Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-7529 |
|
Vulnerability in wordpress (CVE-2026-7529)
vulnerability in wordpress (CVE-2026-7529). Data can be tampered with by attackers.
|
| CVE-2026-7456 |
|
Vulnerability in wordpress (CVE-2026-7456)
vulnerability in wordpress (CVE-2026-7456). Data can be tampered with by attackers.
|
| CVE-2026-71264 |
|
Vulnerability in cpp (CVE-2026-71264)
vulnerability in cpp (CVE-2026-71264). Data can be tampered with by attackers. Exploitable via `GET /json/cfg`.
|
| CVE-2026-71252 |
|
Vulnerability in CVE-2026-71252 (CVE-2026-71252)
vulnerability in CVE-2026-71252 (CVE-2026-71252). Data can be tampered with by attackers.
|
| CVE-2026-7105 |
|
Vulnerability in wordpress (CVE-2026-7105)
vulnerability in wordpress (CVE-2026-7105). Risk of unauthorized operations or information disclosure. Exploitable via ``xpro_content``.
|
| CVE-2026-7520 |
|
The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to unauthorized modification...
The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to unauthorized modification...
|
| CVE-2026-7726 |
|
Vulnerability in wordpress (CVE-2026-7726)
vulnerability in wordpress (CVE-2026-7726). Risk of unauthorized operations or information disclosure. Exploitable via ``wp_ajax_nopriv_handle_sync``.
|
| CVE-2026-6639 |
|
Vulnerability in wordpress (CVE-2026-6639)
vulnerability in wordpress (CVE-2026-6639). Confidential information can be exposed externally. Exploitable via ``wp_ajax_nopriv_``.
|
| CVE-2026-6627 |
|
The WPFormify – Stripe Payments with Form and Checkout plugin for WordPress is vulnerable to...
The WPFormify – Stripe Payments with Form and Checkout plugin for WordPress is vulnerable to...
|
| CVE-2026-6079 |
|
Vulnerability in wordpress (CVE-2026-6079)
vulnerability in wordpress (CVE-2026-6079). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5581 |
|
Vulnerability in wordpress (CVE-2026-5581)
vulnerability in wordpress (CVE-2026-5581). Data can be tampered with by attackers. Exploitable via ``wp_ajax_nopriv_gfmu_delete_file``.
|
| CVE-2026-54418 |
|
Leantime through 3.6.2 exposes the JSON-RPC methods leantime.rpc.TwoFA.TwoFA.getSetupData,...
Leantime through 3.6.2 exposes the JSON-RPC methods leantime.rpc.TwoFA.TwoFA.getSetupData,...
|
| CVE-2026-4431 |
|
Vulnerability in wordpress (CVE-2026-4431)
vulnerability in wordpress (CVE-2026-4431). Data can be tampered with by attackers. Exploitable via ``rbsm_submit_post``.
|
| CVE-2026-12000 |
|
Vulnerability in wordpress (CVE-2026-12000)
vulnerability in wordpress (CVE-2026-12000). Confidential information can be exposed externally.
|
| CVE-2026-16605 |
|
Vulnerability in wordpress (CVE-2026-16605)
vulnerability in wordpress (CVE-2026-16605). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16561 |
|
Vulnerability in wordpress (CVE-2026-16561)
vulnerability in wordpress (CVE-2026-16561). Confidential information can be exposed externally.
|
| CVE-2026-7753 |
|
Vulnerability in wordpress (CVE-2026-7753)
vulnerability in wordpress (CVE-2026-7753). Confidential information can be exposed externally. Exploitable via ``ccb_export_nonce``.
|
| CVE-2026-8761 |
|
Vulnerability in wordpress (CVE-2026-8761)
vulnerability in wordpress (CVE-2026-8761). Successful exploitation can lead to full system takeover. Exploitable via ``CustomersController``.
|
| CVE-2026-18819 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-18819)
vulnerability in csrf (CVE-2026-18819). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-70619 |
|
Vulnerability in CVE-2026-70619 (CVE-2026-70619)
vulnerability in CVE-2026-70619 (CVE-2026-70619). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13227 |
|
Vulnerability in CVE-2026-13227 (CVE-2026-13227)
vulnerability in CVE-2026-13227 (CVE-2026-13227). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-70494 |
|
Vulnerability in open-webui (CVE-2026-70494)
vulnerability in open-webui (CVE-2026-70494). Data can be tampered with by attackers. Exploitable via `DELETE /api/v1/folders/{id}`. Mitigation: upgrade to `0.11.0` or later.
|
| CVE-2026-70487 |
|
Vulnerability in open-webui (CVE-2026-70487)
vulnerability in open-webui (CVE-2026-70487). Confidential information can be exposed externally. Exploitable via ``builtin_tools``. Mitigation: upgrade to `0.11.0` or later.
|
| CVE-2026-70484 |
|
Vulnerability in open-webui (CVE-2026-70484)
vulnerability in open-webui (CVE-2026-70484). Risk of unauthorized operations or information disclosure. Exploitable via ``features.image_generation``. Mitigation: upgrade to `897d69a` or later.
|
| CVE-2026-70483 |
|
Vulnerability in open-webui (CVE-2026-70483)
vulnerability in open-webui (CVE-2026-70483). Risk of unauthorized operations or information disclosure. Exploitable via `DELETE /api/v1/chats/{id}`. Mitigation: upgrade to `0.11.0` or later.
|
| CVE-2026-70481 |
|
Vulnerability in open-webui (CVE-2026-70481)
vulnerability in open-webui (CVE-2026-70481). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/channels/{id}/messages/{message_id}/update`. Mitigation: upgrade to `0.11.0` or later.
|
| CVE-2026-70475 |
|
Vulnerability in flowise (CVE-2026-70475)
vulnerability in flowise (CVE-2026-70475). Risk of unauthorized operations or information disclosure. Exploitable via `PUT /api/v1/executions/`. Mitigation: upgrade to `3.1.3` or later.
|
| CVE-2026-13229 |
|
Vulnerability in CVE-2026-13229 (CVE-2026-13229)
vulnerability in CVE-2026-13229 (CVE-2026-13229). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-70473 |
|
Information Disclosure in flowise (CVE-2026-70473)
vulnerability in flowise (CVE-2026-70473). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/v1/upsert-history`. Mitigation: upgrade to `3.1.3` or later.
|
| CVE-2026-18650 |
|
Vulnerability in privilege-escalation (CVE-2026-18650)
vulnerability in privilege-escalation (CVE-2026-18650). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17070 |
|
Vulnerability in CVE-2026-17070 (CVE-2026-17070)
vulnerability in CVE-2026-17070 (CVE-2026-17070). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58080 |
|
Vulnerability in eclipse (CVE-2026-58080)
vulnerability in eclipse (CVE-2026-58080). Data can be tampered with by attackers. Exploitable via ``RoleMapper``.
|
| CVE-2026-63248 |
|
Vulnerability in eclipse (CVE-2026-63248)
vulnerability in eclipse (CVE-2026-63248). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-69252 |
|
Vulnerability in flowise (CVE-2026-69252)
vulnerability in flowise (CVE-2026-69252). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/v1/files`. Mitigation: upgrade to `3.1.3` or later.
|
| CVE-2026-16546 |
|
Vulnerability in wordpress (CVE-2026-16546)
vulnerability in wordpress (CVE-2026-16546). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16056 |
|
Vulnerability in wordpress (CVE-2026-16056)
vulnerability in wordpress (CVE-2026-16056). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16035 |
|
Vulnerability in wordpress (CVE-2026-16035)
vulnerability in wordpress (CVE-2026-16035). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15958 |
|
Vulnerability in wordpress (CVE-2026-15958)
vulnerability in wordpress (CVE-2026-15958). Confidential information can be exposed externally.
|
| CVE-2026-66326 |
|
Vulnerability in microsoft (CVE-2026-66326)
vulnerability in microsoft (CVE-2026-66326). Data can be tampered with by attackers.
|
| CVE-2026-66311 |
|
Vulnerability in microsoft (CVE-2026-66311)
vulnerability in microsoft (CVE-2026-66311). Confidential information can be exposed externally.
|
| CVE-2026-67616 |
|
Vulnerability in CVE-2026-67616 (CVE-2026-67616)
vulnerability in CVE-2026-67616 (CVE-2026-67616). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-68979 |
|
Vulnerability in apache (CVE-2026-68979)
vulnerability in apache (CVE-2026-68979). Successful exploitation can lead to full system takeover.
|
| CVE-2026-69090 |
|
Vulnerability in CVE-2026-69090 (CVE-2026-69090)
vulnerability in CVE-2026-69090 (CVE-2026-69090). Data can be tampered with by attackers.
|
| CVE-2026-68587 |
|
Vulnerability in CVE-2026-68587 (CVE-2026-68587)
vulnerability in CVE-2026-68587 (CVE-2026-68587). Confidential information can be exposed externally.
|
| CVE-2026-68586 |
|
Vulnerability in CVE-2026-68586 (CVE-2026-68586)
vulnerability in CVE-2026-68586 (CVE-2026-68586). Confidential information can be exposed externally.
|
| CVE-2026-68585 |
|
Vulnerability in CVE-2026-68585 (CVE-2026-68585)
vulnerability in CVE-2026-68585 (CVE-2026-68585). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-28147 |
|
Vulnerability in CVE-2026-28147 (CVE-2026-28147)
vulnerability in CVE-2026-28147 (CVE-2026-28147). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16289 |
|
Vulnerability in wordpress (CVE-2026-16289)
vulnerability in wordpress (CVE-2026-16289). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16274 |
|
Vulnerability in wordpress (CVE-2026-16274)
vulnerability in wordpress (CVE-2026-16274). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16276 |
|
Vulnerability in wordpress (CVE-2026-16276)
vulnerability in wordpress (CVE-2026-16276). Risk of unauthorized operations or information disclosure.
|