exploitation can lead to full system takeover.
CVE-2026-57857 Cross-Site Scripting (XSS) in wordpress (CVE-2026-57857)
cross-site scripting in wordpress (CVE-2026-57857). Risk of unauthorized operations or information disclosure.
CVE-2026-9734 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-9734)
vulnerability in wordpress (CVE-2026-9734). Risk of unauthorized operations or information disclosure.
CVE-2026-63030 KEV WordPress Core — WordPress Core Interpretation Conflict Vulnerability
WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137.
CVE-2026-60137 KEV [KEV] SQL Injection in Wordpress sqli (CVE-2026-60137)
SQL injection in Wordpress sqli (CVE-2026-60137). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
CVE-2026-9656 Information Disclosure in wordpress (CVE-2026-9656)
vulnerability in wordpress (CVE-2026-9656). Risk of unauthorized operations or information disclosure.
CVE-2026-9810 Privilege Escalation in wordpress (CVE-2026-9810)
vulnerability in wordpress (CVE-2026-9810). Successful exploitation can lead to full system takeover.
CVE-2026-13402 Information Disclosure in wordpress (CVE-2026-13402)
vulnerability in wordpress (CVE-2026-13402). Risk of unauthorized operations or information disclosure.
CVE-2026-12393 Vulnerability in wordpress (CVE-2026-12393)
vulnerability in wordpress (CVE-2026-12393). Risk of unauthorized operations or information disclosure.
CVE-2026-11966 Vulnerability in wordpress (CVE-2026-11966)
vulnerability in wordpress (CVE-2026-11966). Risk of unauthorized operations or information disclosure.
CVE-2026-11961 Privilege Escalation in wordpress (CVE-2026-11961)
vulnerability in wordpress (CVE-2026-11961). Successful exploitation can lead to full system takeover.
CVE-2026-11575 Vulnerability in wordpress (CVE-2026-11575)
vulnerability in wordpress (CVE-2026-11575). Data can be tampered with by attackers.
CVE-2026-10525 Cross-Site Scripting (XSS) in wordpress (CVE-2026-10525)
cross-site scripting in wordpress (CVE-2026-10525). Risk of unauthorized operations or information disclosure.
CVE-2026-15094 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15094)
cross-site scripting in wordpress (CVE-2026-15094). Risk of unauthorized operations or information disclosure.
CVE-2026-15982 Privilege Escalation in wordpress (CVE-2026-15982)
vulnerability in wordpress (CVE-2026-15982). Successful exploitation can lead to full system takeover.
CVE-2026-15349 Vulnerability in wordpress (CVE-2026-15349)
vulnerability in wordpress (CVE-2026-15349). Risk of unauthorized operations or information disclosure.
CVE-2026-15457 Path Traversal in wordpress (CVE-2026-15457)
path traversal in wordpress (CVE-2026-15457). Confidential information can be exposed externally.
CVE-2026-15161 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15161)
cross-site scripting in wordpress (CVE-2026-15161). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →