Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-63302 Vulnerability in CVE-2026-63302 (CVE-2026-63302)
vulnerability in CVE-2026-63302 (CVE-2026-63302). Risk of unauthorized operations or information disclosure.
CVE-2026-63301 Vulnerability in csrf (CVE-2026-63301)
vulnerability in csrf (CVE-2026-63301). Risk of unauthorized operations or information disclosure.
CVE-2026-18029 Vulnerability in CVE-2026-18029 (CVE-2026-18029)
vulnerability in CVE-2026-18029 (CVE-2026-18029). Risk of unauthorized operations or information disclosure.
CVE-2026-18028 Vulnerability in CVE-2026-18028 (CVE-2026-18028)
vulnerability in CVE-2026-18028 (CVE-2026-18028). Risk of unauthorized operations or information disclosure.
CVE-2026-17072 Out-of-Bounds Read in CVE-2026-17072 (CVE-2026-17072)
vulnerability in CVE-2026-17072 (CVE-2026-17072). Risk of unauthorized operations or information disclosure.
CVE-2026-65624 Vulnerability in CVE-2026-65624 (CVE-2026-65624)
vulnerability in CVE-2026-65624 (CVE-2026-65624). Risk of unauthorized operations or information disclosure.
CVE-2026-59248 Vulnerability in dos (CVE-2026-59248)
vulnerability in dos (CVE-2026-59248). Risk of unauthorized operations or information disclosure.
CVE-2026-58246 Vulnerability in CVE-2026-58246 (CVE-2026-58246)
vulnerability in CVE-2026-58246 (CVE-2026-58246). Confidential information can be exposed externally.
CVE-2026-16462 SQL Injection in CVE-2026-16462 (CVE-2026-16462)
SQL injection in CVE-2026-16462 (CVE-2026-16462). Successful exploitation can lead to full system takeover.
CVE-2026-14785 SQL Injection in wordpress (CVE-2026-14785)
SQL injection in wordpress (CVE-2026-14785). Confidential information can be exposed externally.
CVE-2026-14328 Privilege Escalation in wordpress (CVE-2026-14328)
vulnerability in wordpress (CVE-2026-14328). Successful exploitation can lead to full system takeover. Exploitable via `GET /wp-json/epm/v1/admin/login`.
CVE-2026-11841 Vulnerability in CVE-2026-11841 (CVE-2026-11841)
vulnerability in CVE-2026-11841 (CVE-2026-11841). Confidential information can be exposed externally.
CVE-2026-11598 Cross-Site Scripting (XSS) in wordpress (CVE-2026-11598)
cross-site scripting in wordpress (CVE-2026-11598). Risk of unauthorized operations or information disclosure.
CVE-2026-10207 SQL Injection in wordpress (CVE-2026-10207)
SQL injection in wordpress (CVE-2026-10207). Confidential information can be exposed externally.
CVE-2026-9680 Vulnerability in CVE-2026-9680 (CVE-2026-9680)
vulnerability in CVE-2026-9680 (CVE-2026-9680). Risk of unauthorized operations or information disclosure.
CVE-2026-8167 Cross-Site Scripting (XSS) in CVE-2026-8167 (CVE-2026-8167)
cross-site scripting in CVE-2026-8167 (CVE-2026-8167). Risk of unauthorized operations or information disclosure.
CVE-2026-59764 OS Command Injection in CVE-2026-59764 (CVE-2026-59764)
OS command injection in CVE-2026-59764 (CVE-2026-59764). Successful exploitation can lead to full system takeover.
CVE-2026-61376 OS Command Injection in CVE-2026-61376 (CVE-2026-61376)
OS command injection in CVE-2026-61376 (CVE-2026-61376). Successful exploitation can lead to full system takeover.
CVE-2026-14169 Vulnerability in CVE-2026-14169 (CVE-2026-14169)
vulnerability in CVE-2026-14169 (CVE-2026-14169). Data can be tampered with by attackers.
CVE-2026-15267 SQL Injection in wordpress (CVE-2026-15267)
SQL injection in wordpress (CVE-2026-15267). Confidential information can be exposed externally.
CVE-2026-14170 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-13161 SQL Injection in wordpress (CVE-2026-13161)
SQL injection in wordpress (CVE-2026-13161). Confidential information can be exposed externally.
CVE-2026-14167 Authorization Flaw in CVE-2026-14167 (CVE-2026-14167)
vulnerability in CVE-2026-14167 (CVE-2026-14167). Successful exploitation can lead to full system takeover.
CVE-2026-15730 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15730)
cross-site scripting in wordpress (CVE-2026-15730). Risk of unauthorized operations or information disclosure.
CVE-2026-14168 Vulnerability in CVE-2026-14168 (CVE-2026-14168)
vulnerability in CVE-2026-14168 (CVE-2026-14168). Successful exploitation can lead to full system takeover.
CVE-2026-15673 SQL Injection in wordpress (CVE-2026-15673)
SQL injection in wordpress (CVE-2026-15673). Confidential information can be exposed externally.
CVE-2026-15014 Vulnerability in wordpress (CVE-2026-15014)
vulnerability in wordpress (CVE-2026-15014). Successful exploitation can lead to full system takeover. Exploitable via ``billing_phone``.
CVE-2026-15671 SQL Injection in wordpress (CVE-2026-15671)
SQL injection in wordpress (CVE-2026-15671). Confidential information can be exposed externally.
CVE-2026-11756 Unsafe Deserialization in deserialization (CVE-2026-11756)
vulnerability in deserialization (CVE-2026-11756). Successful exploitation can lead to full system takeover.
CVE-2026-15670 SQL Injection in wordpress (CVE-2026-15670)
SQL injection in wordpress (CVE-2026-15670). Confidential information can be exposed externally.
CVE-2026-14516 SQL Injection in wordpress (CVE-2026-14516)
SQL injection in wordpress (CVE-2026-14516). Confidential information can be exposed externally.
CVE-2026-14171 Open Redirect in CVE-2026-14171 (CVE-2026-14171)
vulnerability in CVE-2026-14171 (CVE-2026-14171). Risk of unauthorized operations or information disclosure.
CVE-2026-12741 SQL Injection in wordpress (CVE-2026-12741)
SQL injection in wordpress (CVE-2026-12741). Confidential information can be exposed externally.
CVE-2026-12800 SQL Injection in wordpress (CVE-2026-12800)
SQL injection in wordpress (CVE-2026-12800). Confidential information can be exposed externally. Exploitable via `POST /wp-json/wpdmpp/v1/cart/coupon`.
CVE-2026-55977 Vulnerability in CVE-2026-55977 (CVE-2026-55977)
vulnerability in CVE-2026-55977 (CVE-2026-55977). Risk of unauthorized operations or information disclosure.
CVE-2024-14041 Vulnerability in bouncycastle (CVE-2024-14041)
vulnerability in bouncycastle (CVE-2024-14041). Confidential information can be exposed externally.
CVE-2026-44387 Cross-Site Scripting (XSS) in jvn (CVE-2026-44387)
cross-site scripting in jvn (CVE-2026-44387). Risk of unauthorized operations or information disclosure.
CVE-2026-6251 SQL Injection in wordpress (CVE-2026-6251)
SQL injection in wordpress (CVE-2026-6251). Confidential information can be exposed externally.
CVE-2026-16811 SQL Injection in wordpress (CVE-2026-16811)
SQL injection in wordpress (CVE-2026-16811). Confidential information can be exposed externally.
CVE-2026-16797 Vulnerability in wordpress (CVE-2026-16797)
vulnerability in wordpress (CVE-2026-16797). Risk of unauthorized operations or information disclosure.
CVE-2026-16587 Vulnerability in wordpress (CVE-2026-16587)
vulnerability in wordpress (CVE-2026-16587). Risk of unauthorized operations or information disclosure.
CVE-2026-16585 Path Traversal in wordpress (CVE-2026-16585)
path traversal in wordpress (CVE-2026-16585). Successful exploitation can lead to full system takeover.
CVE-2026-15136 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-15136)
vulnerability in wordpress (CVE-2026-15136). Risk of unauthorized operations or information disclosure.
CVE-2026-15012 Information Disclosure in wordpress (CVE-2026-15012)
vulnerability in wordpress (CVE-2026-15012). Risk of unauthorized operations or information disclosure.
CVE-2026-14926 Vulnerability in wordpress (CVE-2026-14926)
vulnerability in wordpress (CVE-2026-14926). Risk of unauthorized operations or information disclosure.
CVE-2026-14924 Vulnerability in wordpress (CVE-2026-14924)
vulnerability in wordpress (CVE-2026-14924). Data can be tampered with by attackers.
CVE-2026-14870 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14870)
cross-site scripting in wordpress (CVE-2026-14870). Risk of unauthorized operations or information disclosure.
CVE-2026-14821 Vulnerability in wordpress (CVE-2026-14821)
vulnerability in wordpress (CVE-2026-14821). Risk of unauthorized operations or information disclosure.
CVE-2026-14819 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14819)
cross-site scripting in wordpress (CVE-2026-14819). Risk of unauthorized operations or information disclosure.
CVE-2026-14545 Privilege Escalation in wordpress (CVE-2026-14545)
vulnerability in wordpress (CVE-2026-14545). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →