Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-78576 |
|
SQL Injection in wordpress (CVE-2026-78576)
SQL injection in wordpress (CVE-2026-78576). Confidential information can be exposed externally.
|
| CVE-2026-49050 |
|
Authorization Flaw in apache (CVE-2026-49050)
vulnerability in apache (CVE-2026-49050). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16231 |
|
Cross-Site Scripting (XSS) in express (CVE-2026-16231)
cross-site scripting in express (CVE-2026-16231). Confidential information can be exposed externally. Mitigation: upgrade to `4.3.0` or later.
|
| CVE-2026-78566 |
|
Vulnerability in wordpress (CVE-2026-78566)
vulnerability in wordpress (CVE-2026-78566). Successful exploitation can lead to full system takeover.
|
| CVE-2026-78563 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-78563)
cross-site scripting in wordpress (CVE-2026-78563). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78568 |
|
SQL Injection in wordpress (CVE-2026-78568)
SQL injection in wordpress (CVE-2026-78568). Successful exploitation can lead to full system takeover.
|
| CVE-2026-78562 |
|
Vulnerability in wordpress (CVE-2026-78562)
vulnerability in wordpress (CVE-2026-78562). Successful exploitation can lead to full system takeover.
|
| CVE-2026-56096 |
|
Vulnerability in apache (CVE-2026-56096)
vulnerability in apache (CVE-2026-56096). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18512 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-18512)
cross-site scripting in wordpress (CVE-2026-18512). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18328 |
|
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...
|
| CVE-2026-18323 |
|
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...
|
| CVE-2026-18100 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-18100)
cross-site scripting in wordpress (CVE-2026-18100). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16601 |
|
The CM Map Locations – Visualize and share your locations in a few clicks plugin for WordPress is...
The CM Map Locations – Visualize and share your locations in a few clicks plugin for WordPress is...
|
| CVE-2026-78470 |
|
SQL Injection in wordpress (CVE-2026-78470)
SQL injection in wordpress (CVE-2026-78470). Confidential information can be exposed externally.
|
| CVE-2026-78477 |
|
Vulnerability in wordpress (CVE-2026-78477)
vulnerability in wordpress (CVE-2026-78477). Successful exploitation can lead to full system takeover.
|
| CVE-2026-78478 |
|
Vulnerability in wordpress (CVE-2026-78478)
vulnerability in wordpress (CVE-2026-78478). Successful exploitation can lead to full system takeover.
|
| CVE-2026-78466 |
|
Vulnerability in wordpress (CVE-2026-78466)
vulnerability in wordpress (CVE-2026-78466). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78467 |
|
Vulnerability in wordpress (CVE-2026-78467)
vulnerability in wordpress (CVE-2026-78467). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12561 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-12561)
cross-site scripting in wordpress (CVE-2026-12561). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75930 |
|
Vulnerability in wordpress (CVE-2026-75930)
vulnerability in wordpress (CVE-2026-75930). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76063 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-76063)
cross-site scripting in wordpress (CVE-2026-76063). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19892 |
|
Vulnerability in wordpress (CVE-2026-19892)
vulnerability in wordpress (CVE-2026-19892). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19943 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-19943)
cross-site scripting in wordpress (CVE-2026-19943). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17089 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-17089)
cross-site scripting in wordpress (CVE-2026-17089). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14280 |
|
Vulnerability in wordpress (CVE-2026-14280)
vulnerability in wordpress (CVE-2026-14280). Successful exploitation can lead to full system takeover.
|
| CVE-2025-9878 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2025-9878)
cross-site scripting in wordpress (CVE-2025-9878). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75982 |
|
Vulnerability in wordpress (CVE-2026-75982)
vulnerability in wordpress (CVE-2026-75982). Data can be tampered with by attackers.
|
| CVE-2026-10627 |
|
Vulnerability in wordpress (CVE-2026-10627)
vulnerability in wordpress (CVE-2026-10627). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75019 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-75019)
cross-site scripting in wordpress (CVE-2026-75019). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75574 |
|
The Grav Email plugin (getgrav/grav-plugin-email) before 4.2.2 renders page-editor-controlled...
The Grav Email plugin (getgrav/grav-plugin-email) before 4.2.2 renders page-editor-controlled...
|
| CVE-2026-56707 |
|
Grav Flex Objects plugin versions 1.4.0 through 1.4.7 contain an authorization bypass...
Grav Flex Objects plugin versions 1.4.0 through 1.4.7 contain an authorization bypass...
|
| CVE-2026-19801 |
|
Vulnerability in wordpress (CVE-2026-19801)
vulnerability in wordpress (CVE-2026-19801). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10630 |
|
Vulnerability in wordpress (CVE-2026-10630)
vulnerability in wordpress (CVE-2026-10630). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15023 |
|
SQL Injection in wordpress (CVE-2026-15023)
SQL injection in wordpress (CVE-2026-15023). Confidential information can be exposed externally.
|
| CVE-2026-32560 |
|
Vulnerability in wordpress (CVE-2026-32560)
vulnerability in wordpress (CVE-2026-32560). Successful exploitation can lead to full system takeover.
|
| CVE-2026-32563 |
|
Unsafe Deserialization in wordpress (CVE-2026-32563)
vulnerability in wordpress (CVE-2026-32563). Successful exploitation can lead to full system takeover.
|
| CVE-2026-77567 |
|
Authentication Bypass in laravel (CVE-2026-77567)
authentication bypass in laravel (CVE-2026-77567). Confidential information can be exposed externally.
|
| CVE-2026-78553 |
|
Vulnerability in flask (CVE-2026-78553)
vulnerability in flask (CVE-2026-78553). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76838 |
|
SSRF (Server-Side Request Forgery) in laravel (CVE-2026-76838)
SSRF in laravel (CVE-2026-76838). Confidential information can be exposed externally.
|
| CVE-2026-78329 |
|
Vulnerability in org.apache.camel:camel-undertow (CVE-2026-78329)
vulnerability in org.apache.camel:camel-undertow (CVE-2026-78329). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.22.0` or later.
|
| CVE-2026-71300 |
|
Vulnerability in org.apache.camel:camel-atmosphere-websocket (CVE-2026-71300)
vulnerability in org.apache.camel:camel-atmosphere-websocket (CVE-2026-71300). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.22.0` or later.
|
| CVE-2026-63621 |
|
Vulnerability in org.apache.camel:camel-knative (CVE-2026-63621)
vulnerability in org.apache.camel:camel-knative (CVE-2026-63621). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.22.0` or later.
|
| CVE-2026-66906 |
|
Vulnerability in org.apache.camel:camel-azure-storage-blob (CVE-2026-66906)
vulnerability in org.apache.camel:camel-azure-storage-blob (CVE-2026-66906). Confidential information can be exposed externally. Mitigation: upgrade to `4.22.0` or later.
|
| CVE-2026-66907 |
|
Vulnerability in org.apache.camel:camel-google-storage (CVE-2026-66907)
vulnerability in org.apache.camel:camel-google-storage (CVE-2026-66907). Confidential information can be exposed externally. Mitigation: upgrade to `4.22.0` or later.
|
| CVE-2026-66908 |
|
Authentication Bypass in org.apache.camel:camel-platform-http-main (CVE-2026-66908)
authentication bypass in org.apache.camel:camel-platform-http-main (CVE-2026-66908). Data can be tampered with by attackers. Mitigation: upgrade to `4.22.0` or later.
|
| CVE-2026-75099 |
|
Information Disclosure in apache (CVE-2026-75099)
vulnerability in apache (CVE-2026-75099). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-60093 |
|
Vulnerability in org.apache.camel:camel-azure-storage-datalake (CVE-2026-60093)
vulnerability in org.apache.camel:camel-azure-storage-datalake (CVE-2026-60093). Confidential information can be exposed externally. Mitigation: upgrade to `4.22.0` or later.
|
| CVE-2026-59230 |
|
Vulnerability in org.apache.camel:camel-mail (CVE-2026-59230)
vulnerability in org.apache.camel:camel-mail (CVE-2026-59230). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.22.0` or later.
|
| CVE-2026-32558 |
|
Vulnerability in wordpress (CVE-2026-32558)
vulnerability in wordpress (CVE-2026-32558). Successful exploitation can lead to full system takeover.
|
| CVE-2026-28153 |
|
Vulnerability in wordpress (CVE-2026-28153)
vulnerability in wordpress (CVE-2026-28153). Confidential information can be exposed externally.
|