Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cms Clear
ID Title
CVE-2026-15369 Privilege Escalation in CVE-2026-15369 (CVE-2026-15369)
vulnerability in CVE-2026-15369 (CVE-2026-15369). Risk of unauthorized operations or information disclosure.
CVE-2026-14494 Unrestricted File Upload in wordpress (CVE-2026-14494)
vulnerability in wordpress (CVE-2026-14494). Successful exploitation can lead to full system takeover.
CVE-2026-76581 Vulnerability in wordpress (CVE-2026-76581)
vulnerability in wordpress (CVE-2026-76581). Successful exploitation can lead to full system takeover. Exploitable via ``wdpsso_step1``.
CVE-2026-19092 Vulnerability in wordpress (CVE-2026-19092)
vulnerability in wordpress (CVE-2026-19092). Successful exploitation can lead to full system takeover.
CVE-2026-32566 Vulnerability in wordpress (CVE-2026-32566)
vulnerability in wordpress (CVE-2026-32566). Successful exploitation can lead to full system takeover.
CVE-2026-77016 Vulnerability in wordpress (CVE-2026-77016)
vulnerability in wordpress (CVE-2026-77016). Data can be tampered with by attackers.
CVE-2026-18080 Unrestricted File Upload in wordpress (CVE-2026-18080)
vulnerability in wordpress (CVE-2026-18080). Successful exploitation can lead to full system takeover.
CVE-2026-18431 Vulnerability in wordpress (CVE-2026-18431)
vulnerability in wordpress (CVE-2026-18431). Successful exploitation can lead to full system takeover.
CVE-2026-19632 Vulnerability in wordpress (CVE-2026-19632)
vulnerability in wordpress (CVE-2026-19632). Successful exploitation can lead to full system takeover.
CVE-2026-16641 Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions: *.*.
Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions: *.*.
CVE-2026-16645 Vulnerability in drupal (CVE-2026-16645)
vulnerability in drupal (CVE-2026-16645). Confidential information can be exposed externally.
CVE-2026-16644 Authorization Flaw in drupal (CVE-2026-16644)
vulnerability in drupal (CVE-2026-16644). Confidential information can be exposed externally.
CVE-2026-16639 Vulnerability in drupal (CVE-2026-16639)
vulnerability in drupal (CVE-2026-16639). Successful exploitation can lead to full system takeover.
CVE-2026-78570 Privilege Escalation in wordpress (CVE-2026-78570)
vulnerability in wordpress (CVE-2026-78570). Successful exploitation can lead to full system takeover.
CVE-2026-78568 SQL Injection in wordpress (CVE-2026-78568)
SQL injection in wordpress (CVE-2026-78568). Successful exploitation can lead to full system takeover.
CVE-2026-78477 Vulnerability in wordpress (CVE-2026-78477)
vulnerability in wordpress (CVE-2026-78477). Successful exploitation can lead to full system takeover.
CVE-2026-32563 Unsafe Deserialization in wordpress (CVE-2026-32563)
vulnerability in wordpress (CVE-2026-32563). Successful exploitation can lead to full system takeover.
CVE-2026-32558 Vulnerability in wordpress (CVE-2026-32558)
vulnerability in wordpress (CVE-2026-32558). Successful exploitation can lead to full system takeover.
CVE-2026-13598 Privilege Escalation in wordpress (CVE-2026-13598)
vulnerability in wordpress (CVE-2026-13598). Successful exploitation can lead to full system takeover.
CVE-2026-4703 Unsafe Deserialization in wordpress (CVE-2026-4703)
vulnerability in wordpress (CVE-2026-4703). Successful exploitation can lead to full system takeover.
CVE-2026-78003 SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-78003)
SSRF in wordpress (CVE-2026-78003). Successful exploitation can lead to full system takeover.
CVE-2026-77000 Authentication Bypass in wordpress (CVE-2026-77000)
authentication bypass in wordpress (CVE-2026-77000). Successful exploitation can lead to full system takeover.
CVE-2026-77001 Authentication Bypass in wordpress (CVE-2026-77001)
authentication bypass in wordpress (CVE-2026-77001). Successful exploitation can lead to full system takeover.
CVE-2026-77002 Authentication Bypass in wordpress (CVE-2026-77002)
authentication bypass in wordpress (CVE-2026-77002). Successful exploitation can lead to full system takeover.
CVE-2026-77264 Vulnerability in wordpress (CVE-2026-77264)
vulnerability in wordpress (CVE-2026-77264). Successful exploitation can lead to full system takeover.
CVE-2026-66592 Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 versions.
Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 versions.
CVE-2026-75860 Privilege Escalation in wordpress (CVE-2026-75860)
vulnerability in wordpress (CVE-2026-75860). Successful exploitation can lead to full system takeover.
CVE-2026-18315 Vulnerability in wordpress (CVE-2026-18315)
vulnerability in wordpress (CVE-2026-18315). Successful exploitation can lead to full system takeover.
CVE-2026-18937 Code Injection in wordpress (CVE-2026-18937)
code injection in wordpress (CVE-2026-18937). Successful exploitation can lead to full system takeover.
CVE-2026-18776 Vulnerability in wordpress (CVE-2026-18776)
vulnerability in wordpress (CVE-2026-18776). Successful exploitation can lead to full system takeover.
CVE-2026-18031 Authentication Bypass in wordpress (CVE-2026-18031)
authentication bypass in wordpress (CVE-2026-18031). Successful exploitation can lead to full system takeover.
CVE-2026-18051 Path Traversal in wordpress (CVE-2026-18051)
path traversal in wordpress (CVE-2026-18051). Data can be tampered with by attackers.
CVE-2026-15748 Unrestricted File Upload in wordpress (CVE-2026-15748)
vulnerability in wordpress (CVE-2026-15748). Successful exploitation can lead to full system takeover.
CVE-2024-13784 Unsafe Deserialization in wordpress (CVE-2024-13784)
vulnerability in wordpress (CVE-2024-13784). Successful exploitation can lead to full system takeover.
CVE-2026-18316 Vulnerability in wordpress (CVE-2026-18316)
vulnerability in wordpress (CVE-2026-18316). Data can be tampered with by attackers.
CVE-2026-19725 Path Traversal in wordpress (CVE-2026-19725)
path traversal in wordpress (CVE-2026-19725). Confidential information can be exposed externally.
CVE-2026-19714 Authentication Bypass in wordpress (CVE-2026-19714)
authentication bypass in wordpress (CVE-2026-19714). Confidential information can be exposed externally.
CVE-2026-16098 Unrestricted File Upload in wordpress (CVE-2026-16098)
vulnerability in wordpress (CVE-2026-16098). Successful exploitation can lead to full system takeover.
CVE-2026-18432 Privilege Escalation in wordpress (CVE-2026-18432)
vulnerability in wordpress (CVE-2026-18432). Successful exploitation can lead to full system takeover. Exploitable via ``item_id``.
CVE-2026-14524 Path Traversal in wordpress (CVE-2026-14524)
path traversal in wordpress (CVE-2026-14524). Data can be tampered with by attackers.
CVE-2026-18855 Path Traversal in wordpress (CVE-2026-18855)
path traversal in wordpress (CVE-2026-18855). Data can be tampered with by attackers.
CVE-2026-19598 Authorization Flaw in wordpress (CVE-2026-19598)
vulnerability in wordpress (CVE-2026-19598). Successful exploitation can lead to full system takeover.
CVE-2026-16142 Vulnerability in wordpress (CVE-2026-16142)
vulnerability in wordpress (CVE-2026-16142). Successful exploitation can lead to full system takeover.
CVE-2026-15826 Vulnerability in wordpress (CVE-2026-15826)
vulnerability in wordpress (CVE-2026-15826). Successful exploitation can lead to full system takeover.
CVE-2026-15341 Authentication Bypass in wordpress (CVE-2026-15341)
authentication bypass in wordpress (CVE-2026-15341). Successful exploitation can lead to full system takeover. Exploitable via ``init``.
CVE-2026-15303 Authentication Bypass in wordpress (CVE-2026-15303)
authentication bypass in wordpress (CVE-2026-15303). Successful exploitation can lead to full system takeover.
CVE-2026-14484 Path Traversal in wordpress (CVE-2026-14484)
path traversal in wordpress (CVE-2026-14484). Data can be tampered with by attackers.
CVE-2026-12949 Vulnerability in wordpress (CVE-2026-12949)
vulnerability in wordpress (CVE-2026-12949). Successful exploitation can lead to full system takeover.
CVE-2026-15413 Vulnerability in wordpress (CVE-2026-15413)
vulnerability in wordpress (CVE-2026-15413). Successful exploitation can lead to full system takeover.
CVE-2026-14182 Authentication Bypass in wordpress (CVE-2026-14182)
authentication bypass in wordpress (CVE-2026-14182). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →