Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-14203 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14203)
cross-site scripting in wordpress (CVE-2026-14203). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14190 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14190)
cross-site scripting in wordpress (CVE-2026-14190). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14189 |
|
SQL Injection in wordpress (CVE-2026-14189)
SQL injection in wordpress (CVE-2026-14189). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13726 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13726)
cross-site scripting in wordpress (CVE-2026-13726). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13714 |
|
Unrestricted File Upload in wordpress (CVE-2026-13714)
vulnerability in wordpress (CVE-2026-13714). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13597 |
|
Authentication Bypass in wordpress (CVE-2026-13597)
authentication bypass in wordpress (CVE-2026-13597). Confidential information can be exposed externally.
|
| CVE-2026-13400 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13400)
cross-site scripting in wordpress (CVE-2026-13400). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13390 |
|
Vulnerability in wordpress (CVE-2026-13390)
vulnerability in wordpress (CVE-2026-13390). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13332 |
|
Authentication Bypass in wordpress (CVE-2026-13332)
authentication bypass in wordpress (CVE-2026-13332). Confidential information can be exposed externally.
|
| CVE-2026-13152 |
|
Privilege Escalation in wordpress (CVE-2026-13152)
vulnerability in wordpress (CVE-2026-13152). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12982 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-12982)
cross-site scripting in wordpress (CVE-2026-12982). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12493 |
|
Authentication Bypass in wordpress (CVE-2026-12493)
authentication bypass in wordpress (CVE-2026-12493). Data can be tampered with by attackers.
|
| CVE-2026-12394 |
|
Privilege Escalation in wordpress (CVE-2026-12394)
vulnerability in wordpress (CVE-2026-12394). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12255 |
|
Authentication Bypass in wordpress (CVE-2026-12255)
authentication bypass in wordpress (CVE-2026-12255). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10082 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-10082)
cross-site scripting in wordpress (CVE-2026-10082). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-15662 |
|
SSRF (Server-Side Request Forgery) in wordpress (CVE-2025-15662)
SSRF in wordpress (CVE-2025-15662). Confidential information can be exposed externally.
|
| CVE-2026-15962 |
|
Unsafe Deserialization in wordpress (CVE-2026-15962)
vulnerability in wordpress (CVE-2026-15962). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64514 |
|
Vulnerability in wordpress (CVE-2026-64514)
vulnerability in wordpress (CVE-2026-64514). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15425 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15425)
cross-site scripting in wordpress (CVE-2026-15425). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14955 |
|
Path Traversal in wordpress (CVE-2026-14955)
path traversal in wordpress (CVE-2026-14955). Confidential information can be exposed externally.
|
| CVE-2026-10818 |
|
Unrestricted File Upload in wordpress (CVE-2026-10818)
vulnerability in wordpress (CVE-2026-10818). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73647 |
|
Vulnerability in quasar (CVE-2026-73647)
vulnerability in quasar (CVE-2026-73647). Risk of unauthorized operations or information disclosure. Exploitable via ``__proto__``. Mitigation: upgrade to `2.22.0` or later.
|
| CVE-2026-73649 |
|
Code Injection in velocityjs (CVE-2026-73649)
code injection in velocityjs (CVE-2026-73649). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.1.7` or later.
|
| CVE-2026-8789 |
|
Authorization Flaw in wordpress (CVE-2026-8789)
vulnerability in wordpress (CVE-2026-8789). Data can be tampered with by attackers. Exploitable via ``ea_delete_multiple_connections``.
|
| CVE-2026-49326 |
|
Vulnerability in apache (CVE-2026-49326)
vulnerability in apache (CVE-2026-49326). Confidential information can be exposed externally.
|
| CVE-2026-66143 |
|
Vulnerability in apache (CVE-2026-66143)
vulnerability in apache (CVE-2026-66143). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45811 |
|
Vulnerability in apache (CVE-2026-45811)
vulnerability in apache (CVE-2026-45811). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45816 |
|
Vulnerability in apache (CVE-2026-45816)
vulnerability in apache (CVE-2026-45816). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66142 |
|
Vulnerability in apache (CVE-2026-66142)
vulnerability in apache (CVE-2026-66142). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46452 |
|
Vulnerability in apache (CVE-2026-46452)
vulnerability in apache (CVE-2026-46452). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66144 |
|
Vulnerability in dos (CVE-2026-66144)
vulnerability in dos (CVE-2026-66144). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45813 |
|
Vulnerability in c (CVE-2026-45813)
vulnerability in c (CVE-2026-45813). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45815 |
|
Vulnerability in apache (CVE-2026-45815)
vulnerability in apache (CVE-2026-45815). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45812 |
|
Vulnerability in apache (CVE-2026-45812)
vulnerability in apache (CVE-2026-45812). Confidential information can be exposed externally.
|
| CVE-2026-55685 |
|
Vulnerability in react-router (CVE-2026-55685)
vulnerability in react-router (CVE-2026-55685). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.18.0` or later.
|
| CVE-2026-15663 |
|
SQL Injection in wordpress (CVE-2026-15663)
SQL injection in wordpress (CVE-2026-15663). Confidential information can be exposed externally.
|
| CVE-2026-15401 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15401)
cross-site scripting in wordpress (CVE-2026-15401). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10033 |
|
Vulnerability in wordpress (CVE-2026-10033)
vulnerability in wordpress (CVE-2026-10033). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63317 |
|
Vulnerability in apache (CVE-2026-63317)
vulnerability in apache (CVE-2026-63317). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15346 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15346)
cross-site scripting in wordpress (CVE-2026-15346). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15739 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15739)
cross-site scripting in wordpress (CVE-2026-15739). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15821 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15821)
cross-site scripting in wordpress (CVE-2026-15821). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15648 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15648)
cross-site scripting in wordpress (CVE-2026-15648). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15464 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15464)
cross-site scripting in wordpress (CVE-2026-15464). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15653 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15653)
cross-site scripting in wordpress (CVE-2026-15653). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15665 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15665)
cross-site scripting in wordpress (CVE-2026-15665). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15755 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15755)
cross-site scripting in wordpress (CVE-2026-15755). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15334 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15334)
cross-site scripting in wordpress (CVE-2026-15334). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15333 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15333)
cross-site scripting in wordpress (CVE-2026-15333). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12654 |
|
Vulnerability in wordpress (CVE-2026-12654)
vulnerability in wordpress (CVE-2026-12654). Risk of unauthorized operations or information disclosure.
|