Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cms Clear
ID Title
CVE-2026-78572 Unsafe Deserialization in wordpress (CVE-2026-78572)
vulnerability in wordpress (CVE-2026-78572). Successful exploitation can lead to full system takeover.
CVE-2026-78570 Privilege Escalation in wordpress (CVE-2026-78570)
vulnerability in wordpress (CVE-2026-78570). Successful exploitation can lead to full system takeover.
CVE-2026-76128 Cross-Site Scripting (XSS) in wordpress (CVE-2026-76128)
cross-site scripting in wordpress (CVE-2026-76128). Risk of unauthorized operations or information disclosure.
CVE-2026-78563 Cross-Site Scripting (XSS) in wordpress (CVE-2026-78563)
cross-site scripting in wordpress (CVE-2026-78563). Risk of unauthorized operations or information disclosure.
CVE-2026-78566 Vulnerability in wordpress (CVE-2026-78566)
vulnerability in wordpress (CVE-2026-78566). Successful exploitation can lead to full system takeover.
CVE-2026-78568 SQL Injection in wordpress (CVE-2026-78568)
SQL injection in wordpress (CVE-2026-78568). Successful exploitation can lead to full system takeover.
CVE-2026-78562 Vulnerability in wordpress (CVE-2026-78562)
vulnerability in wordpress (CVE-2026-78562). Successful exploitation can lead to full system takeover.
CVE-2026-18512 Cross-Site Scripting (XSS) in wordpress (CVE-2026-18512)
cross-site scripting in wordpress (CVE-2026-18512). Risk of unauthorized operations or information disclosure.
CVE-2026-18328 The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...
CVE-2026-18323 The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...
CVE-2026-18100 Cross-Site Scripting (XSS) in wordpress (CVE-2026-18100)
cross-site scripting in wordpress (CVE-2026-18100). Risk of unauthorized operations or information disclosure.
CVE-2026-16601 The CM Map Locations – Visualize and share your locations in a few clicks plugin for WordPress is...
The CM Map Locations – Visualize and share your locations in a few clicks plugin for WordPress is...
CVE-2026-78470 SQL Injection in wordpress (CVE-2026-78470)
SQL injection in wordpress (CVE-2026-78470). Confidential information can be exposed externally.
CVE-2026-78477 Vulnerability in wordpress (CVE-2026-78477)
vulnerability in wordpress (CVE-2026-78477). Successful exploitation can lead to full system takeover.
CVE-2026-78478 Vulnerability in wordpress (CVE-2026-78478)
vulnerability in wordpress (CVE-2026-78478). Successful exploitation can lead to full system takeover.
CVE-2026-78466 Vulnerability in wordpress (CVE-2026-78466)
vulnerability in wordpress (CVE-2026-78466). Risk of unauthorized operations or information disclosure.
CVE-2026-78467 Vulnerability in wordpress (CVE-2026-78467)
vulnerability in wordpress (CVE-2026-78467). Risk of unauthorized operations or information disclosure.
CVE-2026-12561 Cross-Site Scripting (XSS) in wordpress (CVE-2026-12561)
cross-site scripting in wordpress (CVE-2026-12561). Risk of unauthorized operations or information disclosure.
CVE-2026-76063 Cross-Site Scripting (XSS) in wordpress (CVE-2026-76063)
cross-site scripting in wordpress (CVE-2026-76063). Risk of unauthorized operations or information disclosure.
CVE-2026-75930 Vulnerability in wordpress (CVE-2026-75930)
vulnerability in wordpress (CVE-2026-75930). Risk of unauthorized operations or information disclosure.
CVE-2026-19943 Cross-Site Scripting (XSS) in wordpress (CVE-2026-19943)
cross-site scripting in wordpress (CVE-2026-19943). Risk of unauthorized operations or information disclosure.
CVE-2026-19892 Vulnerability in wordpress (CVE-2026-19892)
vulnerability in wordpress (CVE-2026-19892). Successful exploitation can lead to full system takeover.
CVE-2026-17089 Cross-Site Scripting (XSS) in wordpress (CVE-2026-17089)
cross-site scripting in wordpress (CVE-2026-17089). Risk of unauthorized operations or information disclosure.
CVE-2026-14280 Vulnerability in wordpress (CVE-2026-14280)
vulnerability in wordpress (CVE-2026-14280). Successful exploitation can lead to full system takeover.
CVE-2026-75019 Cross-Site Scripting (XSS) in wordpress (CVE-2026-75019)
cross-site scripting in wordpress (CVE-2026-75019). Risk of unauthorized operations or information disclosure.
CVE-2026-10627 Vulnerability in wordpress (CVE-2026-10627)
vulnerability in wordpress (CVE-2026-10627). Risk of unauthorized operations or information disclosure.
CVE-2026-75982 Vulnerability in wordpress (CVE-2026-75982)
vulnerability in wordpress (CVE-2026-75982). Data can be tampered with by attackers.
CVE-2025-9878 Cross-Site Scripting (XSS) in wordpress (CVE-2025-9878)
cross-site scripting in wordpress (CVE-2025-9878). Risk of unauthorized operations or information disclosure.
CVE-2026-75574 The Grav Email plugin (getgrav/grav-plugin-email) before 4.2.2 renders page-editor-controlled...
The Grav Email plugin (getgrav/grav-plugin-email) before 4.2.2 renders page-editor-controlled...
CVE-2026-56707 Grav Flex Objects plugin versions 1.4.0 through 1.4.7 contain an authorization bypass...
Grav Flex Objects plugin versions 1.4.0 through 1.4.7 contain an authorization bypass...
CVE-2026-19801 Vulnerability in wordpress (CVE-2026-19801)
vulnerability in wordpress (CVE-2026-19801). Risk of unauthorized operations or information disclosure.
CVE-2026-15023 SQL Injection in wordpress (CVE-2026-15023)
SQL injection in wordpress (CVE-2026-15023). Confidential information can be exposed externally.
CVE-2026-10630 Vulnerability in wordpress (CVE-2026-10630)
vulnerability in wordpress (CVE-2026-10630). Risk of unauthorized operations or information disclosure.
CVE-2026-32560 Vulnerability in wordpress (CVE-2026-32560)
vulnerability in wordpress (CVE-2026-32560). Successful exploitation can lead to full system takeover.
CVE-2026-32563 Unsafe Deserialization in wordpress (CVE-2026-32563)
vulnerability in wordpress (CVE-2026-32563). Successful exploitation can lead to full system takeover.
CVE-2026-28153 Vulnerability in wordpress (CVE-2026-28153)
vulnerability in wordpress (CVE-2026-28153). Confidential information can be exposed externally.
CVE-2026-32558 Vulnerability in wordpress (CVE-2026-32558)
vulnerability in wordpress (CVE-2026-32558). Successful exploitation can lead to full system takeover.
CVE-2026-16249 Vulnerability in wordpress (CVE-2026-16249)
vulnerability in wordpress (CVE-2026-16249). Risk of unauthorized operations or information disclosure.
CVE-2026-13598 Privilege Escalation in wordpress (CVE-2026-13598)
vulnerability in wordpress (CVE-2026-13598). Successful exploitation can lead to full system takeover.
CVE-2026-14853 Vulnerability in wordpress (CVE-2026-14853)
vulnerability in wordpress (CVE-2026-14853). Risk of unauthorized operations or information disclosure.
CVE-2026-77003 Privilege Escalation in wordpress (CVE-2026-77003)
vulnerability in wordpress (CVE-2026-77003). Risk of unauthorized operations or information disclosure.
CVE-2026-16149 Privilege Escalation in wordpress (CVE-2026-16149)
vulnerability in wordpress (CVE-2026-16149). Successful exploitation can lead to full system takeover.
CVE-2026-18027 Path Traversal in wordpress (CVE-2026-18027)
path traversal in wordpress (CVE-2026-18027). Confidential information can be exposed externally.
CVE-2026-0551 Unsafe Deserialization in wordpress (CVE-2026-0551)
vulnerability in wordpress (CVE-2026-0551). Successful exploitation can lead to full system takeover.
CVE-2026-4703 Unsafe Deserialization in wordpress (CVE-2026-4703)
vulnerability in wordpress (CVE-2026-4703). Successful exploitation can lead to full system takeover.
CVE-2026-5093 Vulnerability in wordpress (CVE-2026-5093)
vulnerability in wordpress (CVE-2026-5093). Risk of unauthorized operations or information disclosure.
CVE-2026-4561 Cross-Site Scripting (XSS) in wordpress (CVE-2026-4561)
cross-site scripting in wordpress (CVE-2026-4561). Risk of unauthorized operations or information disclosure.
CVE-2026-4559 Cross-Site Scripting (XSS) in wordpress (CVE-2026-4559)
cross-site scripting in wordpress (CVE-2026-4559). Risk of unauthorized operations or information disclosure.
CVE-2026-2996 Vulnerability in wordpress (CVE-2026-2996)
vulnerability in wordpress (CVE-2026-2996). Data can be tampered with by attackers.
CVE-2026-4244 Vulnerability in wordpress (CVE-2026-4244)
vulnerability in wordpress (CVE-2026-4244). Risk of unauthorized operations or information disclosure. Exploitable via ``edit_others_posts``.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →