Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-16206 |
|
Vulnerability in django (CVE-2026-16206)
vulnerability in django (CVE-2026-16206). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57857 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-57857)
cross-site scripting in wordpress (CVE-2026-57857). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59173 |
|
Vulnerability in apache (CVE-2026-59173)
vulnerability in apache (CVE-2026-59173). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9734 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-9734)
vulnerability in wordpress (CVE-2026-9734). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63030 KEV |
|
WordPress Core — WordPress Core Interpretation Conflict Vulnerability
WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137.
|
| CVE-2026-60137 KEV |
|
[KEV] SQL Injection in Wordpress sqli (CVE-2026-60137)
SQL injection in Wordpress sqli (CVE-2026-60137). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
| CVE-2026-42168 |
|
OS Command Injection in django (CVE-2026-42168)
OS command injection in django (CVE-2026-42168). Confidential information can be exposed externally.
|
| CVE-2026-62764 |
|
Vulnerability in apache (CVE-2026-62764)
vulnerability in apache (CVE-2026-62764). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9656 |
|
Information Disclosure in wordpress (CVE-2026-9656)
vulnerability in wordpress (CVE-2026-9656). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9810 |
|
Privilege Escalation in wordpress (CVE-2026-9810)
vulnerability in wordpress (CVE-2026-9810). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13402 |
|
Information Disclosure in wordpress (CVE-2026-13402)
vulnerability in wordpress (CVE-2026-13402). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12393 |
|
Vulnerability in wordpress (CVE-2026-12393)
vulnerability in wordpress (CVE-2026-12393). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11966 |
|
Vulnerability in wordpress (CVE-2026-11966)
vulnerability in wordpress (CVE-2026-11966). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11961 |
|
Privilege Escalation in wordpress (CVE-2026-11961)
vulnerability in wordpress (CVE-2026-11961). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11575 |
|
Vulnerability in wordpress (CVE-2026-11575)
vulnerability in wordpress (CVE-2026-11575). Data can be tampered with by attackers.
|
| CVE-2026-10525 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-10525)
cross-site scripting in wordpress (CVE-2026-10525). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15982 |
|
Privilege Escalation in wordpress (CVE-2026-15982)
vulnerability in wordpress (CVE-2026-15982). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15094 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15094)
cross-site scripting in wordpress (CVE-2026-15094). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15759 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15759)
cross-site scripting in wordpress (CVE-2026-15759). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15457 |
|
Path Traversal in wordpress (CVE-2026-15457)
path traversal in wordpress (CVE-2026-15457). Confidential information can be exposed externally.
|
| CVE-2026-15349 |
|
Vulnerability in wordpress (CVE-2026-15349)
vulnerability in wordpress (CVE-2026-15349). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15161 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15161)
cross-site scripting in wordpress (CVE-2026-15161). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14503 |
|
Information Disclosure in wordpress (CVE-2026-14503)
vulnerability in wordpress (CVE-2026-14503). Confidential information can be exposed externally.
|
| CVE-2026-13765 |
|
Vulnerability in wordpress (CVE-2026-13765)
vulnerability in wordpress (CVE-2026-13765). Confidential information can be exposed externally.
|
| CVE-2026-13352 |
|
Unrestricted File Upload in wordpress (CVE-2026-13352)
vulnerability in wordpress (CVE-2026-13352). Successful exploitation can lead to full system takeover.
|
| CVE-2026-8616 |
|
Vulnerability in wordpress (CVE-2026-8616)
vulnerability in wordpress (CVE-2026-8616). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15395 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15395)
cross-site scripting in wordpress (CVE-2026-15395). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15160 |
|
Path Traversal in wordpress (CVE-2026-15160)
path traversal in wordpress (CVE-2026-15160). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15159 |
|
Vulnerability in wordpress (CVE-2026-15159)
vulnerability in wordpress (CVE-2026-15159). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11324 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-11324)
cross-site scripting in wordpress (CVE-2026-11324). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2594 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-2594)
cross-site scripting in wordpress (CVE-2026-2594). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.0.7` or later.
|
| CVE-2026-14956 |
|
Privilege Escalation in wordpress (CVE-2026-14956)
vulnerability in wordpress (CVE-2026-14956). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14782 |
|
SQL Injection in wordpress (CVE-2026-14782)
SQL injection in wordpress (CVE-2026-14782). Confidential information can be exposed externally.
|
| CVE-2026-45336 |
|
Vulnerability in flask (CVE-2026-45336)
vulnerability in flask (CVE-2026-45336). Confidential information can be exposed externally.
|
| CVE-2026-7543 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-7543)
cross-site scripting in wordpress (CVE-2026-7543). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15610 |
|
Vulnerability in wordpress (CVE-2026-15610)
vulnerability in wordpress (CVE-2026-15610). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15727 |
|
SQL Injection in wordpress (CVE-2026-15727)
SQL injection in wordpress (CVE-2026-15727). Confidential information can be exposed externally.
|
| CVE-2026-15651 |
|
SQL Injection in wordpress (CVE-2026-15651)
SQL injection in wordpress (CVE-2026-15651). Confidential information can be exposed externally.
|
| CVE-2026-13767 |
|
SQL Injection in wordpress (CVE-2026-13767)
SQL injection in wordpress (CVE-2026-13767). Confidential information can be exposed externally.
|
| CVE-2026-15008 |
|
Unsafe Deserialization in wordpress (CVE-2026-15008)
vulnerability in wordpress (CVE-2026-15008). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15099 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15099)
cross-site scripting in wordpress (CVE-2026-15099). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15021 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15021)
cross-site scripting in wordpress (CVE-2026-15021). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13741 |
|
Privilege Escalation in wordpress (CVE-2026-13741)
vulnerability in wordpress (CVE-2026-13741). Successful exploitation can lead to full system takeover. Exploitable via ``digits_reg_userrole``.
|
| CVE-2026-15005 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-15005)
vulnerability in wordpress (CVE-2026-15005). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15103 |
|
Privilege Escalation in wordpress (CVE-2026-15103)
vulnerability in wordpress (CVE-2026-15103). Successful exploitation can lead to full system takeover. Exploitable via ``group_id``.
|
| CVE-2026-15350 |
|
Vulnerability in wordpress (CVE-2026-15350)
vulnerability in wordpress (CVE-2026-15350). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13754 |
|
SQL Injection in wordpress (CVE-2026-13754)
SQL injection in wordpress (CVE-2026-13754). Confidential information can be exposed externally.
|
| CVE-2026-15106 |
|
Vulnerability in wordpress (CVE-2026-15106)
vulnerability in wordpress (CVE-2026-15106). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15324 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15324)
cross-site scripting in wordpress (CVE-2026-15324). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15022 |
|
SQL Injection in wordpress (CVE-2026-15022)
SQL injection in wordpress (CVE-2026-15022). Confidential information can be exposed externally.
|