Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-8424 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-8424)
vulnerability in wordpress (CVE-2026-8424). Risk of unauthorized operations or information disclosure.
CVE-2026-8423 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-8423)
vulnerability in wordpress (CVE-2026-8423). Risk of unauthorized operations or information disclosure.
CVE-2026-8420 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-8420)
vulnerability in wordpress (CVE-2026-8420). Risk of unauthorized operations or information disclosure.
CVE-2026-8419 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-8419)
vulnerability in wordpress (CVE-2026-8419). Risk of unauthorized operations or information disclosure.
CVE-2026-8418 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-8418)
vulnerability in wordpress (CVE-2026-8418). Risk of unauthorized operations or information disclosure.
CVE-2026-8038 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8038)
cross-site scripting in wordpress (CVE-2026-8038). Risk of unauthorized operations or information disclosure.
CVE-2026-7472 SQL Injection in wordpress (CVE-2026-7472)
SQL injection in wordpress (CVE-2026-7472). Confidential information can be exposed externally.
CVE-2026-7467 Privilege Escalation in wordpress (CVE-2026-7467)
vulnerability in wordpress (CVE-2026-7467). Successful exploitation can lead to full system takeover.
CVE-2026-7462 Cross-Site Scripting (XSS) in wordpress (CVE-2026-7462)
cross-site scripting in wordpress (CVE-2026-7462). Risk of unauthorized operations or information disclosure. Exploitable via ``page``.
CVE-2026-7284 Privilege Escalation in wordpress (CVE-2026-7284)
vulnerability in wordpress (CVE-2026-7284). Successful exploitation can lead to full system takeover.
CVE-2026-6555 Unrestricted File Upload in wordpress (CVE-2026-6555)
vulnerability in wordpress (CVE-2026-6555). Successful exploitation can lead to full system takeover.
CVE-2026-6549 Cross-Site Scripting (XSS) in wordpress (CVE-2026-6549)
cross-site scripting in wordpress (CVE-2026-6549). Risk of unauthorized operations or information disclosure. Exploitable via ``vc_enamad_namad``.
CVE-2026-6456 Authentication Bypass in wordpress (CVE-2026-6456)
authentication bypass in wordpress (CVE-2026-6456). Successful exploitation can lead to full system takeover. Exploitable via ``rememberLogin``.
CVE-2026-6452 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-6452)
vulnerability in wordpress (CVE-2026-6452). Risk of unauthorized operations or information disclosure.
CVE-2026-6404 Cross-Site Scripting (XSS) in wordpress (CVE-2026-6404)
cross-site scripting in wordpress (CVE-2026-6404). Risk of unauthorized operations or information disclosure.
CVE-2026-6401 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-6401)
vulnerability in wordpress (CVE-2026-6401). Risk of unauthorized operations or information disclosure.
CVE-2026-6400 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-6400)
vulnerability in wordpress (CVE-2026-6400). Risk of unauthorized operations or information disclosure.
CVE-2026-6399 Cross-Site Scripting (XSS) in wordpress (CVE-2026-6399)
cross-site scripting in wordpress (CVE-2026-6399). Risk of unauthorized operations or information disclosure.
CVE-2026-6397 Cross-Site Scripting (XSS) in wordpress (CVE-2026-6397)
cross-site scripting in wordpress (CVE-2026-6397). Risk of unauthorized operations or information disclosure. Exploitable via ``readmoretext``.
CVE-2026-6395 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-6395)
vulnerability in wordpress (CVE-2026-6395). Risk of unauthorized operations or information disclosure.
CVE-2026-6394 SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-6394)
SSRF in wordpress (CVE-2026-6394). Risk of unauthorized operations or information disclosure.
CVE-2026-6391 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-6391)
vulnerability in wordpress (CVE-2026-6391). Risk of unauthorized operations or information disclosure.
CVE-2026-6072 Vulnerability in wordpress (CVE-2026-6072)
vulnerability in wordpress (CVE-2026-6072). Confidential information can be exposed externally.
CVE-2026-5293 Cross-Site Scripting (XSS) in wordpress (CVE-2026-5293)
cross-site scripting in wordpress (CVE-2026-5293). Risk of unauthorized operations or information disclosure.
DEBIAN-CVE-2026-43620 Vulnerability in rsync (DEBIAN-CVE-2026-43620)
vulnerability in rsync (DEBIAN-CVE-2026-43620). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.3-4+deb11u4` or later.
DEBIAN-CVE-2026-43618 Vulnerability in rsync (DEBIAN-CVE-2026-43618)
vulnerability in rsync (DEBIAN-CVE-2026-43618). Confidential information can be exposed externally. Mitigation: upgrade to `3.2.3-4+deb11u4` or later.
DEBIAN-CVE-2026-43617 Vulnerability in rsync (DEBIAN-CVE-2026-43617)
vulnerability in rsync (DEBIAN-CVE-2026-43617). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.3-4+deb11u4` or later.
DEBIAN-CVE-2026-43619 Vulnerability in rsync (DEBIAN-CVE-2026-43619)
vulnerability in rsync (DEBIAN-CVE-2026-43619). Confidential information can be exposed externally. Mitigation: upgrade to `3.2.3-4+deb11u4` or later.
ALPINE-CVE-2026-43620 Vulnerability in rsync (ALPINE-CVE-2026-43620)
vulnerability in rsync (ALPINE-CVE-2026-43620). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.4.3-r0` or later.
ALPINE-CVE-2026-43617 Vulnerability in rsync (ALPINE-CVE-2026-43617)
vulnerability in rsync (ALPINE-CVE-2026-43617). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.4.3-r0` or later.
ALPINE-CVE-2026-45232 Vulnerability in rsync (ALPINE-CVE-2026-45232)
vulnerability in rsync (ALPINE-CVE-2026-45232). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.4.3-r0` or later.
ALPINE-CVE-2026-43618 Vulnerability in rsync (ALPINE-CVE-2026-43618)
vulnerability in rsync (ALPINE-CVE-2026-43618). Confidential information can be exposed externally. Mitigation: upgrade to `3.4.3-r0` or later.
ALPINE-CVE-2026-43619 Vulnerability in rsync (ALPINE-CVE-2026-43619)
vulnerability in rsync (ALPINE-CVE-2026-43619). Confidential information can be exposed externally. Mitigation: upgrade to `3.4.3-r0` or later.
DEBIAN-CVE-2026-45232 Vulnerability in rsync (DEBIAN-CVE-2026-45232)
vulnerability in rsync (DEBIAN-CVE-2026-45232). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.4.3+ds1-1` or later.
CVE-2026-45232 Vulnerability in c (CVE-2026-45232)
vulnerability in c (CVE-2026-45232). Risk of unauthorized operations or information disclosure.
CVE-2026-43620 Out-of-Bounds Read in c (CVE-2026-43620)
vulnerability in c (CVE-2026-43620). Risk of unauthorized operations or information disclosure.
CVE-2026-43619 Vulnerability in samba (CVE-2026-43619)
vulnerability in samba (CVE-2026-43619). Confidential information can be exposed externally.
CVE-2026-43618 Out-of-Bounds Read in samba (CVE-2026-43618)
vulnerability in samba (CVE-2026-43618). Confidential information can be exposed externally.
CVE-2026-43617 Vulnerability in samba (CVE-2026-43617)
vulnerability in samba (CVE-2026-43617). Risk of unauthorized operations or information disclosure.
CVE-2026-3985 SQL Injection in wordpress (CVE-2026-3985)
SQL injection in wordpress (CVE-2026-3985). Confidential information can be exposed externally.
MAL-2026-4468 Vulnerability in @wengine-ai/claude-code-router-shared (MAL-2026-4468)
vulnerability in @wengine-ai/claude-code-router-shared (MAL-2026-4468). Risk of unauthorized operations or information disclosure.
MAL-2026-4709 Vulnerability in wallet-agent-ai-radix (MAL-2026-4709)
vulnerability in wallet-agent-ai-radix (MAL-2026-4709). Risk of unauthorized operations or information disclosure.
MAL-2026-4534 Vulnerability in color-style-utils (MAL-2026-4534)
vulnerability in color-style-utils (MAL-2026-4534). Risk of unauthorized operations or information disclosure.
MAL-2026-4181 Vulnerability in stripe-commands (MAL-2026-4181)
vulnerability in stripe-commands (MAL-2026-4181). Risk of unauthorized operations or information disclosure.
MAL-2026-4389 Vulnerability in @flipbit2-bb/test-auth-state (MAL-2026-4389)
vulnerability in @flipbit2-bb/test-auth-state (MAL-2026-4389). Risk of unauthorized operations or information disclosure.
MAL-2026-4379 Vulnerability in @deadcode09284814/axios-util (MAL-2026-4379)
vulnerability in @deadcode09284814/axios-util (MAL-2026-4379). Risk of unauthorized operations or information disclosure.
MAL-2026-4517 Vulnerability in chalk-tempalte (MAL-2026-4517)
vulnerability in chalk-tempalte (MAL-2026-4517). Risk of unauthorized operations or information disclosure. Exploitable via ``postinstall.js``.
MAL-2026-4528 Vulnerability in cloud-pc-templates (MAL-2026-4528)
vulnerability in cloud-pc-templates (MAL-2026-4528). Risk of unauthorized operations or information disclosure. Exploitable via ``huggingface``.
MAL-2026-4557 Vulnerability in ezymail (MAL-2026-4557)
vulnerability in ezymail (MAL-2026-4557). Risk of unauthorized operations or information disclosure. Exploitable via ``user``.
MAL-2026-4461 Vulnerability in @venturo/playwright (MAL-2026-4461)
vulnerability in @venturo/playwright (MAL-2026-4461). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →