Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-5116 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-5116)
cross-site scripting in wordpress (CVE-2026-5116). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5108 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-5108)
cross-site scripting in wordpress (CVE-2026-5108). Risk of unauthorized operations or information disclosure. Exploitable via ``innerHTML``.
|
| CVE-2026-4431 |
|
Vulnerability in wordpress (CVE-2026-4431)
vulnerability in wordpress (CVE-2026-4431). Data can be tampered with by attackers. Exploitable via ``rbsm_submit_post``.
|
| CVE-2026-54416 |
|
Unrestricted File Upload in CVE-2026-54416 (CVE-2026-54416)
vulnerability in CVE-2026-54416 (CVE-2026-54416). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18881 |
|
SQL Injection in wordpress (CVE-2026-18881)
SQL injection in wordpress (CVE-2026-18881). Confidential information can be exposed externally. Exploitable via ``tableon_get_table_data``.
|
| CVE-2026-17532 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-17532)
cross-site scripting in wordpress (CVE-2026-17532). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17505 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-17505)
cross-site scripting in wordpress (CVE-2026-17505). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15281 |
|
SQL Injection in wordpress (CVE-2026-15281)
SQL injection in wordpress (CVE-2026-15281). Confidential information can be exposed externally.
|
| CVE-2026-12000 |
|
Vulnerability in wordpress (CVE-2026-12000)
vulnerability in wordpress (CVE-2026-12000). Confidential information can be exposed externally.
|
| CVE-2026-11969 |
|
SQL Injection in wordpress (CVE-2026-11969)
SQL injection in wordpress (CVE-2026-11969). Confidential information can be exposed externally.
|
| CVE-2026-11977 |
|
SQL Injection in wordpress (CVE-2026-11977)
SQL injection in wordpress (CVE-2026-11977). Confidential information can be exposed externally.
|
| CVE-2026-11920 |
|
SQL Injection in wordpress (CVE-2026-11920)
SQL injection in wordpress (CVE-2026-11920). Confidential information can be exposed externally.
|
| CVE-2026-11454 |
|
Vulnerability in wordpress (CVE-2026-11454)
vulnerability in wordpress (CVE-2026-11454). Confidential information can be exposed externally. Exploitable via `GET /wp-json/gh/v4/contacts/`.
|
| CVE-2026-68075 |
|
Vulnerability in apache (CVE-2026-68075)
vulnerability in apache (CVE-2026-68075). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-68077 |
|
Vulnerability in apache (CVE-2026-68077)
vulnerability in apache (CVE-2026-68077). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-68078 |
|
Vulnerability in apache (CVE-2026-68078)
vulnerability in apache (CVE-2026-68078). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-68080 |
|
Vulnerability in apache (CVE-2026-68080)
vulnerability in apache (CVE-2026-68080). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67552 |
|
Vulnerability in apache (CVE-2026-67552)
vulnerability in apache (CVE-2026-67552). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67553 |
|
Vulnerability in apache (CVE-2026-67553)
vulnerability in apache (CVE-2026-67553). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67554 |
|
Vulnerability in apache (CVE-2026-67554)
vulnerability in apache (CVE-2026-67554). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67555 |
|
Vulnerability in apache (CVE-2026-67555)
vulnerability in apache (CVE-2026-67555). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67590 |
|
Vulnerability in apache (CVE-2026-67590)
vulnerability in apache (CVE-2026-67590). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67591 |
|
Vulnerability in apache (CVE-2026-67591)
vulnerability in apache (CVE-2026-67591). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67592 |
|
Vulnerability in apache (CVE-2026-67592)
vulnerability in apache (CVE-2026-67592). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-68073 |
|
Vulnerability in apache (CVE-2026-68073)
vulnerability in apache (CVE-2026-68073). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66274 |
|
Vulnerability in apache (CVE-2026-66274)
vulnerability in apache (CVE-2026-66274). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66275 |
|
Vulnerability in apache (CVE-2026-66275)
vulnerability in apache (CVE-2026-66275). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66276 |
|
Vulnerability in apache (CVE-2026-66276)
vulnerability in apache (CVE-2026-66276). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66277 |
|
Vulnerability in apache (CVE-2026-66277)
vulnerability in apache (CVE-2026-66277). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17515 |
|
Information Disclosure in wordpress (CVE-2026-17515)
vulnerability in wordpress (CVE-2026-17515). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16993 |
|
Information Disclosure in wordpress (CVE-2026-16993)
vulnerability in wordpress (CVE-2026-16993). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16981 |
|
Vulnerability in wordpress (CVE-2026-16981)
vulnerability in wordpress (CVE-2026-16981). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16968 |
|
Information Disclosure in wordpress (CVE-2026-16968)
vulnerability in wordpress (CVE-2026-16968). Confidential information can be exposed externally.
|
| CVE-2026-16942 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16942)
cross-site scripting in wordpress (CVE-2026-16942). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16746 |
|
Vulnerability in wordpress (CVE-2026-16746)
vulnerability in wordpress (CVE-2026-16746). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16736 |
|
Vulnerability in wordpress (CVE-2026-16736)
vulnerability in wordpress (CVE-2026-16736). Confidential information can be exposed externally.
|
| CVE-2026-16613 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-16613)
vulnerability in wordpress (CVE-2026-16613). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16605 |
|
Vulnerability in wordpress (CVE-2026-16605)
vulnerability in wordpress (CVE-2026-16605). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16604 |
|
Information Disclosure in wordpress (CVE-2026-16604)
vulnerability in wordpress (CVE-2026-16604). Confidential information can be exposed externally.
|
| CVE-2026-16603 |
|
Information Disclosure in wordpress (CVE-2026-16603)
vulnerability in wordpress (CVE-2026-16603). Confidential information can be exposed externally.
|
| CVE-2026-16940 |
|
Path Traversal in wordpress (CVE-2026-16940)
path traversal in wordpress (CVE-2026-16940). Data can be tampered with by attackers.
|
| CVE-2026-16602 |
|
Information Disclosure in wordpress (CVE-2026-16602)
vulnerability in wordpress (CVE-2026-16602). Confidential information can be exposed externally.
|
| CVE-2026-16583 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16583)
cross-site scripting in wordpress (CVE-2026-16583). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16573 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16573)
cross-site scripting in wordpress (CVE-2026-16573). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16561 |
|
Vulnerability in wordpress (CVE-2026-16561)
vulnerability in wordpress (CVE-2026-16561). Confidential information can be exposed externally.
|
| CVE-2026-16055 |
|
Authentication Bypass in wordpress (CVE-2026-16055)
authentication bypass in wordpress (CVE-2026-16055). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16036 |
|
Authentication Bypass in wordpress (CVE-2026-16036)
authentication bypass in wordpress (CVE-2026-16036). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15372 |
|
Authentication Bypass in wordpress (CVE-2026-15372)
authentication bypass in wordpress (CVE-2026-15372). Confidential information can be exposed externally.
|
| CVE-2026-15360 |
|
SQL Injection in wordpress (CVE-2026-15360)
SQL injection in wordpress (CVE-2026-15360). Confidential information can be exposed externally.
|
| CVE-2026-15230 |
|
Vulnerability in wordpress (CVE-2026-15230)
vulnerability in wordpress (CVE-2026-15230). Confidential information can be exposed externally.
|