Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cms Tag: cwe-863 Clear
ID Title
CVE-2026-19454 Authorization Flaw in wordpress (CVE-2026-19454)
vulnerability in wordpress (CVE-2026-19454). Confidential information can be exposed externally.
CVE-2026-18985 Authorization Flaw in drupal (CVE-2026-18985)
vulnerability in drupal (CVE-2026-18985). Confidential information can be exposed externally.
CVE-2026-16644 Authorization Flaw in drupal (CVE-2026-16644)
vulnerability in drupal (CVE-2026-16644). Confidential information can be exposed externally.
CVE-2026-4245 Authorization Flaw in wordpress (CVE-2026-4245)
vulnerability in wordpress (CVE-2026-4245). Risk of unauthorized operations or information disclosure. Exploitable via ``duplicate_posts``.
CVE-2026-17559 Authorization Flaw in wordpress (CVE-2026-17559)
vulnerability in wordpress (CVE-2026-17559). Risk of unauthorized operations or information disclosure.
CVE-2026-16577 Authorization Flaw in wordpress (CVE-2026-16577)
vulnerability in wordpress (CVE-2026-16577). Risk of unauthorized operations or information disclosure.
CVE-2026-19699 Authorization Flaw in wordpress (CVE-2026-19699)
vulnerability in wordpress (CVE-2026-19699). Risk of unauthorized operations or information disclosure.
CVE-2026-19726 Authorization Flaw in wordpress (CVE-2026-19726)
vulnerability in wordpress (CVE-2026-19726). Confidential information can be exposed externally.
CVE-2026-19598 Authorization Flaw in wordpress (CVE-2026-19598)
vulnerability in wordpress (CVE-2026-19598). Successful exploitation can lead to full system takeover.
CVE-2026-15388 Authorization Flaw in wordpress (CVE-2026-15388)
vulnerability in wordpress (CVE-2026-15388). Risk of unauthorized operations or information disclosure.
CVE-2026-18046 Authorization Flaw in wordpress (CVE-2026-18046)
vulnerability in wordpress (CVE-2026-18046). Risk of unauthorized operations or information disclosure.
CVE-2026-18934 Authorization Flaw in wordpress (CVE-2026-18934)
vulnerability in wordpress (CVE-2026-18934). Data can be tampered with by attackers.
CVE-2026-15229 Authorization Flaw in wordpress (CVE-2026-15229)
vulnerability in wordpress (CVE-2026-15229). Risk of unauthorized operations or information disclosure.
CVE-2025-15674 Authorization Flaw in wordpress (CVE-2025-15674)
vulnerability in wordpress (CVE-2025-15674). Risk of unauthorized operations or information disclosure.
CVE-2026-15254 Authorization Flaw in wordpress (CVE-2026-15254)
vulnerability in wordpress (CVE-2026-15254). Confidential information can be exposed externally.
CVE-2026-16540 Authorization Flaw in wordpress (CVE-2026-16540)
vulnerability in wordpress (CVE-2026-16540). Confidential information can be exposed externally.
CVE-2026-15939 Authorization Flaw in wordpress (CVE-2026-15939)
vulnerability in wordpress (CVE-2026-15939). Risk of unauthorized operations or information disclosure.
CVE-2026-16064 Authorization Flaw in wordpress (CVE-2026-16064)
vulnerability in wordpress (CVE-2026-16064). Risk of unauthorized operations or information disclosure.
CVE-2026-14929 Authorization Flaw in wordpress (CVE-2026-14929)
vulnerability in wordpress (CVE-2026-14929). Risk of unauthorized operations or information disclosure.
CVE-2026-14923 Authorization Flaw in wordpress (CVE-2026-14923)
vulnerability in wordpress (CVE-2026-14923). Confidential information can be exposed externally.
CVE-2025-10656 Authorization Flaw in wordpress (CVE-2025-10656)
vulnerability in wordpress (CVE-2025-10656). Successful exploitation can lead to full system takeover.
CVE-2026-8789 Authorization Flaw in wordpress (CVE-2026-8789)
vulnerability in wordpress (CVE-2026-8789). Data can be tampered with by attackers. Exploitable via ``ea_delete_multiple_connections``.
CVE-2026-65049 Authorization Flaw in wordpress (CVE-2026-65049)
vulnerability in wordpress (CVE-2026-65049). Data can be tampered with by attackers.
CVE-2026-10755 Authorization Flaw in wordpress (CVE-2026-10755)
vulnerability in wordpress (CVE-2026-10755). Risk of unauthorized operations or information disclosure.
CVE-2026-47998 Authorization Flaw in adobe (CVE-2026-47998)
vulnerability in adobe (CVE-2026-47998). Confidential information can be exposed externally.
CVE-2026-47984 Authorization Flaw in adobe (CVE-2026-47984)
vulnerability in adobe (CVE-2026-47984). Confidential information can be exposed externally.
CVE-2026-47988 Authorization Flaw in adobe (CVE-2026-47988)
vulnerability in adobe (CVE-2026-47988). Confidential information can be exposed externally.
CVE-2026-47996 Authorization Flaw in adobe (CVE-2026-47996)
vulnerability in adobe (CVE-2026-47996). Confidential information can be exposed externally.
CVE-2026-47997 Authorization Flaw in adobe (CVE-2026-47997)
vulnerability in adobe (CVE-2026-47997). Confidential information can be exposed externally.
CVE-2026-1359 Authorization Flaw in wordpress (CVE-2026-1359)
vulnerability in wordpress (CVE-2026-1359). Successful exploitation can lead to full system takeover.
CVE-2026-13232 Authorization Flaw in drupal/admin_feedback (CVE-2026-13232)
vulnerability in drupal/admin_feedback (CVE-2026-13232). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.8.0` or later.
CVE-2026-13237 Authorization Flaw in drupal/ai_agents (CVE-2026-13237)
vulnerability in drupal/ai_agents (CVE-2026-13237). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.1.4, 1.2.5, 1.3.1` or later.
CVE-2026-13238 Authorization Flaw in drupal/commerce_realex (CVE-2026-13238)
vulnerability in drupal/commerce_realex (CVE-2026-13238). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.0.2` or later.
CVE-2026-15286 Authorization Flaw in wordpress (CVE-2026-15286)
vulnerability in wordpress (CVE-2026-15286). Risk of unauthorized operations or information disclosure.
CVE-2026-5069 Authorization Flaw in wordpress (CVE-2026-5069)
vulnerability in wordpress (CVE-2026-5069). Risk of unauthorized operations or information disclosure.
CVE-2026-5149 Authorization Flaw in wordpress (CVE-2026-5149)
vulnerability in wordpress (CVE-2026-5149). Confidential information can be exposed externally.
CVE-2016-20075 Authorization Flaw in wordpress (CVE-2016-20075)
vulnerability in wordpress (CVE-2016-20075). Successful exploitation can lead to full system takeover.
CVE-2026-2470 Authorization Flaw in wordpress (CVE-2026-2470)
vulnerability in wordpress (CVE-2026-2470). Risk of unauthorized operations or information disclosure.
CVE-2026-9048 Authorization Flaw in wordpress (CVE-2026-9048)
vulnerability in wordpress (CVE-2026-9048). Risk of unauthorized operations or information disclosure.
CVE-2026-46366 phpMyFAQ has unauthenticated FAQ permission bypass via getFaqBySolutionId fallback query
phpMyFAQ has unauthenticated FAQ permission bypass via getFaqBySolutionId fallback query
CVE-2026-34646 Authorization Flaw in adobe (CVE-2026-34646)
vulnerability in adobe (CVE-2026-34646). Data can be tampered with by attackers.
CVE-2026-34645 Authorization Flaw in adobe (CVE-2026-34645)
vulnerability in adobe (CVE-2026-34645). Data can be tampered with by attackers.
CVE-2026-21309 Authorization Flaw in adobe (CVE-2026-21309)
vulnerability in adobe (CVE-2026-21309). Confidential information can be exposed externally.
CVE-2026-21359 Authorization Flaw in adobe (CVE-2026-21359)
vulnerability in adobe (CVE-2026-21359). Risk of unauthorized operations or information disclosure.
CVE-2026-21296 Authorization Flaw in adobe (CVE-2026-21296)
vulnerability in adobe (CVE-2026-21296). Risk of unauthorized operations or information disclosure.
CVE-2026-21297 Authorization Flaw in adobe (CVE-2026-21297)
vulnerability in adobe (CVE-2026-21297). Risk of unauthorized operations or information disclosure.
CVE-2026-21285 Authorization Flaw in adobe (CVE-2026-21285)
vulnerability in adobe (CVE-2026-21285). Risk of unauthorized operations or information disclosure.
CVE-2026-21286 Authorization Flaw in adobe (CVE-2026-21286)
vulnerability in adobe (CVE-2026-21286). Risk of unauthorized operations or information disclosure.
CVE-2026-21289 Authorization Flaw in adobe (CVE-2026-21289)
vulnerability in adobe (CVE-2026-21289). Confidential information can be exposed externally.
CVE-2017-6377 Authorization Flaw in drupal (CVE-2017-6377)
vulnerability in drupal (CVE-2017-6377). Data can be tampered with by attackers.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →