Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: web-frameworks Clear
ID Title
CVE-2026-16655 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16655)
cross-site scripting in wordpress (CVE-2026-16655). Risk of unauthorized operations or information disclosure. Exploitable via ``password``.
CVE-2026-58188 Out-of-Bounds Write in apache (CVE-2026-58188)
out-of-bounds write in apache (CVE-2026-58188). Risk of unauthorized operations or information disclosure.
CVE-2026-58189 SSRF (Server-Side Request Forgery) in apache (CVE-2026-58189)
SSRF in apache (CVE-2026-58189). Risk of unauthorized operations or information disclosure.
CVE-2026-58181 Vulnerability in apache (CVE-2026-58181)
vulnerability in apache (CVE-2026-58181). Risk of unauthorized operations or information disclosure.
CVE-2026-58182 Vulnerability in apache (CVE-2026-58182)
vulnerability in apache (CVE-2026-58182). Risk of unauthorized operations or information disclosure.
CVE-2026-58184 Out-of-Bounds Write in apache (CVE-2026-58184)
out-of-bounds write in apache (CVE-2026-58184). Risk of unauthorized operations or information disclosure.
CVE-2026-58186 Vulnerability in apache (CVE-2026-58186)
vulnerability in apache (CVE-2026-58186). Risk of unauthorized operations or information disclosure.
CVE-2026-58179 Vulnerability in apache (CVE-2026-58179)
vulnerability in apache (CVE-2026-58179). Successful exploitation can lead to full system takeover.
CVE-2026-58175 Vulnerability in apache (CVE-2026-58175)
vulnerability in apache (CVE-2026-58175). Risk of unauthorized operations or information disclosure.
CVE-2026-58164 Use-After-Free in apache (CVE-2026-58164)
vulnerability in apache (CVE-2026-58164). Risk of unauthorized operations or information disclosure.
CVE-2026-58180 Vulnerability in apache (CVE-2026-58180)
vulnerability in apache (CVE-2026-58180). Risk of unauthorized operations or information disclosure.
CVE-2026-58178 Vulnerability in apache (CVE-2026-58178)
vulnerability in apache (CVE-2026-58178). Risk of unauthorized operations or information disclosure.
CVE-2026-58177 Out-of-Bounds Write in apache (CVE-2026-58177)
out-of-bounds write in apache (CVE-2026-58177). Risk of unauthorized operations or information disclosure.
CVE-2026-58163 Unsafe Deserialization in apache (CVE-2026-58163)
vulnerability in apache (CVE-2026-58163). Data can be tampered with by attackers.
CVE-2026-58161 Vulnerability in apache (CVE-2026-58161)
vulnerability in apache (CVE-2026-58161). Risk of unauthorized operations or information disclosure.
CVE-2026-58159 Authorization Flaw in apache (CVE-2026-58159)
vulnerability in apache (CVE-2026-58159). Data can be tampered with by attackers.
CVE-2026-58157 Information Disclosure in apache (CVE-2026-58157)
vulnerability in apache (CVE-2026-58157). Confidential information can be exposed externally.
CVE-2026-50622 Vulnerability in apache (CVE-2026-50622)
vulnerability in apache (CVE-2026-50622). Successful exploitation can lead to full system takeover.
CVE-2026-23904 Vulnerability in apache (CVE-2026-23904)
vulnerability in apache (CVE-2026-23904). Risk of unauthorized operations or information disclosure.
CVE-2026-65324 Vulnerability in apache (CVE-2026-65324)
vulnerability in apache (CVE-2026-65324). Risk of unauthorized operations or information disclosure.
CVE-2026-13425 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13425)
cross-site scripting in wordpress (CVE-2026-13425). Risk of unauthorized operations or information disclosure.
CVE-2026-58151 Vulnerability in apache (CVE-2026-58151)
vulnerability in apache (CVE-2026-58151). Risk of unauthorized operations or information disclosure.
CVE-2026-58153 Vulnerability in apache (CVE-2026-58153)
vulnerability in apache (CVE-2026-58153). Risk of unauthorized operations or information disclosure.
CVE-2026-58154 Out-of-Bounds Write in apache (CVE-2026-58154)
out-of-bounds write in apache (CVE-2026-58154). Data can be tampered with by attackers.
CVE-2026-22068 Vulnerability in apache (CVE-2026-22068)
vulnerability in apache (CVE-2026-22068). Confidential information can be exposed externally.
CVE-2026-24033 Vulnerability in apache (CVE-2026-24033)
vulnerability in apache (CVE-2026-24033). Risk of unauthorized operations or information disclosure.
CVE-2026-11974 Path Traversal in wordpress (CVE-2026-11974)
path traversal in wordpress (CVE-2026-11974). Confidential information can be exposed externally.
CVE-2026-13690 Authentication Bypass in wordpress (CVE-2026-13690)
authentication bypass in wordpress (CVE-2026-13690). Confidential information can be exposed externally.
CVE-2026-14234 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14234)
cross-site scripting in wordpress (CVE-2026-14234). Risk of unauthorized operations or information disclosure.
CVE-2026-14300 Authentication Bypass in wordpress (CVE-2026-14300)
authentication bypass in wordpress (CVE-2026-14300). Successful exploitation can lead to full system takeover.
CVE-2026-12476 Unrestricted File Upload in wordpress (CVE-2026-12476)
vulnerability in wordpress (CVE-2026-12476). Successful exploitation can lead to full system takeover.
CVE-2026-12144 Privilege Escalation in wordpress (CVE-2026-12144)
vulnerability in wordpress (CVE-2026-12144). Successful exploitation can lead to full system takeover. Exploitable via ``user_role_set``.
CVE-2026-15992 Privilege Escalation in wordpress (CVE-2026-15992)
vulnerability in wordpress (CVE-2026-15992). Successful exploitation can lead to full system takeover. Exploitable via ``Module_Password_Hint``.
CVE-2026-62426 Vulnerability in c (CVE-2026-62426)
vulnerability in c (CVE-2026-62426). Successful exploitation can lead to full system takeover.
CVE-2026-59878 Vulnerability in apache (CVE-2026-59878)
vulnerability in apache (CVE-2026-59878). Risk of unauthorized operations or information disclosure.
CVE-2026-62427 Vulnerability in c (CVE-2026-62427)
vulnerability in c (CVE-2026-62427). Successful exploitation can lead to full system takeover.
CVE-2026-61609 Vulnerability in pterodactyl/panel (CVE-2026-61609)
vulnerability in pterodactyl/panel (CVE-2026-61609). Risk of unauthorized operations or information disclosure. Exploitable via `POST /auth/login`. Mitigation: upgrade to `1.13.0` or later.
CVE-2026-45293 Vulnerability in wp-coding-standards/wpcs (CVE-2026-45293)
vulnerability in wp-coding-standards/wpcs (CVE-2026-45293). Successful exploitation can lead to full system takeover. Exploitable via ``WordPress.WP.EnqueuedResourceParameters``. Mitigation: upgrade to `3.4.1` or later.
CVE-2026-13440 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13440)
cross-site scripting in wordpress (CVE-2026-13440). Risk of unauthorized operations or information disclosure.
CVE-2026-15025 Vulnerability in wordpress (CVE-2026-15025)
vulnerability in wordpress (CVE-2026-15025). Confidential information can be exposed externally.
CVE-2026-14785 SQL Injection in wordpress (CVE-2026-14785)
SQL injection in wordpress (CVE-2026-14785). Confidential information can be exposed externally.
CVE-2026-14328 Privilege Escalation in wordpress (CVE-2026-14328)
vulnerability in wordpress (CVE-2026-14328). Successful exploitation can lead to full system takeover. Exploitable via `GET /wp-json/epm/v1/admin/login`.
CVE-2026-10207 SQL Injection in wordpress (CVE-2026-10207)
SQL injection in wordpress (CVE-2026-10207). Confidential information can be exposed externally.
CVE-2026-13161 SQL Injection in wordpress (CVE-2026-13161)
SQL injection in wordpress (CVE-2026-13161). Confidential information can be exposed externally.
CVE-2026-12800 SQL Injection in wordpress (CVE-2026-12800)
SQL injection in wordpress (CVE-2026-12800). Confidential information can be exposed externally. Exploitable via `POST /wp-json/wpdmpp/v1/cart/coupon`.
CVE-2026-14516 SQL Injection in wordpress (CVE-2026-14516)
SQL injection in wordpress (CVE-2026-14516). Confidential information can be exposed externally.
CVE-2026-12741 SQL Injection in wordpress (CVE-2026-12741)
SQL injection in wordpress (CVE-2026-12741). Confidential information can be exposed externally.
CVE-2026-14924 Vulnerability in wordpress (CVE-2026-14924)
vulnerability in wordpress (CVE-2026-14924). Data can be tampered with by attackers.
CVE-2026-14870 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14870)
cross-site scripting in wordpress (CVE-2026-14870). Risk of unauthorized operations or information disclosure.
CVE-2026-16585 Path Traversal in wordpress (CVE-2026-16585)
path traversal in wordpress (CVE-2026-16585). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →