Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-63302 |
|
Vulnerability in CVE-2026-63302 (CVE-2026-63302)
vulnerability in CVE-2026-63302 (CVE-2026-63302). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63301 |
|
Vulnerability in csrf (CVE-2026-63301)
vulnerability in csrf (CVE-2026-63301). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18029 |
|
Vulnerability in CVE-2026-18029 (CVE-2026-18029)
vulnerability in CVE-2026-18029 (CVE-2026-18029). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18028 |
|
Vulnerability in CVE-2026-18028 (CVE-2026-18028)
vulnerability in CVE-2026-18028 (CVE-2026-18028). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17072 |
|
Out-of-Bounds Read in CVE-2026-17072 (CVE-2026-17072)
vulnerability in CVE-2026-17072 (CVE-2026-17072). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65624 |
|
Vulnerability in CVE-2026-65624 (CVE-2026-65624)
vulnerability in CVE-2026-65624 (CVE-2026-65624). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59248 |
|
Vulnerability in dos (CVE-2026-59248)
vulnerability in dos (CVE-2026-59248). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58246 |
|
Vulnerability in CVE-2026-58246 (CVE-2026-58246)
vulnerability in CVE-2026-58246 (CVE-2026-58246). Confidential information can be exposed externally.
|
| CVE-2026-16462 |
|
SQL Injection in CVE-2026-16462 (CVE-2026-16462)
SQL injection in CVE-2026-16462 (CVE-2026-16462). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14785 |
|
SQL Injection in wordpress (CVE-2026-14785)
SQL injection in wordpress (CVE-2026-14785). Confidential information can be exposed externally.
|
| CVE-2026-14328 |
|
Privilege Escalation in wordpress (CVE-2026-14328)
vulnerability in wordpress (CVE-2026-14328). Successful exploitation can lead to full system takeover. Exploitable via `GET /wp-json/epm/v1/admin/login`.
|
| CVE-2026-11841 |
|
Vulnerability in CVE-2026-11841 (CVE-2026-11841)
vulnerability in CVE-2026-11841 (CVE-2026-11841). Confidential information can be exposed externally.
|
| CVE-2026-11598 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-11598)
cross-site scripting in wordpress (CVE-2026-11598). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10207 |
|
SQL Injection in wordpress (CVE-2026-10207)
SQL injection in wordpress (CVE-2026-10207). Confidential information can be exposed externally.
|
| CVE-2026-9680 |
|
Vulnerability in CVE-2026-9680 (CVE-2026-9680)
vulnerability in CVE-2026-9680 (CVE-2026-9680). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8167 |
|
Cross-Site Scripting (XSS) in CVE-2026-8167 (CVE-2026-8167)
cross-site scripting in CVE-2026-8167 (CVE-2026-8167). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59764 |
|
OS Command Injection in CVE-2026-59764 (CVE-2026-59764)
OS command injection in CVE-2026-59764 (CVE-2026-59764). Successful exploitation can lead to full system takeover.
|
| CVE-2026-61376 |
|
OS Command Injection in CVE-2026-61376 (CVE-2026-61376)
OS command injection in CVE-2026-61376 (CVE-2026-61376). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14169 |
|
Vulnerability in CVE-2026-14169 (CVE-2026-14169)
vulnerability in CVE-2026-14169 (CVE-2026-14169). Data can be tampered with by attackers.
|
| CVE-2026-15267 |
|
SQL Injection in wordpress (CVE-2026-15267)
SQL injection in wordpress (CVE-2026-15267). Confidential information can be exposed externally.
|
| CVE-2026-14170 |
|
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
|
| CVE-2026-13161 |
|
SQL Injection in wordpress (CVE-2026-13161)
SQL injection in wordpress (CVE-2026-13161). Confidential information can be exposed externally.
|
| CVE-2026-14167 |
|
Authorization Flaw in CVE-2026-14167 (CVE-2026-14167)
vulnerability in CVE-2026-14167 (CVE-2026-14167). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15730 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15730)
cross-site scripting in wordpress (CVE-2026-15730). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14168 |
|
Vulnerability in CVE-2026-14168 (CVE-2026-14168)
vulnerability in CVE-2026-14168 (CVE-2026-14168). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15673 |
|
SQL Injection in wordpress (CVE-2026-15673)
SQL injection in wordpress (CVE-2026-15673). Confidential information can be exposed externally.
|
| CVE-2026-15014 |
|
Vulnerability in wordpress (CVE-2026-15014)
vulnerability in wordpress (CVE-2026-15014). Successful exploitation can lead to full system takeover. Exploitable via ``billing_phone``.
|
| CVE-2026-15671 |
|
SQL Injection in wordpress (CVE-2026-15671)
SQL injection in wordpress (CVE-2026-15671). Confidential information can be exposed externally.
|
| CVE-2026-11756 |
|
Unsafe Deserialization in deserialization (CVE-2026-11756)
vulnerability in deserialization (CVE-2026-11756). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15670 |
|
SQL Injection in wordpress (CVE-2026-15670)
SQL injection in wordpress (CVE-2026-15670). Confidential information can be exposed externally.
|
| CVE-2026-14516 |
|
SQL Injection in wordpress (CVE-2026-14516)
SQL injection in wordpress (CVE-2026-14516). Confidential information can be exposed externally.
|
| CVE-2026-14171 |
|
Open Redirect in CVE-2026-14171 (CVE-2026-14171)
vulnerability in CVE-2026-14171 (CVE-2026-14171). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12741 |
|
SQL Injection in wordpress (CVE-2026-12741)
SQL injection in wordpress (CVE-2026-12741). Confidential information can be exposed externally.
|
| CVE-2026-12800 |
|
SQL Injection in wordpress (CVE-2026-12800)
SQL injection in wordpress (CVE-2026-12800). Confidential information can be exposed externally. Exploitable via `POST /wp-json/wpdmpp/v1/cart/coupon`.
|
| CVE-2026-55977 |
|
Vulnerability in CVE-2026-55977 (CVE-2026-55977)
vulnerability in CVE-2026-55977 (CVE-2026-55977). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-14041 |
|
Vulnerability in bouncycastle (CVE-2024-14041)
vulnerability in bouncycastle (CVE-2024-14041). Confidential information can be exposed externally.
|
| CVE-2026-44387 |
|
Cross-Site Scripting (XSS) in jvn (CVE-2026-44387)
cross-site scripting in jvn (CVE-2026-44387). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6251 |
|
SQL Injection in wordpress (CVE-2026-6251)
SQL injection in wordpress (CVE-2026-6251). Confidential information can be exposed externally.
|
| CVE-2026-16811 |
|
SQL Injection in wordpress (CVE-2026-16811)
SQL injection in wordpress (CVE-2026-16811). Confidential information can be exposed externally.
|
| CVE-2026-16797 |
|
Vulnerability in wordpress (CVE-2026-16797)
vulnerability in wordpress (CVE-2026-16797). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16587 |
|
Vulnerability in wordpress (CVE-2026-16587)
vulnerability in wordpress (CVE-2026-16587). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16585 |
|
Path Traversal in wordpress (CVE-2026-16585)
path traversal in wordpress (CVE-2026-16585). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15136 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-15136)
vulnerability in wordpress (CVE-2026-15136). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15012 |
|
Information Disclosure in wordpress (CVE-2026-15012)
vulnerability in wordpress (CVE-2026-15012). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14926 |
|
Vulnerability in wordpress (CVE-2026-14926)
vulnerability in wordpress (CVE-2026-14926). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14924 |
|
Vulnerability in wordpress (CVE-2026-14924)
vulnerability in wordpress (CVE-2026-14924). Data can be tampered with by attackers.
|
| CVE-2026-14870 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14870)
cross-site scripting in wordpress (CVE-2026-14870). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14821 |
|
Vulnerability in wordpress (CVE-2026-14821)
vulnerability in wordpress (CVE-2026-14821). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14819 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14819)
cross-site scripting in wordpress (CVE-2026-14819). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14545 |
|
Privilege Escalation in wordpress (CVE-2026-14545)
vulnerability in wordpress (CVE-2026-14545). Successful exploitation can lead to full system takeover.
|