Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cms Clear
ID Title
CVE-2026-4559 Cross-Site Scripting (XSS) in wordpress (CVE-2026-4559)
cross-site scripting in wordpress (CVE-2026-4559). Risk of unauthorized operations or information disclosure.
CVE-2026-4244 Vulnerability in wordpress (CVE-2026-4244)
vulnerability in wordpress (CVE-2026-4244). Risk of unauthorized operations or information disclosure. Exploitable via ``edit_others_posts``.
CVE-2026-4245 Authorization Flaw in wordpress (CVE-2026-4245)
vulnerability in wordpress (CVE-2026-4245). Risk of unauthorized operations or information disclosure. Exploitable via ``duplicate_posts``.
CVE-2026-3424 Code Injection in wordpress (CVE-2026-3424)
code injection in wordpress (CVE-2026-3424). Risk of unauthorized operations or information disclosure.
CVE-2026-78003 SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-78003)
SSRF in wordpress (CVE-2026-78003). Successful exploitation can lead to full system takeover.
CVE-2026-77000 Authentication Bypass in wordpress (CVE-2026-77000)
authentication bypass in wordpress (CVE-2026-77000). Successful exploitation can lead to full system takeover.
CVE-2026-77001 Authentication Bypass in wordpress (CVE-2026-77001)
authentication bypass in wordpress (CVE-2026-77001). Successful exploitation can lead to full system takeover.
CVE-2026-77002 Authentication Bypass in wordpress (CVE-2026-77002)
authentication bypass in wordpress (CVE-2026-77002). Successful exploitation can lead to full system takeover.
CVE-2026-19221 Code Injection in wordpress (CVE-2026-19221)
code injection in wordpress (CVE-2026-19221). Successful exploitation can lead to full system takeover.
CVE-2026-19222 Privilege Escalation in wordpress (CVE-2026-19222)
vulnerability in wordpress (CVE-2026-19222). Successful exploitation can lead to full system takeover.
CVE-2026-76789 Cross-Site Scripting (XSS) in wordpress (CVE-2026-76789)
cross-site scripting in wordpress (CVE-2026-76789). Successful exploitation can lead to full system takeover.
CVE-2026-76793 Authentication Bypass in wordpress (CVE-2026-76793)
authentication bypass in wordpress (CVE-2026-76793). Successful exploitation can lead to full system takeover.
CVE-2026-16612 Information Disclosure in wordpress (CVE-2026-16612)
vulnerability in wordpress (CVE-2026-16612). Risk of unauthorized operations or information disclosure.
CVE-2026-16738 Vulnerability in wordpress (CVE-2026-16738)
vulnerability in wordpress (CVE-2026-16738). Risk of unauthorized operations or information disclosure.
CVE-2026-18052 Authentication Bypass in wordpress (CVE-2026-18052)
authentication bypass in wordpress (CVE-2026-18052). Successful exploitation can lead to full system takeover.
CVE-2026-19093 Vulnerability in wordpress (CVE-2026-19093)
vulnerability in wordpress (CVE-2026-19093). Confidential information can be exposed externally.
CVE-2026-16260 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16260)
cross-site scripting in wordpress (CVE-2026-16260). Successful exploitation can lead to full system takeover.
CVE-2026-14187 Vulnerability in wordpress (CVE-2026-14187)
vulnerability in wordpress (CVE-2026-14187). Risk of unauthorized operations or information disclosure.
CVE-2026-76074 Vulnerability in wordpress (CVE-2026-76074)
vulnerability in wordpress (CVE-2026-76074). Risk of unauthorized operations or information disclosure.
CVE-2026-76057 Vulnerability in wordpress (CVE-2026-76057)
vulnerability in wordpress (CVE-2026-76057). Risk of unauthorized operations or information disclosure.
CVE-2026-75027 Vulnerability in wordpress (CVE-2026-75027)
vulnerability in wordpress (CVE-2026-75027). Risk of unauthorized operations or information disclosure.
CVE-2026-19883 Privilege Escalation in wordpress (CVE-2026-19883)
vulnerability in wordpress (CVE-2026-19883). Successful exploitation can lead to full system takeover.
CVE-2026-19848 Vulnerability in wordpress (CVE-2026-19848)
vulnerability in wordpress (CVE-2026-19848). Risk of unauthorized operations or information disclosure.
CVE-2026-18356 Vulnerability in wordpress (CVE-2026-18356)
vulnerability in wordpress (CVE-2026-18356). Risk of unauthorized operations or information disclosure.
CVE-2026-17559 Authorization Flaw in wordpress (CVE-2026-17559)
vulnerability in wordpress (CVE-2026-17559). Risk of unauthorized operations or information disclosure.
CVE-2026-16650 Vulnerability in wordpress (CVE-2026-16650)
vulnerability in wordpress (CVE-2026-16650). Risk of unauthorized operations or information disclosure.
CVE-2026-15150 Vulnerability in wordpress (CVE-2026-15150)
vulnerability in wordpress (CVE-2026-15150). Risk of unauthorized operations or information disclosure.
CVE-2026-15046 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-15046)
vulnerability in wordpress (CVE-2026-15046). Risk of unauthorized operations or information disclosure.
CVE-2026-13176 SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-13176)
SSRF in wordpress (CVE-2026-13176). Risk of unauthorized operations or information disclosure.
CVE-2026-77264 Vulnerability in wordpress (CVE-2026-77264)
vulnerability in wordpress (CVE-2026-77264). Successful exploitation can lead to full system takeover.
CVE-2026-75796 Privilege Escalation in wordpress (CVE-2026-75796)
vulnerability in wordpress (CVE-2026-75796). Successful exploitation can lead to full system takeover.
CVE-2026-19435 Information Disclosure in wordpress (CVE-2026-19435)
vulnerability in wordpress (CVE-2026-19435). Risk of unauthorized operations or information disclosure.
CVE-2026-19085 Vulnerability in wordpress (CVE-2026-19085)
vulnerability in wordpress (CVE-2026-19085). Risk of unauthorized operations or information disclosure.
CVE-2026-18781 Code Injection in wordpress (CVE-2026-18781)
code injection in wordpress (CVE-2026-18781). Successful exploitation can lead to full system takeover.
CVE-2026-16962 Vulnerability in wordpress (CVE-2026-16962)
vulnerability in wordpress (CVE-2026-16962). Risk of unauthorized operations or information disclosure.
CVE-2026-16959 SQL Injection in wordpress (CVE-2026-16959)
SQL injection in wordpress (CVE-2026-16959). Confidential information can be exposed externally.
CVE-2026-16577 Authorization Flaw in wordpress (CVE-2026-16577)
vulnerability in wordpress (CVE-2026-16577). Risk of unauthorized operations or information disclosure.
CVE-2026-16576 Vulnerability in wordpress (CVE-2026-16576)
vulnerability in wordpress (CVE-2026-16576). Successful exploitation can lead to full system takeover.
CVE-2026-16575 Information Disclosure in wordpress (CVE-2026-16575)
vulnerability in wordpress (CVE-2026-16575). Risk of unauthorized operations or information disclosure.
CVE-2026-14601 SQL Injection in wordpress (CVE-2026-14601)
SQL injection in wordpress (CVE-2026-14601). Confidential information can be exposed externally.
CVE-2026-14325 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14325)
cross-site scripting in wordpress (CVE-2026-14325). Risk of unauthorized operations or information disclosure.
CVE-2026-13736 Vulnerability in wordpress (CVE-2026-13736)
vulnerability in wordpress (CVE-2026-13736). Risk of unauthorized operations or information disclosure.
CVE-2025-15671 Authentication Bypass in wordpress (CVE-2025-15671)
authentication bypass in wordpress (CVE-2025-15671). Risk of unauthorized operations or information disclosure.
CVE-2026-18409 Cross-Site Scripting (XSS) in wordpress (CVE-2026-18409)
cross-site scripting in wordpress (CVE-2026-18409). Risk of unauthorized operations or information disclosure.
CVE-2026-66594 Subscriber SQL Injection in WordPress Persistent Login <= 3.1.0 versions.
Subscriber SQL Injection in WordPress Persistent Login <= 3.1.0 versions.
CVE-2026-66592 Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 versions.
Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 versions.
CVE-2026-19697 Cross-Site Scripting (XSS) in wordpress (CVE-2026-19697)
cross-site scripting in wordpress (CVE-2026-19697). Successful exploitation can lead to full system takeover.
CVE-2026-19699 Authorization Flaw in wordpress (CVE-2026-19699)
vulnerability in wordpress (CVE-2026-19699). Risk of unauthorized operations or information disclosure.
CVE-2026-19615 Cross-Site Scripting (XSS) in wordpress (CVE-2026-19615)
cross-site scripting in wordpress (CVE-2026-19615). Successful exploitation can lead to full system takeover.
CVE-2026-13405 Code Injection in wordpress (CVE-2026-13405)
code injection in wordpress (CVE-2026-13405). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →