Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: web-frameworks Clear
ID Title
CVE-2026-60093 Vulnerability in org.apache.camel:camel-azure-storage-datalake (CVE-2026-60093)
vulnerability in org.apache.camel:camel-azure-storage-datalake (CVE-2026-60093). Confidential information can be exposed externally. Mitigation: upgrade to `4.22.0` or later.
CVE-2026-75099 Information Disclosure in apache (CVE-2026-75099)
vulnerability in apache (CVE-2026-75099). Risk of unauthorized operations or information disclosure.
CVE-2026-71300 Vulnerability in org.apache.camel:camel-atmosphere-websocket (CVE-2026-71300)
vulnerability in org.apache.camel:camel-atmosphere-websocket (CVE-2026-71300). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.22.0` or later.
CVE-2026-66908 Authentication Bypass in org.apache.camel:camel-platform-http-main (CVE-2026-66908)
authentication bypass in org.apache.camel:camel-platform-http-main (CVE-2026-66908). Data can be tampered with by attackers. Mitigation: upgrade to `4.22.0` or later.
CVE-2026-66907 Vulnerability in org.apache.camel:camel-google-storage (CVE-2026-66907)
vulnerability in org.apache.camel:camel-google-storage (CVE-2026-66907). Confidential information can be exposed externally. Mitigation: upgrade to `4.22.0` or later.
CVE-2026-66906 Vulnerability in org.apache.camel:camel-azure-storage-blob (CVE-2026-66906)
vulnerability in org.apache.camel:camel-azure-storage-blob (CVE-2026-66906). Confidential information can be exposed externally. Mitigation: upgrade to `4.22.0` or later.
CVE-2026-32558 Vulnerability in wordpress (CVE-2026-32558)
vulnerability in wordpress (CVE-2026-32558). Successful exploitation can lead to full system takeover.
CVE-2026-28153 Vulnerability in wordpress (CVE-2026-28153)
vulnerability in wordpress (CVE-2026-28153). Confidential information can be exposed externally.
CVE-2026-59295 Vulnerability in apache (CVE-2026-59295)
vulnerability in apache (CVE-2026-59295). Risk of unauthorized operations or information disclosure.
CVE-2026-16249 Vulnerability in wordpress (CVE-2026-16249)
vulnerability in wordpress (CVE-2026-16249). Risk of unauthorized operations or information disclosure.
CVE-2026-21962 KEV [KEV] Vulnerability in Oracle c (CVE-2026-21962)
vulnerability in Oracle c (CVE-2026-21962). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
CVE-2026-19565 Vulnerability in apache (CVE-2026-19565)
vulnerability in apache (CVE-2026-19565). Risk of unauthorized operations or information disclosure.
CVE-2026-13598 Privilege Escalation in wordpress (CVE-2026-13598)
vulnerability in wordpress (CVE-2026-13598). Successful exploitation can lead to full system takeover.
CVE-2026-14853 Vulnerability in wordpress (CVE-2026-14853)
vulnerability in wordpress (CVE-2026-14853). Risk of unauthorized operations or information disclosure.
CVE-2026-77003 Privilege Escalation in wordpress (CVE-2026-77003)
vulnerability in wordpress (CVE-2026-77003). Risk of unauthorized operations or information disclosure.
CVE-2026-18027 Path Traversal in wordpress (CVE-2026-18027)
path traversal in wordpress (CVE-2026-18027). Confidential information can be exposed externally.
CVE-2026-16149 Privilege Escalation in wordpress (CVE-2026-16149)
vulnerability in wordpress (CVE-2026-16149). Successful exploitation can lead to full system takeover.
CVE-2026-0551 Unsafe Deserialization in wordpress (CVE-2026-0551)
vulnerability in wordpress (CVE-2026-0551). Successful exploitation can lead to full system takeover.
CVE-2026-4703 Unsafe Deserialization in wordpress (CVE-2026-4703)
vulnerability in wordpress (CVE-2026-4703). Successful exploitation can lead to full system takeover.
CVE-2026-5093 Vulnerability in wordpress (CVE-2026-5093)
vulnerability in wordpress (CVE-2026-5093). Risk of unauthorized operations or information disclosure.
CVE-2026-4561 Cross-Site Scripting (XSS) in wordpress (CVE-2026-4561)
cross-site scripting in wordpress (CVE-2026-4561). Risk of unauthorized operations or information disclosure.
CVE-2026-4559 Cross-Site Scripting (XSS) in wordpress (CVE-2026-4559)
cross-site scripting in wordpress (CVE-2026-4559). Risk of unauthorized operations or information disclosure.
CVE-2026-2996 Vulnerability in wordpress (CVE-2026-2996)
vulnerability in wordpress (CVE-2026-2996). Data can be tampered with by attackers.
CVE-2026-4244 Vulnerability in wordpress (CVE-2026-4244)
vulnerability in wordpress (CVE-2026-4244). Risk of unauthorized operations or information disclosure. Exploitable via ``edit_others_posts``.
CVE-2026-4245 Authorization Flaw in wordpress (CVE-2026-4245)
vulnerability in wordpress (CVE-2026-4245). Risk of unauthorized operations or information disclosure. Exploitable via ``duplicate_posts``.
CVE-2026-3424 Code Injection in wordpress (CVE-2026-3424)
code injection in wordpress (CVE-2026-3424). Risk of unauthorized operations or information disclosure.
CVE-2026-78003 SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-78003)
SSRF in wordpress (CVE-2026-78003). Successful exploitation can lead to full system takeover.
CVE-2026-77000 Authentication Bypass in wordpress (CVE-2026-77000)
authentication bypass in wordpress (CVE-2026-77000). Successful exploitation can lead to full system takeover.
CVE-2026-77001 Authentication Bypass in wordpress (CVE-2026-77001)
authentication bypass in wordpress (CVE-2026-77001). Successful exploitation can lead to full system takeover.
CVE-2026-77002 Authentication Bypass in wordpress (CVE-2026-77002)
authentication bypass in wordpress (CVE-2026-77002). Successful exploitation can lead to full system takeover.
CVE-2026-76793 Authentication Bypass in wordpress (CVE-2026-76793)
authentication bypass in wordpress (CVE-2026-76793). Successful exploitation can lead to full system takeover.
CVE-2026-76789 Cross-Site Scripting (XSS) in wordpress (CVE-2026-76789)
cross-site scripting in wordpress (CVE-2026-76789). Successful exploitation can lead to full system takeover.
CVE-2026-19222 Privilege Escalation in wordpress (CVE-2026-19222)
vulnerability in wordpress (CVE-2026-19222). Successful exploitation can lead to full system takeover.
CVE-2026-19221 Code Injection in wordpress (CVE-2026-19221)
code injection in wordpress (CVE-2026-19221). Successful exploitation can lead to full system takeover.
CVE-2026-19093 Vulnerability in wordpress (CVE-2026-19093)
vulnerability in wordpress (CVE-2026-19093). Confidential information can be exposed externally.
CVE-2026-18052 Authentication Bypass in wordpress (CVE-2026-18052)
authentication bypass in wordpress (CVE-2026-18052). Successful exploitation can lead to full system takeover.
CVE-2026-16738 Vulnerability in wordpress (CVE-2026-16738)
vulnerability in wordpress (CVE-2026-16738). Risk of unauthorized operations or information disclosure.
CVE-2026-16612 Information Disclosure in wordpress (CVE-2026-16612)
vulnerability in wordpress (CVE-2026-16612). Risk of unauthorized operations or information disclosure.
CVE-2026-16260 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16260)
cross-site scripting in wordpress (CVE-2026-16260). Successful exploitation can lead to full system takeover.
CVE-2026-14187 Vulnerability in wordpress (CVE-2026-14187)
vulnerability in wordpress (CVE-2026-14187). Risk of unauthorized operations or information disclosure.
CVE-2026-76057 Vulnerability in wordpress (CVE-2026-76057)
vulnerability in wordpress (CVE-2026-76057). Risk of unauthorized operations or information disclosure.
CVE-2026-76074 Vulnerability in wordpress (CVE-2026-76074)
vulnerability in wordpress (CVE-2026-76074). Risk of unauthorized operations or information disclosure.
CVE-2026-75027 Vulnerability in wordpress (CVE-2026-75027)
vulnerability in wordpress (CVE-2026-75027). Risk of unauthorized operations or information disclosure.
CVE-2026-19883 Privilege Escalation in wordpress (CVE-2026-19883)
vulnerability in wordpress (CVE-2026-19883). Successful exploitation can lead to full system takeover.
CVE-2026-49849 Unrestricted File Upload in laravel (CVE-2026-49849)
vulnerability in laravel (CVE-2026-49849). Successful exploitation can lead to full system takeover.
CVE-2026-77795 Vulnerability in vue (CVE-2026-77795)
vulnerability in vue (CVE-2026-77795). Risk of unauthorized operations or information disclosure.
CVE-2026-55850 Cross-Site Scripting (XSS) in react (CVE-2026-55850)
cross-site scripting in react (CVE-2026-55850). Risk of unauthorized operations or information disclosure.
CVE-2026-54789 Out-of-Bounds Read in apache (CVE-2026-54789)
vulnerability in apache (CVE-2026-54789). Risk of unauthorized operations or information disclosure. Exploitable via ``mod_auth_openidc``.
CVE-2026-59654 Vulnerability in apache (CVE-2026-59654)
vulnerability in apache (CVE-2026-59654). Risk of unauthorized operations or information disclosure.
CVE-2026-19848 Vulnerability in wordpress (CVE-2026-19848)
vulnerability in wordpress (CVE-2026-19848). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →