Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: web-frameworks Clear
ID Title
CVE-2026-14203 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14203)
cross-site scripting in wordpress (CVE-2026-14203). Risk of unauthorized operations or information disclosure.
CVE-2026-14190 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14190)
cross-site scripting in wordpress (CVE-2026-14190). Risk of unauthorized operations or information disclosure.
CVE-2026-14189 SQL Injection in wordpress (CVE-2026-14189)
SQL injection in wordpress (CVE-2026-14189). Risk of unauthorized operations or information disclosure.
CVE-2026-13726 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13726)
cross-site scripting in wordpress (CVE-2026-13726). Risk of unauthorized operations or information disclosure.
CVE-2026-13714 Unrestricted File Upload in wordpress (CVE-2026-13714)
vulnerability in wordpress (CVE-2026-13714). Successful exploitation can lead to full system takeover.
CVE-2026-13597 Authentication Bypass in wordpress (CVE-2026-13597)
authentication bypass in wordpress (CVE-2026-13597). Confidential information can be exposed externally.
CVE-2026-13400 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13400)
cross-site scripting in wordpress (CVE-2026-13400). Risk of unauthorized operations or information disclosure.
CVE-2026-13390 Vulnerability in wordpress (CVE-2026-13390)
vulnerability in wordpress (CVE-2026-13390). Risk of unauthorized operations or information disclosure.
CVE-2026-13332 Authentication Bypass in wordpress (CVE-2026-13332)
authentication bypass in wordpress (CVE-2026-13332). Confidential information can be exposed externally.
CVE-2026-13152 Privilege Escalation in wordpress (CVE-2026-13152)
vulnerability in wordpress (CVE-2026-13152). Successful exploitation can lead to full system takeover.
CVE-2026-12982 Cross-Site Scripting (XSS) in wordpress (CVE-2026-12982)
cross-site scripting in wordpress (CVE-2026-12982). Risk of unauthorized operations or information disclosure.
CVE-2026-12493 Authentication Bypass in wordpress (CVE-2026-12493)
authentication bypass in wordpress (CVE-2026-12493). Data can be tampered with by attackers.
CVE-2026-12394 Privilege Escalation in wordpress (CVE-2026-12394)
vulnerability in wordpress (CVE-2026-12394). Successful exploitation can lead to full system takeover.
CVE-2026-12255 Authentication Bypass in wordpress (CVE-2026-12255)
authentication bypass in wordpress (CVE-2026-12255). Successful exploitation can lead to full system takeover.
CVE-2026-10082 Cross-Site Scripting (XSS) in wordpress (CVE-2026-10082)
cross-site scripting in wordpress (CVE-2026-10082). Risk of unauthorized operations or information disclosure.
CVE-2025-15662 SSRF (Server-Side Request Forgery) in wordpress (CVE-2025-15662)
SSRF in wordpress (CVE-2025-15662). Confidential information can be exposed externally.
CVE-2026-15962 Unsafe Deserialization in wordpress (CVE-2026-15962)
vulnerability in wordpress (CVE-2026-15962). Successful exploitation can lead to full system takeover.
CVE-2026-64514 Vulnerability in wordpress (CVE-2026-64514)
vulnerability in wordpress (CVE-2026-64514). Risk of unauthorized operations or information disclosure.
CVE-2026-15425 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15425)
cross-site scripting in wordpress (CVE-2026-15425). Risk of unauthorized operations or information disclosure.
CVE-2026-14955 Path Traversal in wordpress (CVE-2026-14955)
path traversal in wordpress (CVE-2026-14955). Confidential information can be exposed externally.
CVE-2026-10818 Unrestricted File Upload in wordpress (CVE-2026-10818)
vulnerability in wordpress (CVE-2026-10818). Successful exploitation can lead to full system takeover.
CVE-2026-73647 Vulnerability in quasar (CVE-2026-73647)
vulnerability in quasar (CVE-2026-73647). Risk of unauthorized operations or information disclosure. Exploitable via ``__proto__``. Mitigation: upgrade to `2.22.0` or later.
CVE-2026-73649 Code Injection in velocityjs (CVE-2026-73649)
code injection in velocityjs (CVE-2026-73649). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.1.7` or later.
CVE-2026-8789 Authorization Flaw in wordpress (CVE-2026-8789)
vulnerability in wordpress (CVE-2026-8789). Data can be tampered with by attackers. Exploitable via ``ea_delete_multiple_connections``.
CVE-2026-49326 Vulnerability in apache (CVE-2026-49326)
vulnerability in apache (CVE-2026-49326). Confidential information can be exposed externally.
CVE-2026-66143 Vulnerability in apache (CVE-2026-66143)
vulnerability in apache (CVE-2026-66143). Risk of unauthorized operations or information disclosure.
CVE-2026-45811 Vulnerability in apache (CVE-2026-45811)
vulnerability in apache (CVE-2026-45811). Successful exploitation can lead to full system takeover.
CVE-2026-45816 Vulnerability in apache (CVE-2026-45816)
vulnerability in apache (CVE-2026-45816). Risk of unauthorized operations or information disclosure.
CVE-2026-66142 Vulnerability in apache (CVE-2026-66142)
vulnerability in apache (CVE-2026-66142). Risk of unauthorized operations or information disclosure.
CVE-2026-46452 Vulnerability in apache (CVE-2026-46452)
vulnerability in apache (CVE-2026-46452). Risk of unauthorized operations or information disclosure.
CVE-2026-66144 Vulnerability in dos (CVE-2026-66144)
vulnerability in dos (CVE-2026-66144). Risk of unauthorized operations or information disclosure.
CVE-2026-45813 Vulnerability in c (CVE-2026-45813)
vulnerability in c (CVE-2026-45813). Successful exploitation can lead to full system takeover.
CVE-2026-45815 Vulnerability in apache (CVE-2026-45815)
vulnerability in apache (CVE-2026-45815). Risk of unauthorized operations or information disclosure.
CVE-2026-45812 Vulnerability in apache (CVE-2026-45812)
vulnerability in apache (CVE-2026-45812). Confidential information can be exposed externally.
CVE-2026-55685 Vulnerability in react-router (CVE-2026-55685)
vulnerability in react-router (CVE-2026-55685). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.18.0` or later.
CVE-2026-15663 SQL Injection in wordpress (CVE-2026-15663)
SQL injection in wordpress (CVE-2026-15663). Confidential information can be exposed externally.
CVE-2026-15401 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15401)
cross-site scripting in wordpress (CVE-2026-15401). Risk of unauthorized operations or information disclosure.
CVE-2026-10033 Vulnerability in wordpress (CVE-2026-10033)
vulnerability in wordpress (CVE-2026-10033). Risk of unauthorized operations or information disclosure.
CVE-2026-63317 Vulnerability in apache (CVE-2026-63317)
vulnerability in apache (CVE-2026-63317). Risk of unauthorized operations or information disclosure.
CVE-2026-15346 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15346)
cross-site scripting in wordpress (CVE-2026-15346). Risk of unauthorized operations or information disclosure.
CVE-2026-15739 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15739)
cross-site scripting in wordpress (CVE-2026-15739). Risk of unauthorized operations or information disclosure.
CVE-2026-15821 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15821)
cross-site scripting in wordpress (CVE-2026-15821). Risk of unauthorized operations or information disclosure.
CVE-2026-15648 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15648)
cross-site scripting in wordpress (CVE-2026-15648). Risk of unauthorized operations or information disclosure.
CVE-2026-15464 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15464)
cross-site scripting in wordpress (CVE-2026-15464). Risk of unauthorized operations or information disclosure.
CVE-2026-15653 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15653)
cross-site scripting in wordpress (CVE-2026-15653). Risk of unauthorized operations or information disclosure.
CVE-2026-15665 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15665)
cross-site scripting in wordpress (CVE-2026-15665). Risk of unauthorized operations or information disclosure.
CVE-2026-15755 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15755)
cross-site scripting in wordpress (CVE-2026-15755). Risk of unauthorized operations or information disclosure.
CVE-2026-15334 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15334)
cross-site scripting in wordpress (CVE-2026-15334). Risk of unauthorized operations or information disclosure.
CVE-2026-15333 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15333)
cross-site scripting in wordpress (CVE-2026-15333). Risk of unauthorized operations or information disclosure.
CVE-2026-12654 Vulnerability in wordpress (CVE-2026-12654)
vulnerability in wordpress (CVE-2026-12654). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →