Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: web-frameworks Clear
ID Title
CVE-2026-62393 Vulnerability in apache (CVE-2026-62393)
vulnerability in apache (CVE-2026-62393). Risk of unauthorized operations or information disclosure.
CVE-2026-62392 OS Command Injection in apache (CVE-2026-62392)
OS command injection in apache (CVE-2026-62392). Successful exploitation can lead to full system takeover.
CVE-2026-62390 SQL Injection in apache (CVE-2026-62390)
SQL injection in apache (CVE-2026-62390). Successful exploitation can lead to full system takeover.
CVE-2026-49488 Path Traversal in apache (CVE-2026-49488)
path traversal in apache (CVE-2026-49488). Confidential information can be exposed externally.
CVE-2026-9341 Vulnerability in wordpress (CVE-2026-9341)
vulnerability in wordpress (CVE-2026-9341). Risk of unauthorized operations or information disclosure.
CVE-2026-58319 Vulnerability in apache (CVE-2026-58319)
vulnerability in apache (CVE-2026-58319). Data can be tampered with by attackers.
CVE-2026-59084 Vulnerability in apache (CVE-2026-59084)
vulnerability in apache (CVE-2026-59084). Confidential information can be exposed externally.
CVE-2026-59083 Vulnerability in apache (CVE-2026-59083)
vulnerability in apache (CVE-2026-59083). Confidential information can be exposed externally.
CVE-2026-12511 Vulnerability in wordpress (CVE-2026-12511)
vulnerability in wordpress (CVE-2026-12511). Confidential information can be exposed externally.
CVE-2026-12988 Vulnerability in c (CVE-2026-12988)
vulnerability in c (CVE-2026-12988). Risk of unauthorized operations or information disclosure.
CVE-2026-12583 Unsafe Deserialization in wordpress (CVE-2026-12583)
vulnerability in wordpress (CVE-2026-12583). Successful exploitation can lead to full system takeover.
CVE-2026-11567 Vulnerability in wordpress (CVE-2026-11567)
vulnerability in wordpress (CVE-2026-11567). Data can be tampered with by attackers.
CVE-2026-11563 Vulnerability in wordpress (CVE-2026-11563)
vulnerability in wordpress (CVE-2026-11563). Data can be tampered with by attackers.
CVE-2025-15665 Vulnerability in wordpress (CVE-2025-15665)
vulnerability in wordpress (CVE-2025-15665). Risk of unauthorized operations or information disclosure.
CVE-2026-7640 Cross-Site Scripting (XSS) in wordpress (CVE-2026-7640)
cross-site scripting in wordpress (CVE-2026-7640). Risk of unauthorized operations or information disclosure.
CVE-2026-11802 Vulnerability in wordpress (CVE-2026-11802)
vulnerability in wordpress (CVE-2026-11802). Risk of unauthorized operations or information disclosure.
CVE-2026-11390 Cross-Site Scripting (XSS) in wordpress (CVE-2026-11390)
cross-site scripting in wordpress (CVE-2026-11390). Risk of unauthorized operations or information disclosure.
CVE-2026-62242 SSRF (Server-Side Request Forgery) in spring (CVE-2026-62242)
SSRF in spring (CVE-2026-62242). Confidential information can be exposed externally.
CVE-2026-12385 Information Disclosure in wordpress (CVE-2026-12385)
vulnerability in wordpress (CVE-2026-12385). Risk of unauthorized operations or information disclosure.
CVE-2026-12536 Cross-Site Scripting (XSS) in wordpress (CVE-2026-12536)
cross-site scripting in wordpress (CVE-2026-12536). Risk of unauthorized operations or information disclosure.
CVE-2026-49972 Unrestricted File Upload in laravel (CVE-2026-49972)
vulnerability in laravel (CVE-2026-49972). Successful exploitation can lead to full system takeover.
CVE-2026-49971 Cross-Site Scripting (XSS) in laravel (CVE-2026-49971)
cross-site scripting in laravel (CVE-2026-49971). Risk of unauthorized operations or information disclosure.
CVE-2026-49970 Path Traversal in plank/laravel-mediable (CVE-2026-49970)
path traversal in plank/laravel-mediable (CVE-2026-49970). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `7.0.0` or later.
CVE-2026-49969 SSRF (Server-Side Request Forgery) in laravel (CVE-2026-49969)
SSRF in laravel (CVE-2026-49969). Risk of unauthorized operations or information disclosure.
CVE-2026-45378 Information Disclosure in decidim-verifications (CVE-2026-45378)
vulnerability in decidim-verifications (CVE-2026-45378). Confidential information can be exposed externally. Exploitable via ``verification_attachment``. Mitigation: upgrade to `0.32.0` or later.
CVE-2026-59245 Privilege Escalation in apache (CVE-2026-59245)
vulnerability in apache (CVE-2026-59245). Confidential information can be exposed externally. Exploitable via ``dag_id``.
CVE-2026-58065 Vulnerability in apache (CVE-2026-58065)
vulnerability in apache (CVE-2026-58065). Successful exploitation can lead to full system takeover. Exploitable via ``known_hosts``.
CVE-2026-57815 Path Traversal in wordpress (CVE-2026-57815)
path traversal in wordpress (CVE-2026-57815). Confidential information can be exposed externally.
CVE-2026-57814 Cross-Site Scripting (XSS) in wordpress (CVE-2026-57814)
cross-site scripting in wordpress (CVE-2026-57814). Risk of unauthorized operations or information disclosure.
CVE-2026-57772 SQL Injection in wordpress (CVE-2026-57772)
SQL injection in wordpress (CVE-2026-57772). Confidential information can be exposed externally.
CVE-2026-57668 Cross-Site Scripting (XSS) in wordpress (CVE-2026-57668)
cross-site scripting in wordpress (CVE-2026-57668). Risk of unauthorized operations or information disclosure.
CVE-2026-57407 SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-57407)
SSRF in wordpress (CVE-2026-57407). Risk of unauthorized operations or information disclosure.
CVE-2026-57406 Vulnerability in wordpress (CVE-2026-57406)
vulnerability in wordpress (CVE-2026-57406). Risk of unauthorized operations or information disclosure.
CVE-2026-57383 Cross-Site Scripting (XSS) in wordpress (CVE-2026-57383)
cross-site scripting in wordpress (CVE-2026-57383). Risk of unauthorized operations or information disclosure.
CVE-2026-49876 SSRF (Server-Side Request Forgery) in apache (CVE-2026-49876)
SSRF in apache (CVE-2026-49876). Confidential information can be exposed externally.
CVE-2026-41041 Vulnerability in apache (CVE-2026-41041)
vulnerability in apache (CVE-2026-41041). Confidential information can be exposed externally.
CVE-2026-13014 Path Traversal in django (CVE-2026-13014)
path traversal in django (CVE-2026-13014). Risk of unauthorized operations or information disclosure.
CVE-2026-12396 Vulnerability in wordpress (CVE-2026-12396)
vulnerability in wordpress (CVE-2026-12396). Risk of unauthorized operations or information disclosure.
CVE-2026-12397 Vulnerability in wordpress (CVE-2026-12397)
vulnerability in wordpress (CVE-2026-12397). Risk of unauthorized operations or information disclosure.
CVE-2026-12582 Vulnerability in wordpress (CVE-2026-12582)
vulnerability in wordpress (CVE-2026-12582). Confidential information can be exposed externally.
CVE-2026-12274 Vulnerability in wordpress (CVE-2026-12274)
vulnerability in wordpress (CVE-2026-12274). Data can be tampered with by attackers.
CVE-2026-12273 Vulnerability in wordpress (CVE-2026-12273)
vulnerability in wordpress (CVE-2026-12273). Risk of unauthorized operations or information disclosure.
CVE-2026-12271 Vulnerability in wordpress (CVE-2026-12271)
vulnerability in wordpress (CVE-2026-12271). Risk of unauthorized operations or information disclosure.
CVE-2026-12081 Vulnerability in wordpress (CVE-2026-12081)
vulnerability in wordpress (CVE-2026-12081). Risk of unauthorized operations or information disclosure.
CVE-2026-11964 Vulnerability in wordpress (CVE-2026-11964)
vulnerability in wordpress (CVE-2026-11964). Confidential information can be exposed externally.
CVE-2026-11963 Vulnerability in wordpress (CVE-2026-11963)
vulnerability in wordpress (CVE-2026-11963). Confidential information can be exposed externally.
CVE-2026-12275 Vulnerability in wordpress (CVE-2026-12275)
vulnerability in wordpress (CVE-2026-12275). Confidential information can be exposed externally.
CVE-2026-10551 Vulnerability in wordpress (CVE-2026-10551)
vulnerability in wordpress (CVE-2026-10551). Risk of unauthorized operations or information disclosure.
CVE-2026-1359 Authorization Flaw in wordpress (CVE-2026-1359)
vulnerability in wordpress (CVE-2026-1359). Successful exploitation can lead to full system takeover.
CVE-2026-9282 Path Traversal in wordpress (CVE-2026-9282)
path traversal in wordpress (CVE-2026-9282). Confidential information can be exposed externally.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →