Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: web-frameworks Clear
ID Title
CVE-2026-67589 Vulnerability in apache (CVE-2026-67589)
vulnerability in apache (CVE-2026-67589). Risk of unauthorized operations or information disclosure.
CVE-2026-15918 SQL Injection in wordpress (CVE-2026-15918)
SQL injection in wordpress (CVE-2026-15918). Confidential information can be exposed externally.
CVE-2026-11421 SQL Injection in wordpress (CVE-2026-11421)
SQL injection in wordpress (CVE-2026-11421). Confidential information can be exposed externally.
CVE-2026-15941 SQL Injection in wordpress (CVE-2026-15941)
SQL injection in wordpress (CVE-2026-15941). Confidential information can be exposed externally. Exploitable via ``edit_posts``.
CVE-2026-18322 Privilege Escalation in wordpress (CVE-2026-18322)
vulnerability in wordpress (CVE-2026-18322). Successful exploitation can lead to full system takeover. Exploitable via ``save``.
CVE-2026-16143 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16143)
cross-site scripting in wordpress (CVE-2026-16143). Risk of unauthorized operations or information disclosure.
CVE-2026-18818 Vulnerability in django (CVE-2026-18818)
vulnerability in django (CVE-2026-18818). Risk of unauthorized operations or information disclosure.
CVE-2026-15337 Vulnerability in django (CVE-2026-15337)
vulnerability in django (CVE-2026-15337). Risk of unauthorized operations or information disclosure. Exploitable via ``DATA_UPLOAD_MAX_MEMORY_SIZE``.
CVE-2026-15920 Vulnerability in django (CVE-2026-15920)
vulnerability in django (CVE-2026-15920). Risk of unauthorized operations or information disclosure. Exploitable via ``URLField``.
CVE-2026-15307 Vulnerability in django (CVE-2026-15307)
vulnerability in django (CVE-2026-15307). Successful exploitation can lead to full system takeover. Exploitable via ``django.contrib.gis.gdal.GDALRaster``.
CVE-2026-15830 Vulnerability in django (CVE-2026-15830)
vulnerability in django (CVE-2026-15830). Risk of unauthorized operations or information disclosure. Exploitable via ``django.contrib.gis.geos.GEOSGeometry``.
CVE-2026-16623 Code Injection in wordpress (CVE-2026-16623)
code injection in wordpress (CVE-2026-16623). Successful exploitation can lead to full system takeover.
CVE-2026-16618 Unrestricted File Upload in wordpress (CVE-2026-16618)
vulnerability in wordpress (CVE-2026-16618). Successful exploitation can lead to full system takeover.
CVE-2026-16548 Unrestricted File Upload in wordpress (CVE-2026-16548)
vulnerability in wordpress (CVE-2026-16548). Risk of unauthorized operations or information disclosure.
CVE-2026-16547 Vulnerability in wordpress (CVE-2026-16547)
vulnerability in wordpress (CVE-2026-16547). Confidential information can be exposed externally.
CVE-2026-16546 Vulnerability in wordpress (CVE-2026-16546)
vulnerability in wordpress (CVE-2026-16546). Risk of unauthorized operations or information disclosure.
CVE-2026-16536 SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-16536)
SSRF in wordpress (CVE-2026-16536). Risk of unauthorized operations or information disclosure.
CVE-2026-16296 Open Redirect in wordpress (CVE-2026-16296)
vulnerability in wordpress (CVE-2026-16296). Risk of unauthorized operations or information disclosure.
CVE-2026-16295 Vulnerability in wordpress (CVE-2026-16295)
vulnerability in wordpress (CVE-2026-16295). Risk of unauthorized operations or information disclosure.
CVE-2026-16293 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16293)
cross-site scripting in wordpress (CVE-2026-16293). Successful exploitation can lead to full system takeover.
CVE-2026-16070 Vulnerability in wordpress (CVE-2026-16070)
vulnerability in wordpress (CVE-2026-16070). Risk of unauthorized operations or information disclosure.
CVE-2026-16069 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16069)
cross-site scripting in wordpress (CVE-2026-16069). Successful exploitation can lead to full system takeover.
CVE-2026-16068 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16068)
cross-site scripting in wordpress (CVE-2026-16068). Risk of unauthorized operations or information disclosure.
CVE-2026-16056 Vulnerability in wordpress (CVE-2026-16056)
vulnerability in wordpress (CVE-2026-16056). Risk of unauthorized operations or information disclosure.
CVE-2026-16035 Vulnerability in wordpress (CVE-2026-16035)
vulnerability in wordpress (CVE-2026-16035). Risk of unauthorized operations or information disclosure.
CVE-2026-15958 Vulnerability in wordpress (CVE-2026-15958)
vulnerability in wordpress (CVE-2026-15958). Confidential information can be exposed externally.
CVE-2026-15233 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15233)
cross-site scripting in wordpress (CVE-2026-15233). Risk of unauthorized operations or information disclosure.
CVE-2026-14939 SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-14939)
SSRF in wordpress (CVE-2026-14939). Confidential information can be exposed externally.
CVE-2026-10526 SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-10526)
SSRF in wordpress (CVE-2026-10526). Risk of unauthorized operations or information disclosure.
CVE-2026-11366 Authentication Bypass in wordpress (CVE-2026-11366)
authentication bypass in wordpress (CVE-2026-11366). Risk of unauthorized operations or information disclosure.
CVE-2026-12698 Vulnerability in wordpress (CVE-2026-12698)
vulnerability in wordpress (CVE-2026-12698). Risk of unauthorized operations or information disclosure.
CVE-2026-14816 Vulnerability in wordpress (CVE-2026-14816)
vulnerability in wordpress (CVE-2026-14816). Risk of unauthorized operations or information disclosure.
CVE-2026-14824 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14824)
cross-site scripting in wordpress (CVE-2026-14824). Risk of unauthorized operations or information disclosure.
CVE-2026-14872 SQL Injection in wordpress (CVE-2026-14872)
SQL injection in wordpress (CVE-2026-14872). Confidential information can be exposed externally.
CVE-2026-14848 Vulnerability in wordpress (CVE-2026-14848)
vulnerability in wordpress (CVE-2026-14848). Risk of unauthorized operations or information disclosure.
CVE-2026-18648 Path Traversal in react (CVE-2026-18648)
path traversal in react (CVE-2026-18648). Risk of unauthorized operations or information disclosure.
CVE-2026-62354 Authorization Flaw in apache (CVE-2026-62354)
vulnerability in apache (CVE-2026-62354). Risk of unauthorized operations or information disclosure.
CVE-2026-68979 Vulnerability in apache (CVE-2026-68979)
vulnerability in apache (CVE-2026-68979). Successful exploitation can lead to full system takeover.
CVE-2026-68981 Vulnerability in apache (CVE-2026-68981)
vulnerability in apache (CVE-2026-68981). Risk of unauthorized operations or information disclosure.
CVE-2026-68980 Authorization Flaw in apache (CVE-2026-68980)
vulnerability in apache (CVE-2026-68980). Confidential information can be exposed externally.
CVE-2026-61372 Path Traversal in apache (CVE-2026-61372)
path traversal in apache (CVE-2026-61372). Confidential information can be exposed externally.
CVE-2026-69151 Cross-Site Scripting (XSS) in @angular/compiler (CVE-2026-69151)
cross-site scripting in @angular/compiler (CVE-2026-69151). Risk of unauthorized operations or information disclosure. Exploitable via ``onclick``.
CVE-2026-69149 Cross-Site Scripting (XSS) in @angular/platform-server (CVE-2026-69149)
cross-site scripting in @angular/platform-server (CVE-2026-69149). Risk of unauthorized operations or information disclosure. Exploitable via ``domino``.
CVE-2026-68945 Vulnerability in @angular/common (CVE-2026-68945)
vulnerability in @angular/common (CVE-2026-68945). Risk of unauthorized operations or information disclosure. Exploitable via ``HttpTransferCache``.
CVE-2026-67609 Vulnerability in apache (CVE-2026-67609)
vulnerability in apache (CVE-2026-67609). Successful exploitation can lead to full system takeover.
CVE-2026-67608 OS Command Injection in apache (CVE-2026-67608)
OS command injection in apache (CVE-2026-67608). Successful exploitation can lead to full system takeover.
CVE-2026-69075 Cross-Site Scripting (XSS) in vue (CVE-2026-69075)
cross-site scripting in vue (CVE-2026-69075). Risk of unauthorized operations or information disclosure.
CVE-2026-16565 Vulnerability in wordpress (CVE-2026-16565)
vulnerability in wordpress (CVE-2026-16565). Risk of unauthorized operations or information disclosure.
CVE-2026-16572 SQL Injection in wordpress (CVE-2026-16572)
SQL injection in wordpress (CVE-2026-16572). Confidential information can be exposed externally.
CVE-2026-16297 Unsafe Deserialization in wordpress (CVE-2026-16297)
vulnerability in wordpress (CVE-2026-16297). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →