Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: web-frameworks Clear
ID Title
CVE-2026-16206 Vulnerability in django (CVE-2026-16206)
vulnerability in django (CVE-2026-16206). Risk of unauthorized operations or information disclosure.
CVE-2026-57857 Cross-Site Scripting (XSS) in wordpress (CVE-2026-57857)
cross-site scripting in wordpress (CVE-2026-57857). Risk of unauthorized operations or information disclosure.
CVE-2026-59173 Vulnerability in apache (CVE-2026-59173)
vulnerability in apache (CVE-2026-59173). Risk of unauthorized operations or information disclosure.
CVE-2026-9734 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-9734)
vulnerability in wordpress (CVE-2026-9734). Risk of unauthorized operations or information disclosure.
CVE-2026-63030 KEV WordPress Core — WordPress Core Interpretation Conflict Vulnerability
WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137.
CVE-2026-60137 KEV [KEV] SQL Injection in Wordpress sqli (CVE-2026-60137)
SQL injection in Wordpress sqli (CVE-2026-60137). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
CVE-2026-42168 OS Command Injection in django (CVE-2026-42168)
OS command injection in django (CVE-2026-42168). Confidential information can be exposed externally.
CVE-2026-62764 Vulnerability in apache (CVE-2026-62764)
vulnerability in apache (CVE-2026-62764). Risk of unauthorized operations or information disclosure.
CVE-2026-9656 Information Disclosure in wordpress (CVE-2026-9656)
vulnerability in wordpress (CVE-2026-9656). Risk of unauthorized operations or information disclosure.
CVE-2026-9810 Privilege Escalation in wordpress (CVE-2026-9810)
vulnerability in wordpress (CVE-2026-9810). Successful exploitation can lead to full system takeover.
CVE-2026-13402 Information Disclosure in wordpress (CVE-2026-13402)
vulnerability in wordpress (CVE-2026-13402). Risk of unauthorized operations or information disclosure.
CVE-2026-12393 Vulnerability in wordpress (CVE-2026-12393)
vulnerability in wordpress (CVE-2026-12393). Risk of unauthorized operations or information disclosure.
CVE-2026-11966 Vulnerability in wordpress (CVE-2026-11966)
vulnerability in wordpress (CVE-2026-11966). Risk of unauthorized operations or information disclosure.
CVE-2026-11961 Privilege Escalation in wordpress (CVE-2026-11961)
vulnerability in wordpress (CVE-2026-11961). Successful exploitation can lead to full system takeover.
CVE-2026-11575 Vulnerability in wordpress (CVE-2026-11575)
vulnerability in wordpress (CVE-2026-11575). Data can be tampered with by attackers.
CVE-2026-10525 Cross-Site Scripting (XSS) in wordpress (CVE-2026-10525)
cross-site scripting in wordpress (CVE-2026-10525). Risk of unauthorized operations or information disclosure.
CVE-2026-15982 Privilege Escalation in wordpress (CVE-2026-15982)
vulnerability in wordpress (CVE-2026-15982). Successful exploitation can lead to full system takeover.
CVE-2026-15094 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15094)
cross-site scripting in wordpress (CVE-2026-15094). Risk of unauthorized operations or information disclosure.
CVE-2026-15759 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15759)
cross-site scripting in wordpress (CVE-2026-15759). Risk of unauthorized operations or information disclosure.
CVE-2026-15457 Path Traversal in wordpress (CVE-2026-15457)
path traversal in wordpress (CVE-2026-15457). Confidential information can be exposed externally.
CVE-2026-15349 Vulnerability in wordpress (CVE-2026-15349)
vulnerability in wordpress (CVE-2026-15349). Risk of unauthorized operations or information disclosure.
CVE-2026-15161 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15161)
cross-site scripting in wordpress (CVE-2026-15161). Risk of unauthorized operations or information disclosure.
CVE-2026-14503 Information Disclosure in wordpress (CVE-2026-14503)
vulnerability in wordpress (CVE-2026-14503). Confidential information can be exposed externally.
CVE-2026-13765 Vulnerability in wordpress (CVE-2026-13765)
vulnerability in wordpress (CVE-2026-13765). Confidential information can be exposed externally.
CVE-2026-13352 Unrestricted File Upload in wordpress (CVE-2026-13352)
vulnerability in wordpress (CVE-2026-13352). Successful exploitation can lead to full system takeover.
CVE-2026-8616 Vulnerability in wordpress (CVE-2026-8616)
vulnerability in wordpress (CVE-2026-8616). Risk of unauthorized operations or information disclosure.
CVE-2026-15395 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15395)
cross-site scripting in wordpress (CVE-2026-15395). Risk of unauthorized operations or information disclosure.
CVE-2026-15160 Path Traversal in wordpress (CVE-2026-15160)
path traversal in wordpress (CVE-2026-15160). Risk of unauthorized operations or information disclosure.
CVE-2026-15159 Vulnerability in wordpress (CVE-2026-15159)
vulnerability in wordpress (CVE-2026-15159). Risk of unauthorized operations or information disclosure.
CVE-2026-11324 Cross-Site Scripting (XSS) in wordpress (CVE-2026-11324)
cross-site scripting in wordpress (CVE-2026-11324). Risk of unauthorized operations or information disclosure.
CVE-2026-2594 Cross-Site Scripting (XSS) in wordpress (CVE-2026-2594)
cross-site scripting in wordpress (CVE-2026-2594). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.0.7` or later.
CVE-2026-14956 Privilege Escalation in wordpress (CVE-2026-14956)
vulnerability in wordpress (CVE-2026-14956). Successful exploitation can lead to full system takeover.
CVE-2026-14782 SQL Injection in wordpress (CVE-2026-14782)
SQL injection in wordpress (CVE-2026-14782). Confidential information can be exposed externally.
CVE-2026-45336 Vulnerability in flask (CVE-2026-45336)
vulnerability in flask (CVE-2026-45336). Confidential information can be exposed externally.
CVE-2026-7543 Cross-Site Scripting (XSS) in wordpress (CVE-2026-7543)
cross-site scripting in wordpress (CVE-2026-7543). Risk of unauthorized operations or information disclosure.
CVE-2026-15610 Vulnerability in wordpress (CVE-2026-15610)
vulnerability in wordpress (CVE-2026-15610). Risk of unauthorized operations or information disclosure.
CVE-2026-15727 SQL Injection in wordpress (CVE-2026-15727)
SQL injection in wordpress (CVE-2026-15727). Confidential information can be exposed externally.
CVE-2026-15651 SQL Injection in wordpress (CVE-2026-15651)
SQL injection in wordpress (CVE-2026-15651). Confidential information can be exposed externally.
CVE-2026-13767 SQL Injection in wordpress (CVE-2026-13767)
SQL injection in wordpress (CVE-2026-13767). Confidential information can be exposed externally.
CVE-2026-15008 Unsafe Deserialization in wordpress (CVE-2026-15008)
vulnerability in wordpress (CVE-2026-15008). Successful exploitation can lead to full system takeover.
CVE-2026-15099 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15099)
cross-site scripting in wordpress (CVE-2026-15099). Risk of unauthorized operations or information disclosure.
CVE-2026-15021 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15021)
cross-site scripting in wordpress (CVE-2026-15021). Risk of unauthorized operations or information disclosure.
CVE-2026-13741 Privilege Escalation in wordpress (CVE-2026-13741)
vulnerability in wordpress (CVE-2026-13741). Successful exploitation can lead to full system takeover. Exploitable via ``digits_reg_userrole``.
CVE-2026-15005 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-15005)
vulnerability in wordpress (CVE-2026-15005). Successful exploitation can lead to full system takeover.
CVE-2026-15103 Privilege Escalation in wordpress (CVE-2026-15103)
vulnerability in wordpress (CVE-2026-15103). Successful exploitation can lead to full system takeover. Exploitable via ``group_id``.
CVE-2026-15350 Vulnerability in wordpress (CVE-2026-15350)
vulnerability in wordpress (CVE-2026-15350). Risk of unauthorized operations or information disclosure.
CVE-2026-13754 SQL Injection in wordpress (CVE-2026-13754)
SQL injection in wordpress (CVE-2026-13754). Confidential information can be exposed externally.
CVE-2026-15106 Vulnerability in wordpress (CVE-2026-15106)
vulnerability in wordpress (CVE-2026-15106). Risk of unauthorized operations or information disclosure.
CVE-2026-15324 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15324)
cross-site scripting in wordpress (CVE-2026-15324). Risk of unauthorized operations or information disclosure.
CVE-2026-15022 SQL Injection in wordpress (CVE-2026-15022)
SQL injection in wordpress (CVE-2026-15022). Confidential information can be exposed externally.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →