Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-16655 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16655)
cross-site scripting in wordpress (CVE-2026-16655). Risk of unauthorized operations or information disclosure. Exploitable via ``password``.
|
| CVE-2026-58188 |
|
Out-of-Bounds Write in apache (CVE-2026-58188)
out-of-bounds write in apache (CVE-2026-58188). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58189 |
|
SSRF (Server-Side Request Forgery) in apache (CVE-2026-58189)
SSRF in apache (CVE-2026-58189). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58181 |
|
Vulnerability in apache (CVE-2026-58181)
vulnerability in apache (CVE-2026-58181). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58182 |
|
Vulnerability in apache (CVE-2026-58182)
vulnerability in apache (CVE-2026-58182). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58184 |
|
Out-of-Bounds Write in apache (CVE-2026-58184)
out-of-bounds write in apache (CVE-2026-58184). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58186 |
|
Vulnerability in apache (CVE-2026-58186)
vulnerability in apache (CVE-2026-58186). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58179 |
|
Vulnerability in apache (CVE-2026-58179)
vulnerability in apache (CVE-2026-58179). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58175 |
|
Vulnerability in apache (CVE-2026-58175)
vulnerability in apache (CVE-2026-58175). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58164 |
|
Use-After-Free in apache (CVE-2026-58164)
vulnerability in apache (CVE-2026-58164). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58180 |
|
Vulnerability in apache (CVE-2026-58180)
vulnerability in apache (CVE-2026-58180). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58178 |
|
Vulnerability in apache (CVE-2026-58178)
vulnerability in apache (CVE-2026-58178). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58177 |
|
Out-of-Bounds Write in apache (CVE-2026-58177)
out-of-bounds write in apache (CVE-2026-58177). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58163 |
|
Unsafe Deserialization in apache (CVE-2026-58163)
vulnerability in apache (CVE-2026-58163). Data can be tampered with by attackers.
|
| CVE-2026-58161 |
|
Vulnerability in apache (CVE-2026-58161)
vulnerability in apache (CVE-2026-58161). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58159 |
|
Authorization Flaw in apache (CVE-2026-58159)
vulnerability in apache (CVE-2026-58159). Data can be tampered with by attackers.
|
| CVE-2026-58157 |
|
Information Disclosure in apache (CVE-2026-58157)
vulnerability in apache (CVE-2026-58157). Confidential information can be exposed externally.
|
| CVE-2026-50622 |
|
Vulnerability in apache (CVE-2026-50622)
vulnerability in apache (CVE-2026-50622). Successful exploitation can lead to full system takeover.
|
| CVE-2026-23904 |
|
Vulnerability in apache (CVE-2026-23904)
vulnerability in apache (CVE-2026-23904). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65324 |
|
Vulnerability in apache (CVE-2026-65324)
vulnerability in apache (CVE-2026-65324). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13425 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13425)
cross-site scripting in wordpress (CVE-2026-13425). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58151 |
|
Vulnerability in apache (CVE-2026-58151)
vulnerability in apache (CVE-2026-58151). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58153 |
|
Vulnerability in apache (CVE-2026-58153)
vulnerability in apache (CVE-2026-58153). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58154 |
|
Out-of-Bounds Write in apache (CVE-2026-58154)
out-of-bounds write in apache (CVE-2026-58154). Data can be tampered with by attackers.
|
| CVE-2026-22068 |
|
Vulnerability in apache (CVE-2026-22068)
vulnerability in apache (CVE-2026-22068). Confidential information can be exposed externally.
|
| CVE-2026-24033 |
|
Vulnerability in apache (CVE-2026-24033)
vulnerability in apache (CVE-2026-24033). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11974 |
|
Path Traversal in wordpress (CVE-2026-11974)
path traversal in wordpress (CVE-2026-11974). Confidential information can be exposed externally.
|
| CVE-2026-13690 |
|
Authentication Bypass in wordpress (CVE-2026-13690)
authentication bypass in wordpress (CVE-2026-13690). Confidential information can be exposed externally.
|
| CVE-2026-14234 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14234)
cross-site scripting in wordpress (CVE-2026-14234). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14300 |
|
Authentication Bypass in wordpress (CVE-2026-14300)
authentication bypass in wordpress (CVE-2026-14300). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12476 |
|
Unrestricted File Upload in wordpress (CVE-2026-12476)
vulnerability in wordpress (CVE-2026-12476). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12144 |
|
Privilege Escalation in wordpress (CVE-2026-12144)
vulnerability in wordpress (CVE-2026-12144). Successful exploitation can lead to full system takeover. Exploitable via ``user_role_set``.
|
| CVE-2026-15992 |
|
Privilege Escalation in wordpress (CVE-2026-15992)
vulnerability in wordpress (CVE-2026-15992). Successful exploitation can lead to full system takeover. Exploitable via ``Module_Password_Hint``.
|
| CVE-2026-62426 |
|
Vulnerability in c (CVE-2026-62426)
vulnerability in c (CVE-2026-62426). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59878 |
|
Vulnerability in apache (CVE-2026-59878)
vulnerability in apache (CVE-2026-59878). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62427 |
|
Vulnerability in c (CVE-2026-62427)
vulnerability in c (CVE-2026-62427). Successful exploitation can lead to full system takeover.
|
| CVE-2026-61609 |
|
Vulnerability in pterodactyl/panel (CVE-2026-61609)
vulnerability in pterodactyl/panel (CVE-2026-61609). Risk of unauthorized operations or information disclosure. Exploitable via `POST /auth/login`. Mitigation: upgrade to `1.13.0` or later.
|
| CVE-2026-45293 |
|
Vulnerability in wp-coding-standards/wpcs (CVE-2026-45293)
vulnerability in wp-coding-standards/wpcs (CVE-2026-45293). Successful exploitation can lead to full system takeover. Exploitable via ``WordPress.WP.EnqueuedResourceParameters``. Mitigation: upgrade to `3.4.1` or later.
|
| CVE-2026-13440 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13440)
cross-site scripting in wordpress (CVE-2026-13440). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15025 |
|
Vulnerability in wordpress (CVE-2026-15025)
vulnerability in wordpress (CVE-2026-15025). Confidential information can be exposed externally.
|
| CVE-2026-14785 |
|
SQL Injection in wordpress (CVE-2026-14785)
SQL injection in wordpress (CVE-2026-14785). Confidential information can be exposed externally.
|
| CVE-2026-14328 |
|
Privilege Escalation in wordpress (CVE-2026-14328)
vulnerability in wordpress (CVE-2026-14328). Successful exploitation can lead to full system takeover. Exploitable via `GET /wp-json/epm/v1/admin/login`.
|
| CVE-2026-10207 |
|
SQL Injection in wordpress (CVE-2026-10207)
SQL injection in wordpress (CVE-2026-10207). Confidential information can be exposed externally.
|
| CVE-2026-13161 |
|
SQL Injection in wordpress (CVE-2026-13161)
SQL injection in wordpress (CVE-2026-13161). Confidential information can be exposed externally.
|
| CVE-2026-12800 |
|
SQL Injection in wordpress (CVE-2026-12800)
SQL injection in wordpress (CVE-2026-12800). Confidential information can be exposed externally. Exploitable via `POST /wp-json/wpdmpp/v1/cart/coupon`.
|
| CVE-2026-14516 |
|
SQL Injection in wordpress (CVE-2026-14516)
SQL injection in wordpress (CVE-2026-14516). Confidential information can be exposed externally.
|
| CVE-2026-12741 |
|
SQL Injection in wordpress (CVE-2026-12741)
SQL injection in wordpress (CVE-2026-12741). Confidential information can be exposed externally.
|
| CVE-2026-14924 |
|
Vulnerability in wordpress (CVE-2026-14924)
vulnerability in wordpress (CVE-2026-14924). Data can be tampered with by attackers.
|
| CVE-2026-14870 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14870)
cross-site scripting in wordpress (CVE-2026-14870). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16585 |
|
Path Traversal in wordpress (CVE-2026-16585)
path traversal in wordpress (CVE-2026-16585). Successful exploitation can lead to full system takeover.
|