Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-15161 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15161)
cross-site scripting in wordpress (CVE-2026-15161). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14503 |
|
Information Disclosure in wordpress (CVE-2026-14503)
vulnerability in wordpress (CVE-2026-14503). Confidential information can be exposed externally.
|
| CVE-2026-13765 |
|
Vulnerability in wordpress (CVE-2026-13765)
vulnerability in wordpress (CVE-2026-13765). Confidential information can be exposed externally.
|
| CVE-2026-13352 |
|
Unrestricted File Upload in wordpress (CVE-2026-13352)
vulnerability in wordpress (CVE-2026-13352). Successful exploitation can lead to full system takeover.
|
| CVE-2026-8616 |
|
Vulnerability in wordpress (CVE-2026-8616)
vulnerability in wordpress (CVE-2026-8616). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15395 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15395)
cross-site scripting in wordpress (CVE-2026-15395). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15160 |
|
Path Traversal in wordpress (CVE-2026-15160)
path traversal in wordpress (CVE-2026-15160). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15159 |
|
Vulnerability in wordpress (CVE-2026-15159)
vulnerability in wordpress (CVE-2026-15159). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11324 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-11324)
cross-site scripting in wordpress (CVE-2026-11324). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2594 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-2594)
cross-site scripting in wordpress (CVE-2026-2594). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.0.7` or later.
|
| CVE-2026-14956 |
|
Privilege Escalation in wordpress (CVE-2026-14956)
vulnerability in wordpress (CVE-2026-14956). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14782 |
|
SQL Injection in wordpress (CVE-2026-14782)
SQL injection in wordpress (CVE-2026-14782). Confidential information can be exposed externally.
|
| CVE-2026-7543 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-7543)
cross-site scripting in wordpress (CVE-2026-7543). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15610 |
|
Vulnerability in wordpress (CVE-2026-15610)
vulnerability in wordpress (CVE-2026-15610). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15727 |
|
SQL Injection in wordpress (CVE-2026-15727)
SQL injection in wordpress (CVE-2026-15727). Confidential information can be exposed externally.
|
| CVE-2026-15651 |
|
SQL Injection in wordpress (CVE-2026-15651)
SQL injection in wordpress (CVE-2026-15651). Confidential information can be exposed externally.
|
| CVE-2026-15008 |
|
Unsafe Deserialization in wordpress (CVE-2026-15008)
vulnerability in wordpress (CVE-2026-15008). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15099 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15099)
cross-site scripting in wordpress (CVE-2026-15099). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15021 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15021)
cross-site scripting in wordpress (CVE-2026-15021). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13741 |
|
Privilege Escalation in wordpress (CVE-2026-13741)
vulnerability in wordpress (CVE-2026-13741). Successful exploitation can lead to full system takeover. Exploitable via ``digits_reg_userrole``.
|
| CVE-2026-15005 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-15005)
vulnerability in wordpress (CVE-2026-15005). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15106 |
|
Vulnerability in wordpress (CVE-2026-15106)
vulnerability in wordpress (CVE-2026-15106). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15350 |
|
Vulnerability in wordpress (CVE-2026-15350)
vulnerability in wordpress (CVE-2026-15350). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15324 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15324)
cross-site scripting in wordpress (CVE-2026-15324). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15022 |
|
SQL Injection in wordpress (CVE-2026-15022)
SQL injection in wordpress (CVE-2026-15022). Confidential information can be exposed externally.
|
| CVE-2026-13767 |
|
SQL Injection in wordpress (CVE-2026-13767)
SQL injection in wordpress (CVE-2026-13767). Confidential information can be exposed externally.
|
| CVE-2026-15407 |
|
Vulnerability in wordpress (CVE-2026-15407)
vulnerability in wordpress (CVE-2026-15407). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13755 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13755)
cross-site scripting in wordpress (CVE-2026-13755). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15103 |
|
Privilege Escalation in wordpress (CVE-2026-15103)
vulnerability in wordpress (CVE-2026-15103). Successful exploitation can lead to full system takeover. Exploitable via ``group_id``.
|
| CVE-2026-13754 |
|
SQL Injection in wordpress (CVE-2026-13754)
SQL injection in wordpress (CVE-2026-13754). Confidential information can be exposed externally.
|
| CVE-2026-12585 |
|
Authentication Bypass in wordpress (CVE-2026-12585)
authentication bypass in wordpress (CVE-2026-12585). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12684 |
|
Unrestricted File Upload in wordpress (CVE-2026-12684)
vulnerability in wordpress (CVE-2026-12684). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12869 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-12869)
cross-site scripting in wordpress (CVE-2026-12869). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12906 |
|
Vulnerability in wordpress (CVE-2026-12906)
vulnerability in wordpress (CVE-2026-12906). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12907 |
|
Vulnerability in wordpress (CVE-2026-12907)
vulnerability in wordpress (CVE-2026-12907). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12978 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-12978)
cross-site scripting in wordpress (CVE-2026-12978). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12979 |
|
Vulnerability in wordpress (CVE-2026-12979)
vulnerability in wordpress (CVE-2026-12979). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12510 |
|
Vulnerability in wordpress (CVE-2026-12510)
vulnerability in wordpress (CVE-2026-12510). Confidential information can be exposed externally.
|
| CVE-2026-12525 |
|
Privilege Escalation in wordpress (CVE-2026-12525)
vulnerability in wordpress (CVE-2026-12525). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12395 |
|
SQL Injection in wordpress (CVE-2026-12395)
SQL injection in wordpress (CVE-2026-12395). Confidential information can be exposed externally.
|
| CVE-2026-11866 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-11866)
vulnerability in wordpress (CVE-2026-11866). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11371 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-11371)
cross-site scripting in wordpress (CVE-2026-11371). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12492 |
|
Authentication Bypass in wordpress (CVE-2026-12492)
authentication bypass in wordpress (CVE-2026-12492). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15013 |
|
Vulnerability in wordpress (CVE-2026-15013)
vulnerability in wordpress (CVE-2026-15013). Successful exploitation can lead to full system takeover. Exploitable via ``SignatureMethod``.
|
| CVE-2026-15306 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15306)
cross-site scripting in wordpress (CVE-2026-15306). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15458 |
|
SQL Injection in wordpress (CVE-2026-15458)
SQL injection in wordpress (CVE-2026-15458). Confidential information can be exposed externally.
|
| CVE-2026-15445 |
|
SQL Injection in wordpress (CVE-2026-15445)
SQL injection in wordpress (CVE-2026-15445). Confidential information can be exposed externally.
|
| CVE-2026-13042 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13042)
cross-site scripting in wordpress (CVE-2026-13042). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15652 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15652)
cross-site scripting in wordpress (CVE-2026-15652). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15336 |
|
Vulnerability in wordpress (CVE-2026-15336)
vulnerability in wordpress (CVE-2026-15336). Risk of unauthorized operations or information disclosure.
|