Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: products Clear
ID Title
CVE-2026-5636 Vulnerability in sqli (CVE-2026-5636)
vulnerability in sqli (CVE-2026-5636). Risk of unauthorized operations or information disclosure.
CVE-2026-5635 Vulnerability in sqli (CVE-2026-5635)
vulnerability in sqli (CVE-2026-5635). Risk of unauthorized operations or information disclosure.
CVE-2026-5634 Vulnerability in sqli (CVE-2026-5634)
vulnerability in sqli (CVE-2026-5634). Risk of unauthorized operations or information disclosure.
CVE-2026-5624 Cross-Site Request Forgery (CSRF) in CVE-2026-5624 (CVE-2026-5624)
vulnerability in CVE-2026-5624 (CVE-2026-5624). Risk of unauthorized operations or information disclosure.
CVE-2026-5620 Vulnerability in sqli (CVE-2026-5620)
vulnerability in sqli (CVE-2026-5620). Risk of unauthorized operations or information disclosure.
CVE-2026-5615 Cross-Site Scripting (XSS) in CVE-2026-5615 (CVE-2026-5615)
cross-site scripting in CVE-2026-5615 (CVE-2026-5615). Risk of unauthorized operations or information disclosure.
CVE-2026-5606 Vulnerability in sqli (CVE-2026-5606)
vulnerability in sqli (CVE-2026-5606). Risk of unauthorized operations or information disclosure.
CVE-2026-35616 KEV [KEV] Vulnerability in Fortinet forticlient-ems (CVE-2026-35616)
vulnerability in Fortinet forticlient-ems (CVE-2026-35616). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2019-25687 Path Traversal in wisdom (CVE-2019-25687)
path traversal in wisdom (CVE-2019-25687). Successful exploitation can lead to full system takeover.
CVE-2019-25682 Cross-Site Request Forgery (CSRF) in victoralagwu (CVE-2019-25682)
vulnerability in victoralagwu (CVE-2019-25682). Risk of unauthorized operations or information disclosure.
CVE-2019-25684 SQL Injection in sqli (CVE-2019-25684)
SQL injection in sqli (CVE-2019-25684). Confidential information can be exposed externally.
CVE-2019-25673 Unrestricted File Upload in laravel (CVE-2019-25673)
vulnerability in laravel (CVE-2019-25673). Successful exploitation can lead to full system takeover.
CVE-2019-25674 SQL Injection in sqli (CVE-2019-25674)
SQL injection in sqli (CVE-2019-25674). Confidential information can be exposed externally.
CVE-2019-25675 SQL Injection in sqli (CVE-2019-25675)
SQL injection in sqli (CVE-2019-25675). Confidential information can be exposed externally.
CVE-2019-25676 Cross-Site Scripting (XSS) in sqli (CVE-2019-25676)
cross-site scripting in sqli (CVE-2019-25676). Confidential information can be exposed externally.
CVE-2019-25678 Vulnerability in sqli (CVE-2019-25678)
vulnerability in sqli (CVE-2019-25678). Confidential information can be exposed externally.
CVE-2019-25677 Vulnerability in dos (CVE-2019-25677)
vulnerability in dos (CVE-2019-25677). Risk of unauthorized operations or information disclosure.
CVE-2019-25668 SQL Injection in sqli (CVE-2019-25668)
SQL injection in sqli (CVE-2019-25668). Confidential information can be exposed externally.
CVE-2019-25671 Path Traversal in c (CVE-2019-25671)
path traversal in c (CVE-2019-25671). Successful exploitation can lead to full system takeover.
CVE-2019-25662 SQL Injection in sqli (CVE-2019-25662)
SQL injection in sqli (CVE-2019-25662). Confidential information can be exposed externally.
CVE-2019-25664 SQL Injection in sqli (CVE-2019-25664)
SQL injection in sqli (CVE-2019-25664). Confidential information can be exposed externally.
CVE-2026-5580 Vulnerability in sqli (CVE-2026-5580)
vulnerability in sqli (CVE-2026-5580). Risk of unauthorized operations or information disclosure.
CVE-2026-5583 Vulnerability in sqli (CVE-2026-5583)
vulnerability in sqli (CVE-2026-5583). Risk of unauthorized operations or information disclosure.
CVE-2026-5579 Vulnerability in sqli (CVE-2026-5579)
vulnerability in sqli (CVE-2026-5579). Risk of unauthorized operations or information disclosure.
CVE-2026-5576 Vulnerability in CVE-2026-5576 (CVE-2026-5576)
vulnerability in CVE-2026-5576 (CVE-2026-5576). Risk of unauthorized operations or information disclosure.
CVE-2026-5578 Vulnerability in sqli (CVE-2026-5578)
vulnerability in sqli (CVE-2026-5578). Risk of unauthorized operations or information disclosure.
CVE-2026-5575 Vulnerability in sqli (CVE-2026-5575)
vulnerability in sqli (CVE-2026-5575). Risk of unauthorized operations or information disclosure.
CVE-2026-5565 Vulnerability in sqli (CVE-2026-5565)
vulnerability in sqli (CVE-2026-5565). Risk of unauthorized operations or information disclosure.
CVE-2026-5564 Vulnerability in sqli (CVE-2026-5564)
vulnerability in sqli (CVE-2026-5564). Risk of unauthorized operations or information disclosure.
CVE-2026-5560 Vulnerability in sqli (CVE-2026-5560)
vulnerability in sqli (CVE-2026-5560). Risk of unauthorized operations or information disclosure.
CVE-2026-5561 Vulnerability in CVE-2026-5561 (CVE-2026-5561)
vulnerability in CVE-2026-5561 (CVE-2026-5561). Risk of unauthorized operations or information disclosure.
CVE-2026-5555 Vulnerability in sqli (CVE-2026-5555)
vulnerability in sqli (CVE-2026-5555). Risk of unauthorized operations or information disclosure.
CVE-2026-5558 Vulnerability in sqli (CVE-2026-5558)
vulnerability in sqli (CVE-2026-5558). Risk of unauthorized operations or information disclosure.
CVE-2026-5554 Vulnerability in sqli (CVE-2026-5554)
vulnerability in sqli (CVE-2026-5554). Risk of unauthorized operations or information disclosure.
CVE-2026-5553 Vulnerability in sqli (CVE-2026-5553)
vulnerability in sqli (CVE-2026-5553). Risk of unauthorized operations or information disclosure.
CVE-2026-5552 Vulnerability in sqli (CVE-2026-5552)
vulnerability in sqli (CVE-2026-5552). Risk of unauthorized operations or information disclosure.
CVE-2026-5551 Vulnerability in sqli (CVE-2026-5551)
vulnerability in sqli (CVE-2026-5551). Risk of unauthorized operations or information disclosure.
CVE-2026-5546 Vulnerability in CVE-2026-5546 (CVE-2026-5546)
vulnerability in CVE-2026-5546 (CVE-2026-5546). Risk of unauthorized operations or information disclosure.
CVE-2026-5541 Cross-Site Scripting (XSS) in CVE-2026-5541 (CVE-2026-5541)
cross-site scripting in CVE-2026-5541 (CVE-2026-5541). Risk of unauthorized operations or information disclosure.
CVE-2026-5542 Cross-Site Scripting (XSS) in CVE-2026-5542 (CVE-2026-5542)
cross-site scripting in CVE-2026-5542 (CVE-2026-5542). Risk of unauthorized operations or information disclosure.
CVE-2026-5543 Vulnerability in sqli (CVE-2026-5543)
vulnerability in sqli (CVE-2026-5543). Risk of unauthorized operations or information disclosure.
CVE-2026-5540 Vulnerability in sqli (CVE-2026-5540)
vulnerability in sqli (CVE-2026-5540). Risk of unauthorized operations or information disclosure.
CVE-2026-5539 Cross-Site Scripting (XSS) in CVE-2026-5539 (CVE-2026-5539)
cross-site scripting in CVE-2026-5539 (CVE-2026-5539). Risk of unauthorized operations or information disclosure.
CVE-2026-5537 Vulnerability in c (CVE-2026-5537)
vulnerability in c (CVE-2026-5537). Risk of unauthorized operations or information disclosure.
CVE-2026-5534 Vulnerability in sqli (CVE-2026-5534)
vulnerability in sqli (CVE-2026-5534). Risk of unauthorized operations or information disclosure.
CVE-2018-25248 Cross-Site Scripting (XSS) in mybb (CVE-2018-25248)
cross-site scripting in mybb (CVE-2018-25248). Risk of unauthorized operations or information disclosure.
CVE-2016-20052 Unrestricted File Upload in snewscms (CVE-2016-20052)
vulnerability in snewscms (CVE-2016-20052). Successful exploitation can lead to full system takeover.
CVE-2026-1233 The Text to Speech for WP (AI Voices by Mementor) plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.9.8. This is due to the plugin containing...
The Text to Speech for WP (AI Voices by Mementor) plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.9.8. This is due to the plugin containing hardcoded MySQL database credentials for the vendor's external telemetry server in the `Mementor_TT...
CVE-2026-3445 The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to unauthorized membership payment bypass i...
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to unauthorized membership payment bypass in all versions up to, and including, 4.16.11. This is due to a missing ownership verification on the...
CVE-2026-4896 The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and inclu...
The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.7.25 via multiple AJAX actions including `wcfm_modify_order_status`, `delete_wcfm_article`,...

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →