Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-15369 |
|
Privilege Escalation in wordpress (CVE-2026-15369)
vulnerability in wordpress (CVE-2026-15369). Successful exploitation can lead to full system takeover.
|
| CVE-2026-32566 |
|
Vulnerability in wordpress (CVE-2026-32566)
vulnerability in wordpress (CVE-2026-32566). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13415 |
|
Privilege Escalation in wordpress (CVE-2026-13415)
vulnerability in wordpress (CVE-2026-13415). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75971 |
|
Privilege Escalation in wordpress (CVE-2026-75971)
vulnerability in wordpress (CVE-2026-75971). Successful exploitation can lead to full system takeover. Exploitable via ``import_start``.
|
| CVE-2026-78570 |
|
Privilege Escalation in wordpress (CVE-2026-78570)
vulnerability in wordpress (CVE-2026-78570). Successful exploitation can lead to full system takeover.
|
| CVE-2026-78477 |
|
Vulnerability in wordpress (CVE-2026-78477)
vulnerability in wordpress (CVE-2026-78477). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19892 |
|
Vulnerability in wordpress (CVE-2026-19892)
vulnerability in wordpress (CVE-2026-19892). Successful exploitation can lead to full system takeover.
|
| CVE-2026-32558 |
|
Vulnerability in wordpress (CVE-2026-32558)
vulnerability in wordpress (CVE-2026-32558). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19883 |
|
Privilege Escalation in wordpress (CVE-2026-19883)
vulnerability in wordpress (CVE-2026-19883). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75860 |
|
Privilege Escalation in wordpress (CVE-2026-75860)
vulnerability in wordpress (CVE-2026-75860). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18432 |
|
Privilege Escalation in wordpress (CVE-2026-18432)
vulnerability in wordpress (CVE-2026-18432). Successful exploitation can lead to full system takeover. Exploitable via ``item_id``.
|
| CVE-2026-19598 |
|
Authorization Flaw in wordpress (CVE-2026-19598)
vulnerability in wordpress (CVE-2026-19598). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15142 |
|
Privilege Escalation in wordpress (CVE-2026-15142)
vulnerability in wordpress (CVE-2026-15142). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14279 |
|
The Wholesale Market plugin for WordPress is vulnerable to privilege escalation in versions up to...
The Wholesale Market plugin for WordPress is vulnerable to privilege escalation in versions up to...
|
| CVE-2026-15312 |
|
Privilege Escalation in wordpress (CVE-2026-15312)
vulnerability in wordpress (CVE-2026-15312). Successful exploitation can lead to full system takeover. Exploitable via ``role``.
|
| CVE-2026-15001 |
|
Privilege Escalation in wordpress (CVE-2026-15001)
vulnerability in wordpress (CVE-2026-15001). Successful exploitation can lead to full system takeover. Exploitable via ``save_bloyal_configuration_data``.
|
| CVE-2026-12365 |
|
Use-After-Free in c (CVE-2026-12365)
vulnerability in c (CVE-2026-12365). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12949 |
|
Vulnerability in wordpress (CVE-2026-12949)
vulnerability in wordpress (CVE-2026-12949). Successful exploitation can lead to full system takeover.
|
| CVE-2026-8761 |
|
Vulnerability in wordpress (CVE-2026-8761)
vulnerability in wordpress (CVE-2026-8761). Successful exploitation can lead to full system takeover. Exploitable via ``CustomersController``.
|
| CVE-2026-18322 |
|
Privilege Escalation in wordpress (CVE-2026-18322)
vulnerability in wordpress (CVE-2026-18322). Successful exploitation can lead to full system takeover. Exploitable via ``save``.
|
| CVE-2026-16635 |
|
Privilege Escalation in wordpress (CVE-2026-16635)
vulnerability in wordpress (CVE-2026-16635). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15414 |
|
Privilege Escalation in wordpress (CVE-2026-15414)
vulnerability in wordpress (CVE-2026-15414). Successful exploitation can lead to full system takeover. Exploitable via ``_wps_plan_user_role``.
|
| CVE-2026-12687 |
|
Privilege Escalation in wordpress (CVE-2026-12687)
vulnerability in wordpress (CVE-2026-12687). Confidential information can be exposed externally.
|
| CVE-2026-13423 |
|
Code Injection in wordpress (CVE-2026-13423)
code injection in wordpress (CVE-2026-13423). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12144 |
|
Privilege Escalation in wordpress (CVE-2026-12144)
vulnerability in wordpress (CVE-2026-12144). Successful exploitation can lead to full system takeover. Exploitable via ``user_role_set``.
|
| CVE-2026-15992 |
|
Privilege Escalation in wordpress (CVE-2026-15992)
vulnerability in wordpress (CVE-2026-15992). Successful exploitation can lead to full system takeover. Exploitable via ``Module_Password_Hint``.
|
| CVE-2026-14328 |
|
Privilege Escalation in wordpress (CVE-2026-14328)
vulnerability in wordpress (CVE-2026-14328). Successful exploitation can lead to full system takeover. Exploitable via `GET /wp-json/epm/v1/admin/login`.
|
| CVE-2026-12736 |
|
Privilege Escalation in wordpress (CVE-2026-12736)
vulnerability in wordpress (CVE-2026-12736). Successful exploitation can lead to full system takeover. Exploitable via `POST /wp-json/wpify-woo/v1/option`.
|
| CVE-2026-15017 |
|
Privilege Escalation in wordpress (CVE-2026-15017)
vulnerability in wordpress (CVE-2026-15017). Successful exploitation can lead to full system takeover. Exploitable via ``new_role``.
|
| CVE-2026-13439 |
|
Privilege Escalation in wordpress (CVE-2026-13439)
vulnerability in wordpress (CVE-2026-13439). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15982 |
|
Privilege Escalation in wordpress (CVE-2026-15982)
vulnerability in wordpress (CVE-2026-15982). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14956 |
|
Privilege Escalation in wordpress (CVE-2026-14956)
vulnerability in wordpress (CVE-2026-14956). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15103 |
|
Privilege Escalation in wordpress (CVE-2026-15103)
vulnerability in wordpress (CVE-2026-15103). Successful exploitation can lead to full system takeover. Exploitable via ``group_id``.
|
| CVE-2026-13741 |
|
Privilege Escalation in wordpress (CVE-2026-13741)
vulnerability in wordpress (CVE-2026-13741). Successful exploitation can lead to full system takeover. Exploitable via ``digits_reg_userrole``.
|
| CVE-2026-1359 |
|
Authorization Flaw in wordpress (CVE-2026-1359)
vulnerability in wordpress (CVE-2026-1359). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14262 |
|
Privilege Escalation in wordpress (CVE-2026-14262)
vulnerability in wordpress (CVE-2026-14262). Successful exploitation can lead to full system takeover. Exploitable via ``payload``.
|
| CVE-2026-7655 |
|
Vulnerability in wordpress (CVE-2026-7655)
vulnerability in wordpress (CVE-2026-7655). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13756 |
|
Privilege Escalation in wordpress (CVE-2026-13756)
vulnerability in wordpress (CVE-2026-13756). Successful exploitation can lead to full system takeover. Exploitable via ``wp_capabilities``.
|
| CVE-2026-15293 |
|
Vulnerability in wordpress (CVE-2026-15293)
vulnerability in wordpress (CVE-2026-15293). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14250 |
|
Privilege Escalation in wordpress (CVE-2026-14250)
vulnerability in wordpress (CVE-2026-14250). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9842 |
|
Privilege Escalation in wordpress (CVE-2026-9842)
vulnerability in wordpress (CVE-2026-9842). Data can be tampered with by attackers. Exploitable via ``manage_options``.
|
| CVE-2026-14482 |
|
Privilege Escalation in wordpress (CVE-2026-14482)
vulnerability in wordpress (CVE-2026-14482). Successful exploitation can lead to full system takeover. Exploitable via ``update_option``.
|
| CVE-2026-13228 |
|
Privilege Escalation in wordpress (CVE-2026-13228)
vulnerability in wordpress (CVE-2026-13228). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11387 |
|
Authentication Bypass in wordpress (CVE-2026-11387)
authentication bypass in wordpress (CVE-2026-11387). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12224 |
|
Privilege Escalation in wordpress (CVE-2026-12224)
vulnerability in wordpress (CVE-2026-12224). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12073 |
|
Vulnerability in wordpress (CVE-2026-12073)
vulnerability in wordpress (CVE-2026-12073). Successful exploitation can lead to full system takeover. Exploitable via ``user_login``.
|
| CVE-2026-12415 |
|
Privilege Escalation in wordpress (CVE-2026-12415)
vulnerability in wordpress (CVE-2026-12415). Successful exploitation can lead to full system takeover.
|
| CVE-2026-4297 |
|
Vulnerability in wordpress (CVE-2026-4297)
vulnerability in wordpress (CVE-2026-4297). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12417 |
|
Vulnerability in wordpress (CVE-2026-12417)
vulnerability in wordpress (CVE-2026-12417). Successful exploitation can lead to full system takeover. Exploitable via ``wp_ajax_nopriv_pravel_change_password``.
|
| CVE-2026-11551 |
|
Vulnerability in wordpress (CVE-2026-11551)
vulnerability in wordpress (CVE-2026-11551). Successful exploitation can lead to full system takeover.
|