Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-32550 Subscriber SQL Injection in Kadence Shop Kit <= 3.0.6 versions.
Subscriber SQL Injection in Kadence Shop Kit <= 3.0.6 versions.
CVE-2026-32479 Unauthenticated SQL Injection in Visitor Traffic Real Time Statistics Pro <= 11.17 versions.
Unauthenticated SQL Injection in Visitor Traffic Real Time Statistics Pro <= 11.17 versions.
CVE-2026-27330 Unauthenticated Broken Access Control in Mobile App for WooCommerce <= 0.4.62 versions.
Unauthenticated Broken Access Control in Mobile App for WooCommerce <= 0.4.62 versions.
CVE-2026-78333 Cross-Site Scripting (XSS) in wordpress (CVE-2026-78333)
cross-site scripting in wordpress (CVE-2026-78333). Successful exploitation can lead to full system takeover.
CVE-2026-78139 Vulnerability in wordpress (CVE-2026-78139)
vulnerability in wordpress (CVE-2026-78139). Risk of unauthorized operations or information disclosure.
CVE-2026-78125 Information Disclosure in wordpress (CVE-2026-78125)
vulnerability in wordpress (CVE-2026-78125). Risk of unauthorized operations or information disclosure.
CVE-2026-77989 Cross-Site Scripting (XSS) in csharp (CVE-2026-77989)
cross-site scripting in csharp (CVE-2026-77989). Risk of unauthorized operations or information disclosure.
CVE-2026-78138 Information Disclosure in wordpress (CVE-2026-78138)
vulnerability in wordpress (CVE-2026-78138). Risk of unauthorized operations or information disclosure.
CVE-2026-78137 Vulnerability in wordpress (CVE-2026-78137)
vulnerability in wordpress (CVE-2026-78137). Data can be tampered with by attackers.
CVE-2026-77018 Unrestricted File Upload in wordpress (CVE-2026-77018)
vulnerability in wordpress (CVE-2026-77018). Successful exploitation can lead to full system takeover.
CVE-2026-77991 Unrestricted File Upload in csharp (CVE-2026-77991)
vulnerability in csharp (CVE-2026-77991). Risk of unauthorized operations or information disclosure.
CVE-2026-77990 Vulnerability in csharp (CVE-2026-77990)
vulnerability in csharp (CVE-2026-77990). Risk of unauthorized operations or information disclosure.
CVE-2026-77034 Vulnerability in csharp (CVE-2026-77034)
vulnerability in csharp (CVE-2026-77034). Risk of unauthorized operations or information disclosure.
CVE-2026-77035 Vulnerability in csharp (CVE-2026-77035)
vulnerability in csharp (CVE-2026-77035). Risk of unauthorized operations or information disclosure.
CVE-2026-59274 Vulnerability in CVE-2026-59274 (CVE-2026-59274)
vulnerability in CVE-2026-59274 (CVE-2026-59274). Risk of unauthorized operations or information disclosure.
CVE-2026-59271 Vulnerability in CVE-2026-59271 (CVE-2026-59271)
vulnerability in CVE-2026-59271 (CVE-2026-59271). Confidential information can be exposed externally.
CVE-2026-77017 Information Disclosure in wordpress (CVE-2026-77017)
vulnerability in wordpress (CVE-2026-77017). Confidential information can be exposed externally.
CVE-2026-59270 Vulnerability in CVE-2026-59270 (CVE-2026-59270)
vulnerability in CVE-2026-59270 (CVE-2026-59270). Confidential information can be exposed externally.
CVE-2026-59278 SSRF (Server-Side Request Forgery) in csharp (CVE-2026-59278)
SSRF in csharp (CVE-2026-59278). Risk of unauthorized operations or information disclosure.
CVE-2026-76549 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-76549)
vulnerability in wordpress (CVE-2026-76549). Data can be tampered with by attackers.
CVE-2026-77016 Vulnerability in wordpress (CVE-2026-77016)
vulnerability in wordpress (CVE-2026-77016). Data can be tampered with by attackers.
CVE-2026-59275 Unsafe Deserialization in CVE-2026-59275 (CVE-2026-59275)
vulnerability in CVE-2026-59275 (CVE-2026-59275). Successful exploitation can lead to full system takeover.
CVE-2026-47893 Vulnerability in spring (CVE-2026-47893)
vulnerability in spring (CVE-2026-47893). Confidential information can be exposed externally.
CVE-2026-47894 Vulnerability in CVE-2026-47894 (CVE-2026-47894)
vulnerability in CVE-2026-47894 (CVE-2026-47894). Confidential information can be exposed externally.
CVE-2026-16568 Vulnerability in wordpress (CVE-2026-16568)
vulnerability in wordpress (CVE-2026-16568). Risk of unauthorized operations or information disclosure.
CVE-2026-19225 Code Injection in wordpress (CVE-2026-19225)
code injection in wordpress (CVE-2026-19225). Successful exploitation can lead to full system takeover.
CVE-2026-19715 Information Disclosure in wordpress (CVE-2026-19715)
vulnerability in wordpress (CVE-2026-19715). Confidential information can be exposed externally.
CVE-2026-16569 Vulnerability in wordpress (CVE-2026-16569)
vulnerability in wordpress (CVE-2026-16569). Risk of unauthorized operations or information disclosure.
CVE-2026-47891 Vulnerability in spring (CVE-2026-47891)
vulnerability in spring (CVE-2026-47891). Successful exploitation can lead to full system takeover.
CVE-2026-47887 Open Redirect in spring (CVE-2026-47887)
vulnerability in spring (CVE-2026-47887). Risk of unauthorized operations or information disclosure.
CVE-2026-47890 Vulnerability in spring (CVE-2026-47890)
vulnerability in spring (CVE-2026-47890). Successful exploitation can lead to full system takeover.
CVE-2026-47884 Path Traversal in spring (CVE-2026-47884)
path traversal in spring (CVE-2026-47884). Successful exploitation can lead to full system takeover.
CVE-2026-47888 Vulnerability in spring (CVE-2026-47888)
vulnerability in spring (CVE-2026-47888). Risk of unauthorized operations or information disclosure.
CVE-2026-47892 Authorization Flaw in spring (CVE-2026-47892)
vulnerability in spring (CVE-2026-47892). Successful exploitation can lead to full system takeover.
CVE-2026-47889 Vulnerability in spring (CVE-2026-47889)
vulnerability in spring (CVE-2026-47889). Confidential information can be exposed externally.
CVE-2026-47886 Vulnerability in spring (CVE-2026-47886)
vulnerability in spring (CVE-2026-47886). Risk of unauthorized operations or information disclosure.
CVE-2026-47881 Vulnerability in c (CVE-2026-47881)
vulnerability in c (CVE-2026-47881). Risk of unauthorized operations or information disclosure.
CVE-2026-47885 Vulnerability in spring (CVE-2026-47885)
vulnerability in spring (CVE-2026-47885). Data can be tampered with by attackers.
CVE-2026-47883 Open Redirect in spring (CVE-2026-47883)
vulnerability in spring (CVE-2026-47883). Risk of unauthorized operations or information disclosure.
CVE-2026-47875 Unsafe Deserialization in deserialization (CVE-2026-47875)
vulnerability in deserialization (CVE-2026-47875). Risk of unauthorized operations or information disclosure.
CVE-2026-47879 SSRF (Server-Side Request Forgery) in CVE-2026-47879 (CVE-2026-47879)
SSRF in CVE-2026-47879 (CVE-2026-47879). Confidential information can be exposed externally.
CVE-2026-47880 Vulnerability in CVE-2026-47880 (CVE-2026-47880)
vulnerability in CVE-2026-47880 (CVE-2026-47880). Risk of unauthorized operations or information disclosure.
CVE-2026-19454 Authorization Flaw in wordpress (CVE-2026-19454)
vulnerability in wordpress (CVE-2026-19454). Confidential information can be exposed externally.
CVE-2026-47877 Cross-Site Scripting (XSS) in CVE-2026-47877 (CVE-2026-47877)
cross-site scripting in CVE-2026-47877 (CVE-2026-47877). Confidential information can be exposed externally.
CVE-2026-16567 Vulnerability in wordpress (CVE-2026-16567)
vulnerability in wordpress (CVE-2026-16567). Risk of unauthorized operations or information disclosure.
CVE-2026-47864 Unsafe Deserialization in deserialization (CVE-2026-47864)
vulnerability in deserialization (CVE-2026-47864). Confidential information can be exposed externally.
CVE-2026-19223 Code Injection in wordpress (CVE-2026-19223)
code injection in wordpress (CVE-2026-19223). Successful exploitation can lead to full system takeover.
CVE-2026-47878 Unsafe Deserialization in CVE-2026-47878 (CVE-2026-47878)
vulnerability in CVE-2026-47878 (CVE-2026-47878). Risk of unauthorized operations or information disclosure.
CVE-2026-47849 Vulnerability in CVE-2026-47849 (CVE-2026-47849)
vulnerability in CVE-2026-47849 (CVE-2026-47849). Data can be tampered with by attackers.
CVE-2026-13416 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13416)
cross-site scripting in wordpress (CVE-2026-13416). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →