Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-4559 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-4559)
cross-site scripting in wordpress (CVE-2026-4559). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4244 |
|
Vulnerability in wordpress (CVE-2026-4244)
vulnerability in wordpress (CVE-2026-4244). Risk of unauthorized operations or information disclosure. Exploitable via ``edit_others_posts``.
|
| CVE-2026-4245 |
|
Authorization Flaw in wordpress (CVE-2026-4245)
vulnerability in wordpress (CVE-2026-4245). Risk of unauthorized operations or information disclosure. Exploitable via ``duplicate_posts``.
|
| CVE-2026-3424 |
|
Code Injection in wordpress (CVE-2026-3424)
code injection in wordpress (CVE-2026-3424). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78003 |
|
SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-78003)
SSRF in wordpress (CVE-2026-78003). Successful exploitation can lead to full system takeover.
|
| CVE-2026-77000 |
|
Authentication Bypass in wordpress (CVE-2026-77000)
authentication bypass in wordpress (CVE-2026-77000). Successful exploitation can lead to full system takeover.
|
| CVE-2026-77001 |
|
Authentication Bypass in wordpress (CVE-2026-77001)
authentication bypass in wordpress (CVE-2026-77001). Successful exploitation can lead to full system takeover.
|
| CVE-2026-77002 |
|
Authentication Bypass in wordpress (CVE-2026-77002)
authentication bypass in wordpress (CVE-2026-77002). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19221 |
|
Code Injection in wordpress (CVE-2026-19221)
code injection in wordpress (CVE-2026-19221). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19222 |
|
Privilege Escalation in wordpress (CVE-2026-19222)
vulnerability in wordpress (CVE-2026-19222). Successful exploitation can lead to full system takeover.
|
| CVE-2026-76789 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-76789)
cross-site scripting in wordpress (CVE-2026-76789). Successful exploitation can lead to full system takeover.
|
| CVE-2026-76793 |
|
Authentication Bypass in wordpress (CVE-2026-76793)
authentication bypass in wordpress (CVE-2026-76793). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16612 |
|
Information Disclosure in wordpress (CVE-2026-16612)
vulnerability in wordpress (CVE-2026-16612). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16738 |
|
Vulnerability in wordpress (CVE-2026-16738)
vulnerability in wordpress (CVE-2026-16738). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18052 |
|
Authentication Bypass in wordpress (CVE-2026-18052)
authentication bypass in wordpress (CVE-2026-18052). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19093 |
|
Vulnerability in wordpress (CVE-2026-19093)
vulnerability in wordpress (CVE-2026-19093). Confidential information can be exposed externally.
|
| CVE-2026-16260 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16260)
cross-site scripting in wordpress (CVE-2026-16260). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14187 |
|
Vulnerability in wordpress (CVE-2026-14187)
vulnerability in wordpress (CVE-2026-14187). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76074 |
|
Vulnerability in wordpress (CVE-2026-76074)
vulnerability in wordpress (CVE-2026-76074). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76057 |
|
Vulnerability in wordpress (CVE-2026-76057)
vulnerability in wordpress (CVE-2026-76057). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75027 |
|
Vulnerability in wordpress (CVE-2026-75027)
vulnerability in wordpress (CVE-2026-75027). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19883 |
|
Privilege Escalation in wordpress (CVE-2026-19883)
vulnerability in wordpress (CVE-2026-19883). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19848 |
|
Vulnerability in wordpress (CVE-2026-19848)
vulnerability in wordpress (CVE-2026-19848). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18356 |
|
Vulnerability in wordpress (CVE-2026-18356)
vulnerability in wordpress (CVE-2026-18356). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17559 |
|
Authorization Flaw in wordpress (CVE-2026-17559)
vulnerability in wordpress (CVE-2026-17559). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16650 |
|
Vulnerability in wordpress (CVE-2026-16650)
vulnerability in wordpress (CVE-2026-16650). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15150 |
|
Vulnerability in wordpress (CVE-2026-15150)
vulnerability in wordpress (CVE-2026-15150). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15046 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-15046)
vulnerability in wordpress (CVE-2026-15046). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13176 |
|
SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-13176)
SSRF in wordpress (CVE-2026-13176). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77264 |
|
Vulnerability in wordpress (CVE-2026-77264)
vulnerability in wordpress (CVE-2026-77264). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75796 |
|
Privilege Escalation in wordpress (CVE-2026-75796)
vulnerability in wordpress (CVE-2026-75796). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19435 |
|
Information Disclosure in wordpress (CVE-2026-19435)
vulnerability in wordpress (CVE-2026-19435). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19085 |
|
Vulnerability in wordpress (CVE-2026-19085)
vulnerability in wordpress (CVE-2026-19085). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18781 |
|
Code Injection in wordpress (CVE-2026-18781)
code injection in wordpress (CVE-2026-18781). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16962 |
|
Vulnerability in wordpress (CVE-2026-16962)
vulnerability in wordpress (CVE-2026-16962). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16959 |
|
SQL Injection in wordpress (CVE-2026-16959)
SQL injection in wordpress (CVE-2026-16959). Confidential information can be exposed externally.
|
| CVE-2026-16577 |
|
Authorization Flaw in wordpress (CVE-2026-16577)
vulnerability in wordpress (CVE-2026-16577). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16576 |
|
Vulnerability in wordpress (CVE-2026-16576)
vulnerability in wordpress (CVE-2026-16576). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16575 |
|
Information Disclosure in wordpress (CVE-2026-16575)
vulnerability in wordpress (CVE-2026-16575). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14601 |
|
SQL Injection in wordpress (CVE-2026-14601)
SQL injection in wordpress (CVE-2026-14601). Confidential information can be exposed externally.
|
| CVE-2026-14325 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14325)
cross-site scripting in wordpress (CVE-2026-14325). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13736 |
|
Vulnerability in wordpress (CVE-2026-13736)
vulnerability in wordpress (CVE-2026-13736). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-15671 |
|
Authentication Bypass in wordpress (CVE-2025-15671)
authentication bypass in wordpress (CVE-2025-15671). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18409 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-18409)
cross-site scripting in wordpress (CVE-2026-18409). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66594 |
|
Subscriber SQL Injection in WordPress Persistent Login <= 3.1.0 versions.
Subscriber SQL Injection in WordPress Persistent Login <= 3.1.0 versions.
|
| CVE-2026-66592 |
|
Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 versions.
Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 versions.
|
| CVE-2026-19697 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-19697)
cross-site scripting in wordpress (CVE-2026-19697). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19699 |
|
Authorization Flaw in wordpress (CVE-2026-19699)
vulnerability in wordpress (CVE-2026-19699). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19615 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-19615)
cross-site scripting in wordpress (CVE-2026-19615). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13405 |
|
Code Injection in wordpress (CVE-2026-13405)
code injection in wordpress (CVE-2026-13405). Risk of unauthorized operations or information disclosure.
|