Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cms Clear
ID Title
CVE-2026-8943 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-8943)
vulnerability in wordpress (CVE-2026-8943). Risk of unauthorized operations or information disclosure.
CVE-2026-8994 Authentication Bypass in wordpress (CVE-2026-8994)
authentication bypass in wordpress (CVE-2026-8994). Successful exploitation can lead to full system takeover. Exploitable via ``wp_ajax_nopriv``.
CVE-2026-8875 Cross-Site Scripting (XSS) in c (CVE-2026-8875)
cross-site scripting in c (CVE-2026-8875). Risk of unauthorized operations or information disclosure.
CVE-2026-8877 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8877)
cross-site scripting in wordpress (CVE-2026-8877). Risk of unauthorized operations or information disclosure.
CVE-2026-8884 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8884)
cross-site scripting in wordpress (CVE-2026-8884). Risk of unauthorized operations or information disclosure.
CVE-2026-8886 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8886)
cross-site scripting in wordpress (CVE-2026-8886). Risk of unauthorized operations or information disclosure.
CVE-2026-8887 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8887)
cross-site scripting in wordpress (CVE-2026-8887). Risk of unauthorized operations or information disclosure.
CVE-2026-8891 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8891)
cross-site scripting in wordpress (CVE-2026-8891). Risk of unauthorized operations or information disclosure.
CVE-2026-8894 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8894)
cross-site scripting in wordpress (CVE-2026-8894). Risk of unauthorized operations or information disclosure. Exploitable via ``iwrtooltip``.
CVE-2026-8897 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8897)
cross-site scripting in wordpress (CVE-2026-8897). Risk of unauthorized operations or information disclosure.
CVE-2026-8898 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8898)
cross-site scripting in wordpress (CVE-2026-8898). Risk of unauthorized operations or information disclosure.
CVE-2026-8867 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8867)
cross-site scripting in wordpress (CVE-2026-8867). Risk of unauthorized operations or information disclosure.
CVE-2026-8868 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8868)
cross-site scripting in wordpress (CVE-2026-8868). Risk of unauthorized operations or information disclosure.
CVE-2026-8869 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8869)
cross-site scripting in wordpress (CVE-2026-8869). Risk of unauthorized operations or information disclosure.
CVE-2026-8870 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8870)
cross-site scripting in wordpress (CVE-2026-8870). Risk of unauthorized operations or information disclosure.
CVE-2026-8871 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8871)
cross-site scripting in wordpress (CVE-2026-8871). Risk of unauthorized operations or information disclosure.
CVE-2026-8872 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8872)
cross-site scripting in wordpress (CVE-2026-8872). Risk of unauthorized operations or information disclosure.
CVE-2026-8873 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8873)
cross-site scripting in wordpress (CVE-2026-8873). Risk of unauthorized operations or information disclosure.
CVE-2026-8787 Privilege Escalation in wordpress (CVE-2026-8787)
vulnerability in wordpress (CVE-2026-8787). Successful exploitation can lead to full system takeover. Exploitable via ``user_email``.
CVE-2026-8837 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8837)
cross-site scripting in wordpress (CVE-2026-8837). Risk of unauthorized operations or information disclosure.
CVE-2026-8842 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8842)
cross-site scripting in wordpress (CVE-2026-8842). Risk of unauthorized operations or information disclosure.
CVE-2026-8844 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8844)
cross-site scripting in wordpress (CVE-2026-8844). Risk of unauthorized operations or information disclosure.
CVE-2026-8845 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8845)
cross-site scripting in wordpress (CVE-2026-8845). Risk of unauthorized operations or information disclosure.
CVE-2026-8846 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8846)
cross-site scripting in wordpress (CVE-2026-8846). Risk of unauthorized operations or information disclosure.
CVE-2026-8847 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8847)
cross-site scripting in wordpress (CVE-2026-8847). Risk of unauthorized operations or information disclosure.
CVE-2026-8866 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8866)
cross-site scripting in wordpress (CVE-2026-8866). Risk of unauthorized operations or information disclosure.
CVE-2026-8048 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8048)
cross-site scripting in wordpress (CVE-2026-8048). Risk of unauthorized operations or information disclosure.
CVE-2026-8698 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8698)
cross-site scripting in wordpress (CVE-2026-8698). Risk of unauthorized operations or information disclosure.
CVE-2026-8701 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8701)
cross-site scripting in wordpress (CVE-2026-8701). Risk of unauthorized operations or information disclosure. Exploitable via ``border``.
CVE-2026-8702 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8702)
cross-site scripting in wordpress (CVE-2026-8702). Risk of unauthorized operations or information disclosure.
CVE-2026-8703 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8703)
cross-site scripting in wordpress (CVE-2026-8703). Risk of unauthorized operations or information disclosure.
CVE-2026-8707 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8707)
cross-site scripting in wordpress (CVE-2026-8707). Risk of unauthorized operations or information disclosure.
CVE-2026-8708 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-8708)
vulnerability in wordpress (CVE-2026-8708). Risk of unauthorized operations or information disclosure.
CVE-2026-8760 Vulnerability in wordpress (CVE-2026-8760)
vulnerability in wordpress (CVE-2026-8760). Successful exploitation can lead to full system takeover.
CVE-2026-7614 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-7614)
vulnerability in wordpress (CVE-2026-7614). Risk of unauthorized operations or information disclosure.
CVE-2026-8040 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8040)
cross-site scripting in wordpress (CVE-2026-8040). Risk of unauthorized operations or information disclosure.
CVE-2026-6268 Cross-Site Scripting (XSS) in wordpress (CVE-2026-6268)
cross-site scripting in wordpress (CVE-2026-6268). Risk of unauthorized operations or information disclosure.
CVE-2026-9236 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-9236)
vulnerability in wordpress (CVE-2026-9236). Risk of unauthorized operations or information disclosure.
CVE-2026-6287 Cross-Site Scripting (XSS) in wordpress (CVE-2026-6287)
cross-site scripting in wordpress (CVE-2026-6287). Risk of unauthorized operations or information disclosure.
CVE-2025-14481 Vulnerability in wordpress (CVE-2025-14481)
vulnerability in wordpress (CVE-2025-14481). Risk of unauthorized operations or information disclosure.
CVE-2026-9022 Cross-Site Scripting (XSS) in wordpress (CVE-2026-9022)
cross-site scripting in wordpress (CVE-2026-9022). Risk of unauthorized operations or information disclosure.
CVE-2026-7493 Vulnerability in wordpress (CVE-2026-7493)
vulnerability in wordpress (CVE-2026-7493). Risk of unauthorized operations or information disclosure.
CVE-2026-6565 Cross-Site Scripting (XSS) in wordpress (CVE-2026-6565)
cross-site scripting in wordpress (CVE-2026-6565). Risk of unauthorized operations or information disclosure.
CVE-2026-48903 Cross-Site Scripting (XSS) in joomla (CVE-2026-48903)
cross-site scripting in joomla (CVE-2026-48903). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.4.6, 6.1.1` or later.
CVE-2026-48904 Vulnerability in joomla (CVE-2026-48904)
vulnerability in joomla (CVE-2026-48904). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.4.6, 6.1.1` or later.
CVE-2026-48905 Joomla! Framework - [20260520] - Inadequate content filtering within the cleanAttributes filter code.
Joomla! Framework - [20260520] - Inadequate content filtering within the cleanAttributes filter code.
CVE-2026-48896 Joomla! Core - [20260511] - MFA Authentication Bypass
Joomla! Core - [20260511] - MFA Authentication Bypass
CVE-2026-48897 Joomla! Core - [20260512] - MFA Authentication Bypass
Joomla! Core - [20260512] - MFA Authentication Bypass
CVE-2026-48898 Joomla! Core - [20260513] - Privilege escalation through com_users batch task
Joomla! Core - [20260513] - Privilege escalation through com_users batch task
CVE-2026-48899 Joomla! Core - [20260515] - Incorrect Access Control in sample data plugins
Joomla! Core - [20260515] - Incorrect Access Control in sample data plugins

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →