Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-77757 |
|
Path Traversal in wordpress (CVE-2026-77757)
path traversal in wordpress (CVE-2026-77757). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77754 |
|
Information Disclosure in wordpress (CVE-2026-77754)
vulnerability in wordpress (CVE-2026-77754). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77695 |
|
Vulnerability in wordpress (CVE-2026-77695)
vulnerability in wordpress (CVE-2026-77695). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77694 |
|
Vulnerability in wordpress (CVE-2026-77694)
vulnerability in wordpress (CVE-2026-77694). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77693 |
|
Vulnerability in wordpress (CVE-2026-77693)
vulnerability in wordpress (CVE-2026-77693). Data can be tampered with by attackers.
|
| CVE-2026-74930 |
|
Vulnerability in wordpress (CVE-2026-74930)
vulnerability in wordpress (CVE-2026-74930). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75798 |
|
Vulnerability in wordpress (CVE-2026-75798)
vulnerability in wordpress (CVE-2026-75798). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75797 |
|
Path Traversal in wordpress (CVE-2026-75797)
path traversal in wordpress (CVE-2026-75797). Confidential information can be exposed externally.
|
| CVE-2026-74929 |
|
Vulnerability in wordpress (CVE-2026-74929)
vulnerability in wordpress (CVE-2026-74929). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19760 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-19760)
cross-site scripting in wordpress (CVE-2026-19760). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`.
|
| CVE-2026-74851 |
|
Code Injection in wordpress (CVE-2026-74851)
code injection in wordpress (CVE-2026-74851). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74928 |
|
Vulnerability in wordpress (CVE-2026-74928)
vulnerability in wordpress (CVE-2026-74928). Data can be tampered with by attackers.
|
| CVE-2026-16986 |
|
Vulnerability in wordpress (CVE-2026-16986)
vulnerability in wordpress (CVE-2026-16986). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14550 |
|
Vulnerability in wordpress (CVE-2026-14550)
vulnerability in wordpress (CVE-2026-14550). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16984 |
|
Vulnerability in wordpress (CVE-2026-16984)
vulnerability in wordpress (CVE-2026-16984). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19226 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-19226)
cross-site scripting in wordpress (CVE-2026-19226). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19220 |
|
Privilege Escalation in wordpress (CVE-2026-19220)
vulnerability in wordpress (CVE-2026-19220). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19718 |
|
Authentication Bypass in wordpress (CVE-2026-19718)
authentication bypass in wordpress (CVE-2026-19718). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19094 |
|
SQL Injection in wordpress (CVE-2026-19094)
SQL injection in wordpress (CVE-2026-19094). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14216 |
|
Authentication Bypass in wordpress (CVE-2026-14216)
authentication bypass in wordpress (CVE-2026-14216). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14212 |
|
Vulnerability in wordpress (CVE-2026-14212)
vulnerability in wordpress (CVE-2026-14212). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13406 |
|
Vulnerability in wordpress (CVE-2026-13406)
vulnerability in wordpress (CVE-2026-13406). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13404 |
|
Vulnerability in wordpress (CVE-2026-13404)
vulnerability in wordpress (CVE-2026-13404). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13172 |
|
Vulnerability in wordpress (CVE-2026-13172)
vulnerability in wordpress (CVE-2026-13172). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19632 |
|
Vulnerability in wordpress (CVE-2026-19632)
vulnerability in wordpress (CVE-2026-19632). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55805 |
|
Cross-Site Scripting (XSS) in drupal (CVE-2026-55805)
cross-site scripting in drupal (CVE-2026-55805). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18259 |
|
Vulnerability in drupal (CVE-2026-18259)
vulnerability in drupal (CVE-2026-18259). Confidential information can be exposed externally.
|
| CVE-2026-18260 |
|
Vulnerability in Drupal Disable Login Page. This issue affects Disable Login Page versions: *.*.
Vulnerability in Drupal Disable Login Page. This issue affects Disable Login Page versions: *.*.
|
| CVE-2026-18261 |
|
Vulnerability in Drupal Powerful Surveys. This issue affects Powerful Surveys versions: *.*.
Vulnerability in Drupal Powerful Surveys. This issue affects Powerful Surveys versions: *.*.
|
| CVE-2026-18985 |
|
Authorization Flaw in drupal (CVE-2026-18985)
vulnerability in drupal (CVE-2026-18985). Confidential information can be exposed externally.
|
| CVE-2026-16639 |
|
Vulnerability in drupal (CVE-2026-16639)
vulnerability in drupal (CVE-2026-16639). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15917 |
|
Cross-Site Scripting (XSS) in drupal (CVE-2026-15917)
cross-site scripting in drupal (CVE-2026-15917). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16638 |
|
Cross-Site Scripting (XSS) in drupal (CVE-2026-16638)
cross-site scripting in drupal (CVE-2026-16638). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15088 |
|
Vulnerability in drupal (CVE-2026-15088)
vulnerability in drupal (CVE-2026-15088). Confidential information can be exposed externally.
|
| CVE-2026-15916 |
|
Vulnerability in drupal (CVE-2026-15916)
vulnerability in drupal (CVE-2026-15916). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16644 |
|
Authorization Flaw in drupal (CVE-2026-16644)
vulnerability in drupal (CVE-2026-16644). Confidential information can be exposed externally.
|
| CVE-2026-16646 |
|
Vulnerability in Drupal PanKM. This issue affects PanKM versions: *.*.
Vulnerability in Drupal PanKM. This issue affects PanKM versions: *.*.
|
| CVE-2026-16645 |
|
Vulnerability in drupal (CVE-2026-16645)
vulnerability in drupal (CVE-2026-16645). Confidential information can be exposed externally.
|
| CVE-2026-16642 |
|
Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions: *.*.
Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions: *.*.
|
| CVE-2026-16641 |
|
Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions: *.*.
Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions: *.*.
|
| CVE-2026-16643 |
|
Vulnerability in drupal (CVE-2026-16643)
vulnerability in drupal (CVE-2026-16643). Confidential information can be exposed externally.
|
| CVE-2026-16640 |
|
Cross-Site Scripting (XSS) in drupal (CVE-2026-16640)
cross-site scripting in drupal (CVE-2026-16640). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-74932 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-74932)
cross-site scripting in wordpress (CVE-2026-74932). Successful exploitation can lead to full system takeover. Exploitable via `Host header`.
|
| CVE-2026-78468 |
|
SQL Injection in wordpress (CVE-2026-78468)
SQL injection in wordpress (CVE-2026-78468). Confidential information can be exposed externally.
|
| CVE-2026-77824 |
|
SQL Injection in wordpress (CVE-2026-77824)
SQL injection in wordpress (CVE-2026-77824). Confidential information can be exposed externally.
|
| CVE-2026-75908 |
|
Vulnerability in wordpress (CVE-2026-75908)
vulnerability in wordpress (CVE-2026-75908). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75971 |
|
Privilege Escalation in wordpress (CVE-2026-75971)
vulnerability in wordpress (CVE-2026-75971). Successful exploitation can lead to full system takeover. Exploitable via ``import_start``.
|
| CVE-2026-18547 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-18547)
cross-site scripting in wordpress (CVE-2026-18547). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17587 |
|
Vulnerability in wordpress (CVE-2026-17587)
vulnerability in wordpress (CVE-2026-17587). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19949 |
|
SQL Injection in wordpress (CVE-2026-19949)
SQL injection in wordpress (CVE-2026-19949). Successful exploitation can lead to full system takeover.
|