Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-32552 |
|
Subscriber SQL Injection in YITH WooCommerce Membership Premium <= 2.33.0 versions.
Subscriber SQL Injection in YITH WooCommerce Membership Premium <= 2.33.0 versions.
|
| CVE-2026-75589 |
|
Vulnerability in CVE-2026-75589 (CVE-2026-75589)
vulnerability in CVE-2026-75589 (CVE-2026-75589). Confidential information can be exposed externally.
|
| CVE-2026-58088 |
|
Vulnerability in privilege-escalation (CVE-2026-58088)
vulnerability in privilege-escalation (CVE-2026-58088). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58087 |
|
Out-of-Bounds Read in privilege-escalation (CVE-2026-58087)
vulnerability in privilege-escalation (CVE-2026-58087). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58086 |
|
Vulnerability in CVE-2026-58086 (CVE-2026-58086)
vulnerability in CVE-2026-58086 (CVE-2026-58086). Data can be tampered with by attackers.
|
| CVE-2026-58085 |
|
Vulnerability in CVE-2026-58085 (CVE-2026-58085)
vulnerability in CVE-2026-58085 (CVE-2026-58085). Data can be tampered with by attackers.
|
| CVE-2026-58083 |
|
Use-After-Free in privilege-escalation (CVE-2026-58083)
vulnerability in privilege-escalation (CVE-2026-58083). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75981 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-75981)
cross-site scripting in wordpress (CVE-2026-75981). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15780 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15780)
cross-site scripting in wordpress (CVE-2026-15780). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49430 |
|
Vulnerability in CVE-2026-49430 (CVE-2026-49430)
vulnerability in CVE-2026-49430 (CVE-2026-49430). Successful exploitation can lead to full system takeover.
|
| CVE-2026-49428 |
|
Vulnerability in CVE-2026-49428 (CVE-2026-49428)
vulnerability in CVE-2026-49428 (CVE-2026-49428). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19842 |
|
Authentication Bypass in wordpress (CVE-2026-19842)
authentication bypass in wordpress (CVE-2026-19842). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19055 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-19055)
cross-site scripting in wordpress (CVE-2026-19055). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17565 |
|
SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-17565)
SSRF in wordpress (CVE-2026-17565). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19056 |
|
Cross-Site Scripting (XSS) in c (CVE-2026-19056)
cross-site scripting in c (CVE-2026-19056). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16570 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16570)
cross-site scripting in wordpress (CVE-2026-16570). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14861 |
|
Vulnerability in wordpress (CVE-2026-14861)
vulnerability in wordpress (CVE-2026-14861). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16950 |
|
SQL Injection in wordpress (CVE-2026-16950)
SQL injection in wordpress (CVE-2026-16950). Confidential information can be exposed externally.
|
| CVE-2026-16617 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16617)
cross-site scripting in wordpress (CVE-2026-16617). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14334 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14334)
cross-site scripting in wordpress (CVE-2026-14334). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16616 |
|
Path Traversal in wordpress (CVE-2026-16616)
path traversal in wordpress (CVE-2026-16616). Confidential information can be exposed externally.
|
| CVE-2026-13174 |
|
Vulnerability in wordpress (CVE-2026-13174)
vulnerability in wordpress (CVE-2026-13174). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12983 |
|
SQL Injection in wordpress (CVE-2026-12983)
SQL injection in wordpress (CVE-2026-12983). Confidential information can be exposed externally.
|
| CVE-2026-11565 |
|
Vulnerability in wordpress (CVE-2026-11565)
vulnerability in wordpress (CVE-2026-11565). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13169 |
|
Vulnerability in wordpress (CVE-2026-13169)
vulnerability in wordpress (CVE-2026-13169). Confidential information can be exposed externally.
|
| CVE-2026-49429 |
|
Vulnerability in CVE-2026-49429 (CVE-2026-49429)
vulnerability in CVE-2026-49429 (CVE-2026-49429). Successful exploitation can lead to full system takeover.
|
| CVE-2026-49427 |
|
Vulnerability in CVE-2026-49427 (CVE-2026-49427)
vulnerability in CVE-2026-49427 (CVE-2026-49427). Successful exploitation can lead to full system takeover.
|
| CVE-2026-49422 |
|
Use-After-Free in CVE-2026-49422 (CVE-2026-49422)
vulnerability in CVE-2026-49422 (CVE-2026-49422). Successful exploitation can lead to full system takeover.
|
| CVE-2026-49421 |
|
Vulnerability in CVE-2026-49421 (CVE-2026-49421)
vulnerability in CVE-2026-49421 (CVE-2026-49421). Data can be tampered with by attackers.
|
| CVE-2026-49420 |
|
Vulnerability in CVE-2026-49420 (CVE-2026-49420)
vulnerability in CVE-2026-49420 (CVE-2026-49420). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70408 |
|
Authorization Flaw in CVE-2026-70408 (CVE-2026-70408)
vulnerability in CVE-2026-70408 (CVE-2026-70408). Successful exploitation can lead to full system takeover.
|
| CVE-2026-49419 |
|
Vulnerability in CVE-2026-49419 (CVE-2026-49419)
vulnerability in CVE-2026-49419 (CVE-2026-49419). Successful exploitation can lead to full system takeover.
|
| CVE-2026-49418 |
|
Use-After-Free in CVE-2026-49418 (CVE-2026-49418)
vulnerability in CVE-2026-49418 (CVE-2026-49418). Successful exploitation can lead to full system takeover.
|
| CVE-2026-49415 |
|
Vulnerability in CVE-2026-49415 (CVE-2026-49415)
vulnerability in CVE-2026-49415 (CVE-2026-49415). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19942 |
|
Path Traversal in wordpress (CVE-2026-19942)
path traversal in wordpress (CVE-2026-19942). Data can be tampered with by attackers.
|
| CVE-2026-76050 |
|
Vulnerability in sqli (CVE-2026-76050)
vulnerability in sqli (CVE-2026-76050). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76049 |
|
Vulnerability in sqli (CVE-2026-76049)
vulnerability in sqli (CVE-2026-76049). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76048 |
|
Vulnerability in sqli (CVE-2026-76048)
vulnerability in sqli (CVE-2026-76048). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75987 |
|
Vulnerability in deserialization (CVE-2026-75987)
vulnerability in deserialization (CVE-2026-75987). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75986 |
|
Vulnerability in sqli (CVE-2026-75986)
vulnerability in sqli (CVE-2026-75986). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75985 |
|
Vulnerability in CVE-2026-75985 (CVE-2026-75985)
vulnerability in CVE-2026-75985 (CVE-2026-75985). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75984 |
|
Vulnerability in CVE-2026-75984 (CVE-2026-75984)
vulnerability in CVE-2026-75984 (CVE-2026-75984). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66602 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-66602)
vulnerability in wordpress (CVE-2026-66602). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53958 |
|
Authentication Bypass in CVE-2026-53958 (CVE-2026-53958)
authentication bypass in CVE-2026-53958 (CVE-2026-53958). Confidential information can be exposed externally. Exploitable via `PATCH /api/users/`.
|
| CVE-2026-52877 |
|
Vulnerability in CVE-2026-52877 (CVE-2026-52877)
vulnerability in CVE-2026-52877 (CVE-2026-52877). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-52876 |
|
Vulnerability in CVE-2026-52876 (CVE-2026-52876)
vulnerability in CVE-2026-52876 (CVE-2026-52876). Successful exploitation can lead to full system takeover.
|
| CVE-2026-52872 |
|
Path Traversal in CVE-2026-52872 (CVE-2026-52872)
path traversal in CVE-2026-52872 (CVE-2026-52872). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.5.0` or later.
|
| CVE-2026-50191 |
|
Authentication Bypass in CVE-2026-50191 (CVE-2026-50191)
authentication bypass in CVE-2026-50191 (CVE-2026-50191). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/register`.
|
| CVE-2026-50186 |
|
Path Traversal in dos (CVE-2026-50186)
path traversal in dos (CVE-2026-50186). Successful exploitation can lead to full system takeover. Exploitable via `GET /exports/`.
|
| CVE-2026-50142 |
|
Vulnerability in CVE-2026-50142 (CVE-2026-50142)
vulnerability in CVE-2026-50142 (CVE-2026-50142). Risk of unauthorized operations or information disclosure.
|