Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-8424 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-8424)
vulnerability in wordpress (CVE-2026-8424). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8423 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-8423)
vulnerability in wordpress (CVE-2026-8423). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8420 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-8420)
vulnerability in wordpress (CVE-2026-8420). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8419 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-8419)
vulnerability in wordpress (CVE-2026-8419). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8418 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-8418)
vulnerability in wordpress (CVE-2026-8418). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8038 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-8038)
cross-site scripting in wordpress (CVE-2026-8038). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7472 |
|
SQL Injection in wordpress (CVE-2026-7472)
SQL injection in wordpress (CVE-2026-7472). Confidential information can be exposed externally.
|
| CVE-2026-7467 |
|
Privilege Escalation in wordpress (CVE-2026-7467)
vulnerability in wordpress (CVE-2026-7467). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7462 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-7462)
cross-site scripting in wordpress (CVE-2026-7462). Risk of unauthorized operations or information disclosure. Exploitable via ``page``.
|
| CVE-2026-7284 |
|
Privilege Escalation in wordpress (CVE-2026-7284)
vulnerability in wordpress (CVE-2026-7284). Successful exploitation can lead to full system takeover.
|
| CVE-2026-6555 |
|
Unrestricted File Upload in wordpress (CVE-2026-6555)
vulnerability in wordpress (CVE-2026-6555). Successful exploitation can lead to full system takeover.
|
| CVE-2026-6549 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-6549)
cross-site scripting in wordpress (CVE-2026-6549). Risk of unauthorized operations or information disclosure. Exploitable via ``vc_enamad_namad``.
|
| CVE-2026-6456 |
|
Authentication Bypass in wordpress (CVE-2026-6456)
authentication bypass in wordpress (CVE-2026-6456). Successful exploitation can lead to full system takeover. Exploitable via ``rememberLogin``.
|
| CVE-2026-6452 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-6452)
vulnerability in wordpress (CVE-2026-6452). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6404 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-6404)
cross-site scripting in wordpress (CVE-2026-6404). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6401 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-6401)
vulnerability in wordpress (CVE-2026-6401). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6400 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-6400)
vulnerability in wordpress (CVE-2026-6400). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6399 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-6399)
cross-site scripting in wordpress (CVE-2026-6399). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6397 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-6397)
cross-site scripting in wordpress (CVE-2026-6397). Risk of unauthorized operations or information disclosure. Exploitable via ``readmoretext``.
|
| CVE-2026-6395 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-6395)
vulnerability in wordpress (CVE-2026-6395). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6394 |
|
SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-6394)
SSRF in wordpress (CVE-2026-6394). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6391 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-6391)
vulnerability in wordpress (CVE-2026-6391). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6072 |
|
Vulnerability in wordpress (CVE-2026-6072)
vulnerability in wordpress (CVE-2026-6072). Confidential information can be exposed externally.
|
| CVE-2026-5293 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-5293)
cross-site scripting in wordpress (CVE-2026-5293). Risk of unauthorized operations or information disclosure.
|
| DEBIAN-CVE-2026-43620 |
|
Vulnerability in rsync (DEBIAN-CVE-2026-43620)
vulnerability in rsync (DEBIAN-CVE-2026-43620). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.3-4+deb11u4` or later.
|
| DEBIAN-CVE-2026-43618 |
|
Vulnerability in rsync (DEBIAN-CVE-2026-43618)
vulnerability in rsync (DEBIAN-CVE-2026-43618). Confidential information can be exposed externally. Mitigation: upgrade to `3.2.3-4+deb11u4` or later.
|
| DEBIAN-CVE-2026-43617 |
|
Vulnerability in rsync (DEBIAN-CVE-2026-43617)
vulnerability in rsync (DEBIAN-CVE-2026-43617). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.3-4+deb11u4` or later.
|
| DEBIAN-CVE-2026-43619 |
|
Vulnerability in rsync (DEBIAN-CVE-2026-43619)
vulnerability in rsync (DEBIAN-CVE-2026-43619). Confidential information can be exposed externally. Mitigation: upgrade to `3.2.3-4+deb11u4` or later.
|
| ALPINE-CVE-2026-43620 |
|
Vulnerability in rsync (ALPINE-CVE-2026-43620)
vulnerability in rsync (ALPINE-CVE-2026-43620). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.4.3-r0` or later.
|
| ALPINE-CVE-2026-43617 |
|
Vulnerability in rsync (ALPINE-CVE-2026-43617)
vulnerability in rsync (ALPINE-CVE-2026-43617). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.4.3-r0` or later.
|
| ALPINE-CVE-2026-45232 |
|
Vulnerability in rsync (ALPINE-CVE-2026-45232)
vulnerability in rsync (ALPINE-CVE-2026-45232). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.4.3-r0` or later.
|
| ALPINE-CVE-2026-43618 |
|
Vulnerability in rsync (ALPINE-CVE-2026-43618)
vulnerability in rsync (ALPINE-CVE-2026-43618). Confidential information can be exposed externally. Mitigation: upgrade to `3.4.3-r0` or later.
|
| ALPINE-CVE-2026-43619 |
|
Vulnerability in rsync (ALPINE-CVE-2026-43619)
vulnerability in rsync (ALPINE-CVE-2026-43619). Confidential information can be exposed externally. Mitigation: upgrade to `3.4.3-r0` or later.
|
| DEBIAN-CVE-2026-45232 |
|
Vulnerability in rsync (DEBIAN-CVE-2026-45232)
vulnerability in rsync (DEBIAN-CVE-2026-45232). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.4.3+ds1-1` or later.
|
| CVE-2026-45232 |
|
Vulnerability in c (CVE-2026-45232)
vulnerability in c (CVE-2026-45232). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43620 |
|
Out-of-Bounds Read in c (CVE-2026-43620)
vulnerability in c (CVE-2026-43620). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43619 |
|
Vulnerability in samba (CVE-2026-43619)
vulnerability in samba (CVE-2026-43619). Confidential information can be exposed externally.
|
| CVE-2026-43618 |
|
Out-of-Bounds Read in samba (CVE-2026-43618)
vulnerability in samba (CVE-2026-43618). Confidential information can be exposed externally.
|
| CVE-2026-43617 |
|
Vulnerability in samba (CVE-2026-43617)
vulnerability in samba (CVE-2026-43617). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3985 |
|
SQL Injection in wordpress (CVE-2026-3985)
SQL injection in wordpress (CVE-2026-3985). Confidential information can be exposed externally.
|
| MAL-2026-4468 |
|
Vulnerability in @wengine-ai/claude-code-router-shared (MAL-2026-4468)
vulnerability in @wengine-ai/claude-code-router-shared (MAL-2026-4468). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4709 |
|
Vulnerability in wallet-agent-ai-radix (MAL-2026-4709)
vulnerability in wallet-agent-ai-radix (MAL-2026-4709). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4534 |
|
Vulnerability in color-style-utils (MAL-2026-4534)
vulnerability in color-style-utils (MAL-2026-4534). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4181 |
|
Vulnerability in stripe-commands (MAL-2026-4181)
vulnerability in stripe-commands (MAL-2026-4181). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4389 |
|
Vulnerability in @flipbit2-bb/test-auth-state (MAL-2026-4389)
vulnerability in @flipbit2-bb/test-auth-state (MAL-2026-4389). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4379 |
|
Vulnerability in @deadcode09284814/axios-util (MAL-2026-4379)
vulnerability in @deadcode09284814/axios-util (MAL-2026-4379). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4517 |
|
Vulnerability in chalk-tempalte (MAL-2026-4517)
vulnerability in chalk-tempalte (MAL-2026-4517). Risk of unauthorized operations or information disclosure. Exploitable via ``postinstall.js``.
|
| MAL-2026-4528 |
|
Vulnerability in cloud-pc-templates (MAL-2026-4528)
vulnerability in cloud-pc-templates (MAL-2026-4528). Risk of unauthorized operations or information disclosure. Exploitable via ``huggingface``.
|
| MAL-2026-4557 |
|
Vulnerability in ezymail (MAL-2026-4557)
vulnerability in ezymail (MAL-2026-4557). Risk of unauthorized operations or information disclosure. Exploitable via ``user``.
|
| MAL-2026-4461 |
|
Vulnerability in @venturo/playwright (MAL-2026-4461)
vulnerability in @venturo/playwright (MAL-2026-4461). Risk of unauthorized operations or information disclosure.
|