Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-64958 |
|
Vulnerability in apache (CVE-2026-64958)
vulnerability in apache (CVE-2026-64958). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65432 |
|
XXE (XML External Entity) in apache (CVE-2026-65432)
vulnerability in apache (CVE-2026-65432). Confidential information can be exposed externally.
|
| CVE-2026-64640 |
|
Authorization Flaw in apache (CVE-2026-64640)
vulnerability in apache (CVE-2026-64640). Confidential information can be exposed externally.
|
| CVE-2026-5430 |
|
Vulnerability in c (CVE-2026-5430)
vulnerability in c (CVE-2026-5430). Successful exploitation can lead to full system takeover.
|
| CVE-2026-1728 |
|
Privilege Escalation in wso2 (CVE-2026-1728)
vulnerability in wso2 (CVE-2026-1728). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19021 |
|
Vulnerability in sqli (CVE-2026-19021)
vulnerability in sqli (CVE-2026-19021). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19020 |
|
Vulnerability in sqli (CVE-2026-19020)
vulnerability in sqli (CVE-2026-19020). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-0637 |
|
Vulnerability in wso2 (CVE-2026-0637)
vulnerability in wso2 (CVE-2026-0637). Confidential information can be exposed externally.
|
| CVE-2025-15039 |
|
Vulnerability in wso2 (CVE-2025-15039)
vulnerability in wso2 (CVE-2025-15039). Confidential information can be exposed externally.
|
| CVE-2025-14779 |
|
Vulnerability in wso2 (CVE-2025-14779)
vulnerability in wso2 (CVE-2025-14779). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-13909 |
|
Vulnerability in wso2 (CVE-2025-13909)
vulnerability in wso2 (CVE-2025-13909). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-13736 |
|
Vulnerability in wso2 (CVE-2025-13736)
vulnerability in wso2 (CVE-2025-13736). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-13394 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2025-13394)
vulnerability in csrf (CVE-2025-13394). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-12627 |
|
Vulnerability in wso2 (CVE-2025-12627)
vulnerability in wso2 (CVE-2025-12627). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-11850 |
|
Vulnerability in wso2 (CVE-2025-11850)
vulnerability in wso2 (CVE-2025-11850). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-8995 |
|
Vulnerability in wso2 (CVE-2024-8995)
vulnerability in wso2 (CVE-2024-8995). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-6832 |
|
Vulnerability in wso2 (CVE-2024-6832)
vulnerability in wso2 (CVE-2024-6832). Confidential information can be exposed externally.
|
| CVE-2024-10302 |
|
Vulnerability in wso2 (CVE-2024-10302)
vulnerability in wso2 (CVE-2024-10302). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18510 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-18510)
cross-site scripting in wordpress (CVE-2026-18510). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18400 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-18400)
cross-site scripting in wordpress (CVE-2026-18400). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18395 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-18395)
cross-site scripting in wordpress (CVE-2026-18395). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18050 |
|
Information Disclosure in wordpress (CVE-2026-18050)
vulnerability in wordpress (CVE-2026-18050). Confidential information can be exposed externally.
|
| CVE-2026-16954 |
|
Information Disclosure in wordpress (CVE-2026-16954)
vulnerability in wordpress (CVE-2026-16954). Confidential information can be exposed externally.
|
| CVE-2026-16734 |
|
Vulnerability in wordpress (CVE-2026-16734)
vulnerability in wordpress (CVE-2026-16734). Data can be tampered with by attackers.
|
| CVE-2026-16537 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16537)
cross-site scripting in wordpress (CVE-2026-16537). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16290 |
|
Vulnerability in wordpress (CVE-2026-16290)
vulnerability in wordpress (CVE-2026-16290). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16268 |
|
SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-16268)
SSRF in wordpress (CVE-2026-16268). Data can be tampered with by attackers.
|
| CVE-2026-16065 |
|
SQL Injection in wordpress (CVE-2026-16065)
SQL injection in wordpress (CVE-2026-16065). Confidential information can be exposed externally.
|
| CVE-2026-16054 |
|
Vulnerability in wordpress (CVE-2026-16054)
vulnerability in wordpress (CVE-2026-16054). Data can be tampered with by attackers.
|
| CVE-2026-14829 |
|
Vulnerability in wordpress (CVE-2026-14829)
vulnerability in wordpress (CVE-2026-14829). Data can be tampered with by attackers.
|
| CVE-2026-14547 |
|
Authentication Bypass in wordpress (CVE-2026-14547)
authentication bypass in wordpress (CVE-2026-14547). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14314 |
|
Information Disclosure in wordpress (CVE-2026-14314)
vulnerability in wordpress (CVE-2026-14314). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14313 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-14313)
vulnerability in wordpress (CVE-2026-14313). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14240 |
|
Information Disclosure in wordpress (CVE-2026-14240)
vulnerability in wordpress (CVE-2026-14240). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14204 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-14204)
vulnerability in wordpress (CVE-2026-14204). Data can be tampered with by attackers.
|
| CVE-2026-13703 |
|
Vulnerability in wordpress (CVE-2026-13703)
vulnerability in wordpress (CVE-2026-13703). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13154 |
|
Information Disclosure in wordpress (CVE-2026-13154)
vulnerability in wordpress (CVE-2026-13154). Confidential information can be exposed externally.
|
| CVE-2026-13153 |
|
Information Disclosure in wordpress (CVE-2026-13153)
vulnerability in wordpress (CVE-2026-13153). Confidential information can be exposed externally.
|
| CVE-2026-12713 |
|
SQL Injection in wordpress (CVE-2026-12713)
SQL injection in wordpress (CVE-2026-12713). Confidential information can be exposed externally.
|
| CVE-2026-11588 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-11588)
cross-site scripting in wordpress (CVE-2026-11588). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-15678 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2025-15678)
cross-site scripting in wordpress (CVE-2025-15678). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15459 |
|
Authentication Bypass in wordpress (CVE-2026-15459)
authentication bypass in wordpress (CVE-2026-15459). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18325 |
|
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...
|
| CVE-2026-16636 |
|
The FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP...
The FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP...
|
| CVE-2026-15991 |
|
The File Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the connector function in all versions from 6.0 - 6.9. This makes it possible...
The File Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the connector function in all versions from 6.0 - 6.9. This makes it possible for authenticated attackers, with subscriber-level access and above, to read and delete arbitrary f...
|
| CVE-2026-18968 |
|
Cross-Site Scripting (XSS) in CVE-2026-18968 (CVE-2026-18968)
cross-site scripting in CVE-2026-18968 (CVE-2026-18968). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18959 |
|
Path Traversal in path-traversal (CVE-2026-18959)
path traversal in path-traversal (CVE-2026-18959). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18958 |
|
Vulnerability in sqli (CVE-2026-18958)
vulnerability in sqli (CVE-2026-18958). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9205 |
|
Vulnerability in langflow (CVE-2026-9205)
vulnerability in langflow (CVE-2026-9205). Confidential information can be exposed externally.
|
| CVE-2026-9196 |
|
Code Injection in langflow (CVE-2026-9196)
code injection in langflow (CVE-2026-9196). Confidential information can be exposed externally.
|