Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-5636 |
|
Vulnerability in sqli (CVE-2026-5636)
vulnerability in sqli (CVE-2026-5636). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5635 |
|
Vulnerability in sqli (CVE-2026-5635)
vulnerability in sqli (CVE-2026-5635). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5634 |
|
Vulnerability in sqli (CVE-2026-5634)
vulnerability in sqli (CVE-2026-5634). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5624 |
|
Cross-Site Request Forgery (CSRF) in CVE-2026-5624 (CVE-2026-5624)
vulnerability in CVE-2026-5624 (CVE-2026-5624). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5620 |
|
Vulnerability in sqli (CVE-2026-5620)
vulnerability in sqli (CVE-2026-5620). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5615 |
|
Cross-Site Scripting (XSS) in CVE-2026-5615 (CVE-2026-5615)
cross-site scripting in CVE-2026-5615 (CVE-2026-5615). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5606 |
|
Vulnerability in sqli (CVE-2026-5606)
vulnerability in sqli (CVE-2026-5606). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35616 KEV |
|
[KEV] Vulnerability in Fortinet forticlient-ems (CVE-2026-35616)
vulnerability in Fortinet forticlient-ems (CVE-2026-35616). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2019-25687 |
|
Path Traversal in wisdom (CVE-2019-25687)
path traversal in wisdom (CVE-2019-25687). Successful exploitation can lead to full system takeover.
|
| CVE-2019-25682 |
|
Cross-Site Request Forgery (CSRF) in victoralagwu (CVE-2019-25682)
vulnerability in victoralagwu (CVE-2019-25682). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-25684 |
|
SQL Injection in sqli (CVE-2019-25684)
SQL injection in sqli (CVE-2019-25684). Confidential information can be exposed externally.
|
| CVE-2019-25673 |
|
Unrestricted File Upload in laravel (CVE-2019-25673)
vulnerability in laravel (CVE-2019-25673). Successful exploitation can lead to full system takeover.
|
| CVE-2019-25674 |
|
SQL Injection in sqli (CVE-2019-25674)
SQL injection in sqli (CVE-2019-25674). Confidential information can be exposed externally.
|
| CVE-2019-25675 |
|
SQL Injection in sqli (CVE-2019-25675)
SQL injection in sqli (CVE-2019-25675). Confidential information can be exposed externally.
|
| CVE-2019-25676 |
|
Cross-Site Scripting (XSS) in sqli (CVE-2019-25676)
cross-site scripting in sqli (CVE-2019-25676). Confidential information can be exposed externally.
|
| CVE-2019-25678 |
|
Vulnerability in sqli (CVE-2019-25678)
vulnerability in sqli (CVE-2019-25678). Confidential information can be exposed externally.
|
| CVE-2019-25677 |
|
Vulnerability in dos (CVE-2019-25677)
vulnerability in dos (CVE-2019-25677). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-25668 |
|
SQL Injection in sqli (CVE-2019-25668)
SQL injection in sqli (CVE-2019-25668). Confidential information can be exposed externally.
|
| CVE-2019-25671 |
|
Path Traversal in c (CVE-2019-25671)
path traversal in c (CVE-2019-25671). Successful exploitation can lead to full system takeover.
|
| CVE-2019-25662 |
|
SQL Injection in sqli (CVE-2019-25662)
SQL injection in sqli (CVE-2019-25662). Confidential information can be exposed externally.
|
| CVE-2019-25664 |
|
SQL Injection in sqli (CVE-2019-25664)
SQL injection in sqli (CVE-2019-25664). Confidential information can be exposed externally.
|
| CVE-2026-5580 |
|
Vulnerability in sqli (CVE-2026-5580)
vulnerability in sqli (CVE-2026-5580). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5583 |
|
Vulnerability in sqli (CVE-2026-5583)
vulnerability in sqli (CVE-2026-5583). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5579 |
|
Vulnerability in sqli (CVE-2026-5579)
vulnerability in sqli (CVE-2026-5579). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5576 |
|
Vulnerability in CVE-2026-5576 (CVE-2026-5576)
vulnerability in CVE-2026-5576 (CVE-2026-5576). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5578 |
|
Vulnerability in sqli (CVE-2026-5578)
vulnerability in sqli (CVE-2026-5578). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5575 |
|
Vulnerability in sqli (CVE-2026-5575)
vulnerability in sqli (CVE-2026-5575). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5565 |
|
Vulnerability in sqli (CVE-2026-5565)
vulnerability in sqli (CVE-2026-5565). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5564 |
|
Vulnerability in sqli (CVE-2026-5564)
vulnerability in sqli (CVE-2026-5564). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5560 |
|
Vulnerability in sqli (CVE-2026-5560)
vulnerability in sqli (CVE-2026-5560). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5561 |
|
Vulnerability in CVE-2026-5561 (CVE-2026-5561)
vulnerability in CVE-2026-5561 (CVE-2026-5561). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5555 |
|
Vulnerability in sqli (CVE-2026-5555)
vulnerability in sqli (CVE-2026-5555). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5558 |
|
Vulnerability in sqli (CVE-2026-5558)
vulnerability in sqli (CVE-2026-5558). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5554 |
|
Vulnerability in sqli (CVE-2026-5554)
vulnerability in sqli (CVE-2026-5554). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5553 |
|
Vulnerability in sqli (CVE-2026-5553)
vulnerability in sqli (CVE-2026-5553). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5552 |
|
Vulnerability in sqli (CVE-2026-5552)
vulnerability in sqli (CVE-2026-5552). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5551 |
|
Vulnerability in sqli (CVE-2026-5551)
vulnerability in sqli (CVE-2026-5551). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5546 |
|
Vulnerability in CVE-2026-5546 (CVE-2026-5546)
vulnerability in CVE-2026-5546 (CVE-2026-5546). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5541 |
|
Cross-Site Scripting (XSS) in CVE-2026-5541 (CVE-2026-5541)
cross-site scripting in CVE-2026-5541 (CVE-2026-5541). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5542 |
|
Cross-Site Scripting (XSS) in CVE-2026-5542 (CVE-2026-5542)
cross-site scripting in CVE-2026-5542 (CVE-2026-5542). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5543 |
|
Vulnerability in sqli (CVE-2026-5543)
vulnerability in sqli (CVE-2026-5543). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5540 |
|
Vulnerability in sqli (CVE-2026-5540)
vulnerability in sqli (CVE-2026-5540). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5539 |
|
Cross-Site Scripting (XSS) in CVE-2026-5539 (CVE-2026-5539)
cross-site scripting in CVE-2026-5539 (CVE-2026-5539). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5537 |
|
Vulnerability in c (CVE-2026-5537)
vulnerability in c (CVE-2026-5537). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5534 |
|
Vulnerability in sqli (CVE-2026-5534)
vulnerability in sqli (CVE-2026-5534). Risk of unauthorized operations or information disclosure.
|
| CVE-2018-25248 |
|
Cross-Site Scripting (XSS) in mybb (CVE-2018-25248)
cross-site scripting in mybb (CVE-2018-25248). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-20052 |
|
Unrestricted File Upload in snewscms (CVE-2016-20052)
vulnerability in snewscms (CVE-2016-20052). Successful exploitation can lead to full system takeover.
|
| CVE-2026-1233 |
|
The Text to Speech for WP (AI Voices by Mementor) plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.9.8. This is due to the plugin containing...
The Text to Speech for WP (AI Voices by Mementor) plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.9.8. This is due to the plugin containing hardcoded MySQL database credentials for the vendor's external telemetry server in the `Mementor_TT...
|
| CVE-2026-3445 |
|
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to unauthorized membership payment bypass i...
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to unauthorized membership payment bypass in all versions up to, and including, 4.16.11. This is due to a missing ownership verification on the...
|
| CVE-2026-4896 |
|
The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and inclu...
The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.7.25 via multiple AJAX actions including `wcfm_modify_order_status`, `delete_wcfm_article`,...
|