Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cms Clear
ID Title
CVE-2026-15161 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15161)
cross-site scripting in wordpress (CVE-2026-15161). Risk of unauthorized operations or information disclosure.
CVE-2026-14503 Information Disclosure in wordpress (CVE-2026-14503)
vulnerability in wordpress (CVE-2026-14503). Confidential information can be exposed externally.
CVE-2026-13765 Vulnerability in wordpress (CVE-2026-13765)
vulnerability in wordpress (CVE-2026-13765). Confidential information can be exposed externally.
CVE-2026-13352 Unrestricted File Upload in wordpress (CVE-2026-13352)
vulnerability in wordpress (CVE-2026-13352). Successful exploitation can lead to full system takeover.
CVE-2026-8616 Vulnerability in wordpress (CVE-2026-8616)
vulnerability in wordpress (CVE-2026-8616). Risk of unauthorized operations or information disclosure.
CVE-2026-15395 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15395)
cross-site scripting in wordpress (CVE-2026-15395). Risk of unauthorized operations or information disclosure.
CVE-2026-15160 Path Traversal in wordpress (CVE-2026-15160)
path traversal in wordpress (CVE-2026-15160). Risk of unauthorized operations or information disclosure.
CVE-2026-15159 Vulnerability in wordpress (CVE-2026-15159)
vulnerability in wordpress (CVE-2026-15159). Risk of unauthorized operations or information disclosure.
CVE-2026-11324 Cross-Site Scripting (XSS) in wordpress (CVE-2026-11324)
cross-site scripting in wordpress (CVE-2026-11324). Risk of unauthorized operations or information disclosure.
CVE-2026-2594 Cross-Site Scripting (XSS) in wordpress (CVE-2026-2594)
cross-site scripting in wordpress (CVE-2026-2594). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.0.7` or later.
CVE-2026-14956 Privilege Escalation in wordpress (CVE-2026-14956)
vulnerability in wordpress (CVE-2026-14956). Successful exploitation can lead to full system takeover.
CVE-2026-14782 SQL Injection in wordpress (CVE-2026-14782)
SQL injection in wordpress (CVE-2026-14782). Confidential information can be exposed externally.
CVE-2026-7543 Cross-Site Scripting (XSS) in wordpress (CVE-2026-7543)
cross-site scripting in wordpress (CVE-2026-7543). Risk of unauthorized operations or information disclosure.
CVE-2026-15610 Vulnerability in wordpress (CVE-2026-15610)
vulnerability in wordpress (CVE-2026-15610). Risk of unauthorized operations or information disclosure.
CVE-2026-15727 SQL Injection in wordpress (CVE-2026-15727)
SQL injection in wordpress (CVE-2026-15727). Confidential information can be exposed externally.
CVE-2026-15651 SQL Injection in wordpress (CVE-2026-15651)
SQL injection in wordpress (CVE-2026-15651). Confidential information can be exposed externally.
CVE-2026-15008 Unsafe Deserialization in wordpress (CVE-2026-15008)
vulnerability in wordpress (CVE-2026-15008). Successful exploitation can lead to full system takeover.
CVE-2026-15099 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15099)
cross-site scripting in wordpress (CVE-2026-15099). Risk of unauthorized operations or information disclosure.
CVE-2026-15021 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15021)
cross-site scripting in wordpress (CVE-2026-15021). Risk of unauthorized operations or information disclosure.
CVE-2026-13741 Privilege Escalation in wordpress (CVE-2026-13741)
vulnerability in wordpress (CVE-2026-13741). Successful exploitation can lead to full system takeover. Exploitable via ``digits_reg_userrole``.
CVE-2026-15005 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-15005)
vulnerability in wordpress (CVE-2026-15005). Successful exploitation can lead to full system takeover.
CVE-2026-15106 Vulnerability in wordpress (CVE-2026-15106)
vulnerability in wordpress (CVE-2026-15106). Risk of unauthorized operations or information disclosure.
CVE-2026-15350 Vulnerability in wordpress (CVE-2026-15350)
vulnerability in wordpress (CVE-2026-15350). Risk of unauthorized operations or information disclosure.
CVE-2026-15324 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15324)
cross-site scripting in wordpress (CVE-2026-15324). Risk of unauthorized operations or information disclosure.
CVE-2026-15022 SQL Injection in wordpress (CVE-2026-15022)
SQL injection in wordpress (CVE-2026-15022). Confidential information can be exposed externally.
CVE-2026-13767 SQL Injection in wordpress (CVE-2026-13767)
SQL injection in wordpress (CVE-2026-13767). Confidential information can be exposed externally.
CVE-2026-15407 Vulnerability in wordpress (CVE-2026-15407)
vulnerability in wordpress (CVE-2026-15407). Risk of unauthorized operations or information disclosure.
CVE-2026-13755 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13755)
cross-site scripting in wordpress (CVE-2026-13755). Risk of unauthorized operations or information disclosure.
CVE-2026-15103 Privilege Escalation in wordpress (CVE-2026-15103)
vulnerability in wordpress (CVE-2026-15103). Successful exploitation can lead to full system takeover. Exploitable via ``group_id``.
CVE-2026-13754 SQL Injection in wordpress (CVE-2026-13754)
SQL injection in wordpress (CVE-2026-13754). Confidential information can be exposed externally.
CVE-2026-12585 Authentication Bypass in wordpress (CVE-2026-12585)
authentication bypass in wordpress (CVE-2026-12585). Successful exploitation can lead to full system takeover.
CVE-2026-12684 Unrestricted File Upload in wordpress (CVE-2026-12684)
vulnerability in wordpress (CVE-2026-12684). Risk of unauthorized operations or information disclosure.
CVE-2026-12869 Cross-Site Scripting (XSS) in wordpress (CVE-2026-12869)
cross-site scripting in wordpress (CVE-2026-12869). Risk of unauthorized operations or information disclosure.
CVE-2026-12906 Vulnerability in wordpress (CVE-2026-12906)
vulnerability in wordpress (CVE-2026-12906). Risk of unauthorized operations or information disclosure.
CVE-2026-12907 Vulnerability in wordpress (CVE-2026-12907)
vulnerability in wordpress (CVE-2026-12907). Risk of unauthorized operations or information disclosure.
CVE-2026-12978 Cross-Site Scripting (XSS) in wordpress (CVE-2026-12978)
cross-site scripting in wordpress (CVE-2026-12978). Risk of unauthorized operations or information disclosure.
CVE-2026-12979 Vulnerability in wordpress (CVE-2026-12979)
vulnerability in wordpress (CVE-2026-12979). Risk of unauthorized operations or information disclosure.
CVE-2026-12510 Vulnerability in wordpress (CVE-2026-12510)
vulnerability in wordpress (CVE-2026-12510). Confidential information can be exposed externally.
CVE-2026-12525 Privilege Escalation in wordpress (CVE-2026-12525)
vulnerability in wordpress (CVE-2026-12525). Successful exploitation can lead to full system takeover.
CVE-2026-12395 SQL Injection in wordpress (CVE-2026-12395)
SQL injection in wordpress (CVE-2026-12395). Confidential information can be exposed externally.
CVE-2026-11866 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-11866)
vulnerability in wordpress (CVE-2026-11866). Risk of unauthorized operations or information disclosure.
CVE-2026-11371 Cross-Site Scripting (XSS) in wordpress (CVE-2026-11371)
cross-site scripting in wordpress (CVE-2026-11371). Risk of unauthorized operations or information disclosure.
CVE-2026-12492 Authentication Bypass in wordpress (CVE-2026-12492)
authentication bypass in wordpress (CVE-2026-12492). Successful exploitation can lead to full system takeover.
CVE-2026-15013 Vulnerability in wordpress (CVE-2026-15013)
vulnerability in wordpress (CVE-2026-15013). Successful exploitation can lead to full system takeover. Exploitable via ``SignatureMethod``.
CVE-2026-15306 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15306)
cross-site scripting in wordpress (CVE-2026-15306). Risk of unauthorized operations or information disclosure.
CVE-2026-15458 SQL Injection in wordpress (CVE-2026-15458)
SQL injection in wordpress (CVE-2026-15458). Confidential information can be exposed externally.
CVE-2026-15445 SQL Injection in wordpress (CVE-2026-15445)
SQL injection in wordpress (CVE-2026-15445). Confidential information can be exposed externally.
CVE-2026-13042 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13042)
cross-site scripting in wordpress (CVE-2026-13042). Risk of unauthorized operations or information disclosure.
CVE-2026-15652 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15652)
cross-site scripting in wordpress (CVE-2026-15652). Risk of unauthorized operations or information disclosure.
CVE-2026-15336 Vulnerability in wordpress (CVE-2026-15336)
vulnerability in wordpress (CVE-2026-15336). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →