Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-14830 |
|
Authentication Bypass in wordpress (CVE-2026-14830)
authentication bypass in wordpress (CVE-2026-14830). Data can be tampered with by attackers.
|
| CVE-2026-14833 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14833)
cross-site scripting in wordpress (CVE-2026-14833). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14834 |
|
Vulnerability in wordpress (CVE-2026-14834)
vulnerability in wordpress (CVE-2026-14834). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14843 |
|
Vulnerability in wordpress (CVE-2026-14843)
vulnerability in wordpress (CVE-2026-14843). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14845 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14845)
cross-site scripting in wordpress (CVE-2026-14845). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14849 |
|
Vulnerability in wordpress (CVE-2026-14849)
vulnerability in wordpress (CVE-2026-14849). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14862 |
|
Vulnerability in wordpress (CVE-2026-14862)
vulnerability in wordpress (CVE-2026-14862). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14919 |
|
Authentication Bypass in wordpress (CVE-2026-14919)
authentication bypass in wordpress (CVE-2026-14919). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12721 |
|
SQL Injection in wordpress (CVE-2026-12721)
SQL injection in wordpress (CVE-2026-12721). Confidential information can be exposed externally.
|
| CVE-2026-13392 |
|
Code Injection in wordpress (CVE-2026-13392)
code injection in wordpress (CVE-2026-13392). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13393 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13393)
cross-site scripting in wordpress (CVE-2026-13393). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13609 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13609)
cross-site scripting in wordpress (CVE-2026-13609). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14317 |
|
Vulnerability in wordpress (CVE-2026-14317)
vulnerability in wordpress (CVE-2026-14317). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14319 |
|
Information Disclosure in wordpress (CVE-2026-14319)
vulnerability in wordpress (CVE-2026-14319). Confidential information can be exposed externally.
|
| CVE-2026-14333 |
|
Privilege Escalation in wordpress (CVE-2026-14333)
vulnerability in wordpress (CVE-2026-14333). Confidential information can be exposed externally.
|
| CVE-2026-14483 |
|
Unrestricted File Upload in wordpress (CVE-2026-14483)
vulnerability in wordpress (CVE-2026-14483). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14554 |
|
SQL Injection in wordpress (CVE-2026-14554)
SQL injection in wordpress (CVE-2026-14554). Confidential information can be exposed externally.
|
| CVE-2026-12251 |
|
Privilege Escalation in wordpress (CVE-2026-12251)
vulnerability in wordpress (CVE-2026-12251). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12376 |
|
Vulnerability in wordpress (CVE-2026-12376)
vulnerability in wordpress (CVE-2026-12376). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12695 |
|
Authentication Bypass in wordpress (CVE-2026-12695)
authentication bypass in wordpress (CVE-2026-12695). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12697 |
|
Vulnerability in wordpress (CVE-2026-12697)
vulnerability in wordpress (CVE-2026-12697). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12720 |
|
Unsafe Deserialization in wordpress (CVE-2026-12720)
vulnerability in wordpress (CVE-2026-12720). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66755 |
|
Path Traversal in apache (CVE-2026-66755)
path traversal in apache (CVE-2026-66755). Confidential information can be exposed externally.
|
| CVE-2026-66756 |
|
Vulnerability in apache (CVE-2026-66756)
vulnerability in apache (CVE-2026-66756). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66416 |
|
Cross-Site Request Forgery (CSRF) in laravel (CVE-2026-66416)
vulnerability in laravel (CVE-2026-66416). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18245 |
|
Code Injection in react (CVE-2026-18245)
code injection in react (CVE-2026-18245). Successful exploitation can lead to full system takeover.
|
| CVE-2026-44617 |
|
Vulnerability in apache (CVE-2026-44617)
vulnerability in apache (CVE-2026-44617). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-28812 |
|
Vulnerability in apache (CVE-2026-28812)
vulnerability in apache (CVE-2026-28812). Successful exploitation can lead to full system takeover.
|
| CVE-2026-44613 |
|
Cross-Site Request Forgery (CSRF) in apache (CVE-2026-44613)
vulnerability in apache (CVE-2026-44613). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48910 |
|
Vulnerability in apache (CVE-2026-48910)
vulnerability in apache (CVE-2026-48910). Confidential information can be exposed externally.
|
| CVE-2026-28813 |
|
Cross-Site Request Forgery (CSRF) in apache (CVE-2026-28813)
vulnerability in apache (CVE-2026-28813). Successful exploitation can lead to full system takeover.
|
| CVE-2026-28814 |
|
Vulnerability in apache (CVE-2026-28814)
vulnerability in apache (CVE-2026-28814). Confidential information can be exposed externally.
|
| CVE-2026-44616 |
|
Vulnerability in apache (CVE-2026-44616)
vulnerability in apache (CVE-2026-44616). Confidential information can be exposed externally.
|
| CVE-2026-52680 |
|
Path Traversal in apache (CVE-2026-52680)
path traversal in apache (CVE-2026-52680). Successful exploitation can lead to full system takeover.
|
| CVE-2026-23985 |
|
Vulnerability in apache (CVE-2026-23985)
vulnerability in apache (CVE-2026-23985). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-28811 |
|
Vulnerability in apache (CVE-2026-28811)
vulnerability in apache (CVE-2026-28811). Confidential information can be exposed externally.
|
| CVE-2026-23981 |
|
Vulnerability in apache (CVE-2026-23981)
vulnerability in apache (CVE-2026-23981). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66066 |
|
Vulnerability in activestorage (CVE-2026-66066)
vulnerability in activestorage (CVE-2026-66066). Risk of unauthorized operations or information disclosure. Exploitable via ``secret_key_base``. Mitigation: upgrade to `8.1.3.1` or later.
|
| CVE-2026-15397 |
|
Vulnerability in wordpress (CVE-2026-15397)
vulnerability in wordpress (CVE-2026-15397). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5582 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-5582)
vulnerability in wordpress (CVE-2026-5582). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59327 |
|
Vulnerability in spring (CVE-2026-59327)
vulnerability in spring (CVE-2026-59327). Confidential information can be exposed externally.
|
| CVE-2026-59326 |
|
Vulnerability in spring (CVE-2026-59326)
vulnerability in spring (CVE-2026-59326). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47858 |
|
Vulnerability in spring (CVE-2026-47858)
vulnerability in spring (CVE-2026-47858). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47882 |
|
Vulnerability in spring (CVE-2026-47882)
vulnerability in spring (CVE-2026-47882). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59328 |
|
Cross-Site Scripting (XSS) in spring (CVE-2026-59328)
cross-site scripting in spring (CVE-2026-59328). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15153 |
|
SQL Injection in wordpress (CVE-2026-15153)
SQL injection in wordpress (CVE-2026-15153). Confidential information can be exposed externally.
|
| CVE-2026-11867 |
|
Vulnerability in wordpress (CVE-2026-11867)
vulnerability in wordpress (CVE-2026-11867). Data can be tampered with by attackers.
|
| CVE-2026-14222 |
|
Vulnerability in wordpress (CVE-2026-14222)
vulnerability in wordpress (CVE-2026-14222). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11881 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-11881)
cross-site scripting in wordpress (CVE-2026-11881). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13344 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13344)
cross-site scripting in wordpress (CVE-2026-13344). Risk of unauthorized operations or information disclosure.
|