Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: cwe-862 Clear
ID Title
CVE-2026-7529 Vulnerability in wordpress (CVE-2026-7529)
vulnerability in wordpress (CVE-2026-7529). Data can be tampered with by attackers.
CVE-2026-7456 Vulnerability in wordpress (CVE-2026-7456)
vulnerability in wordpress (CVE-2026-7456). Data can be tampered with by attackers.
CVE-2026-71264 Vulnerability in cpp (CVE-2026-71264)
vulnerability in cpp (CVE-2026-71264). Data can be tampered with by attackers. Exploitable via `GET /json/cfg`.
CVE-2026-71252 Vulnerability in CVE-2026-71252 (CVE-2026-71252)
vulnerability in CVE-2026-71252 (CVE-2026-71252). Data can be tampered with by attackers.
CVE-2026-7105 Vulnerability in wordpress (CVE-2026-7105)
vulnerability in wordpress (CVE-2026-7105). Risk of unauthorized operations or information disclosure. Exploitable via ``xpro_content``.
CVE-2026-7520 The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to unauthorized modification...
The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to unauthorized modification...
CVE-2026-7726 Vulnerability in wordpress (CVE-2026-7726)
vulnerability in wordpress (CVE-2026-7726). Risk of unauthorized operations or information disclosure. Exploitable via ``wp_ajax_nopriv_handle_sync``.
CVE-2026-6639 Vulnerability in wordpress (CVE-2026-6639)
vulnerability in wordpress (CVE-2026-6639). Confidential information can be exposed externally. Exploitable via ``wp_ajax_nopriv_``.
CVE-2026-6627 The WPFormify – Stripe Payments with Form and Checkout plugin for WordPress is vulnerable to...
The WPFormify – Stripe Payments with Form and Checkout plugin for WordPress is vulnerable to...
CVE-2026-6079 Vulnerability in wordpress (CVE-2026-6079)
vulnerability in wordpress (CVE-2026-6079). Risk of unauthorized operations or information disclosure.
CVE-2026-5581 Vulnerability in wordpress (CVE-2026-5581)
vulnerability in wordpress (CVE-2026-5581). Data can be tampered with by attackers. Exploitable via ``wp_ajax_nopriv_gfmu_delete_file``.
CVE-2026-54418 Leantime through 3.6.2 exposes the JSON-RPC methods leantime.rpc.TwoFA.TwoFA.getSetupData,...
Leantime through 3.6.2 exposes the JSON-RPC methods leantime.rpc.TwoFA.TwoFA.getSetupData,...
CVE-2026-4431 Vulnerability in wordpress (CVE-2026-4431)
vulnerability in wordpress (CVE-2026-4431). Data can be tampered with by attackers. Exploitable via ``rbsm_submit_post``.
CVE-2026-12000 Vulnerability in wordpress (CVE-2026-12000)
vulnerability in wordpress (CVE-2026-12000). Confidential information can be exposed externally.
CVE-2026-16605 Vulnerability in wordpress (CVE-2026-16605)
vulnerability in wordpress (CVE-2026-16605). Successful exploitation can lead to full system takeover.
CVE-2026-16561 Vulnerability in wordpress (CVE-2026-16561)
vulnerability in wordpress (CVE-2026-16561). Confidential information can be exposed externally.
CVE-2026-7753 Vulnerability in wordpress (CVE-2026-7753)
vulnerability in wordpress (CVE-2026-7753). Confidential information can be exposed externally. Exploitable via ``ccb_export_nonce``.
CVE-2026-8761 Vulnerability in wordpress (CVE-2026-8761)
vulnerability in wordpress (CVE-2026-8761). Successful exploitation can lead to full system takeover. Exploitable via ``CustomersController``.
CVE-2026-18819 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-18819)
vulnerability in csrf (CVE-2026-18819). Risk of unauthorized operations or information disclosure.
CVE-2026-70619 Vulnerability in CVE-2026-70619 (CVE-2026-70619)
vulnerability in CVE-2026-70619 (CVE-2026-70619). Successful exploitation can lead to full system takeover.
CVE-2026-13227 Vulnerability in CVE-2026-13227 (CVE-2026-13227)
vulnerability in CVE-2026-13227 (CVE-2026-13227). Risk of unauthorized operations or information disclosure.
CVE-2026-70494 Vulnerability in open-webui (CVE-2026-70494)
vulnerability in open-webui (CVE-2026-70494). Data can be tampered with by attackers. Exploitable via `DELETE /api/v1/folders/{id}`. Mitigation: upgrade to `0.11.0` or later.
CVE-2026-70487 Vulnerability in open-webui (CVE-2026-70487)
vulnerability in open-webui (CVE-2026-70487). Confidential information can be exposed externally. Exploitable via ``builtin_tools``. Mitigation: upgrade to `0.11.0` or later.
CVE-2026-70484 Vulnerability in open-webui (CVE-2026-70484)
vulnerability in open-webui (CVE-2026-70484). Risk of unauthorized operations or information disclosure. Exploitable via ``features.image_generation``. Mitigation: upgrade to `897d69a` or later.
CVE-2026-70483 Vulnerability in open-webui (CVE-2026-70483)
vulnerability in open-webui (CVE-2026-70483). Risk of unauthorized operations or information disclosure. Exploitable via `DELETE /api/v1/chats/{id}`. Mitigation: upgrade to `0.11.0` or later.
CVE-2026-70481 Vulnerability in open-webui (CVE-2026-70481)
vulnerability in open-webui (CVE-2026-70481). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/channels/{id}/messages/{message_id}/update`. Mitigation: upgrade to `0.11.0` or later.
CVE-2026-70475 Vulnerability in flowise (CVE-2026-70475)
vulnerability in flowise (CVE-2026-70475). Risk of unauthorized operations or information disclosure. Exploitable via `PUT /api/v1/executions/`. Mitigation: upgrade to `3.1.3` or later.
CVE-2026-13229 Vulnerability in CVE-2026-13229 (CVE-2026-13229)
vulnerability in CVE-2026-13229 (CVE-2026-13229). Risk of unauthorized operations or information disclosure.
CVE-2026-70473 Information Disclosure in flowise (CVE-2026-70473)
vulnerability in flowise (CVE-2026-70473). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/v1/upsert-history`. Mitigation: upgrade to `3.1.3` or later.
CVE-2026-18650 Vulnerability in privilege-escalation (CVE-2026-18650)
vulnerability in privilege-escalation (CVE-2026-18650). Successful exploitation can lead to full system takeover.
CVE-2026-17070 Vulnerability in CVE-2026-17070 (CVE-2026-17070)
vulnerability in CVE-2026-17070 (CVE-2026-17070). Successful exploitation can lead to full system takeover.
CVE-2026-58080 Vulnerability in eclipse (CVE-2026-58080)
vulnerability in eclipse (CVE-2026-58080). Data can be tampered with by attackers. Exploitable via ``RoleMapper``.
CVE-2026-63248 Vulnerability in eclipse (CVE-2026-63248)
vulnerability in eclipse (CVE-2026-63248). Risk of unauthorized operations or information disclosure.
CVE-2026-69252 Vulnerability in flowise (CVE-2026-69252)
vulnerability in flowise (CVE-2026-69252). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/v1/files`. Mitigation: upgrade to `3.1.3` or later.
CVE-2026-16546 Vulnerability in wordpress (CVE-2026-16546)
vulnerability in wordpress (CVE-2026-16546). Risk of unauthorized operations or information disclosure.
CVE-2026-16056 Vulnerability in wordpress (CVE-2026-16056)
vulnerability in wordpress (CVE-2026-16056). Risk of unauthorized operations or information disclosure.
CVE-2026-16035 Vulnerability in wordpress (CVE-2026-16035)
vulnerability in wordpress (CVE-2026-16035). Risk of unauthorized operations or information disclosure.
CVE-2026-15958 Vulnerability in wordpress (CVE-2026-15958)
vulnerability in wordpress (CVE-2026-15958). Confidential information can be exposed externally.
CVE-2026-66326 Vulnerability in microsoft (CVE-2026-66326)
vulnerability in microsoft (CVE-2026-66326). Data can be tampered with by attackers.
CVE-2026-66311 Vulnerability in microsoft (CVE-2026-66311)
vulnerability in microsoft (CVE-2026-66311). Confidential information can be exposed externally.
CVE-2026-67616 Vulnerability in CVE-2026-67616 (CVE-2026-67616)
vulnerability in CVE-2026-67616 (CVE-2026-67616). Risk of unauthorized operations or information disclosure.
CVE-2026-68979 Vulnerability in apache (CVE-2026-68979)
vulnerability in apache (CVE-2026-68979). Successful exploitation can lead to full system takeover.
CVE-2026-69090 Vulnerability in CVE-2026-69090 (CVE-2026-69090)
vulnerability in CVE-2026-69090 (CVE-2026-69090). Data can be tampered with by attackers.
CVE-2026-68587 Vulnerability in CVE-2026-68587 (CVE-2026-68587)
vulnerability in CVE-2026-68587 (CVE-2026-68587). Confidential information can be exposed externally.
CVE-2026-68586 Vulnerability in CVE-2026-68586 (CVE-2026-68586)
vulnerability in CVE-2026-68586 (CVE-2026-68586). Confidential information can be exposed externally.
CVE-2026-68585 Vulnerability in CVE-2026-68585 (CVE-2026-68585)
vulnerability in CVE-2026-68585 (CVE-2026-68585). Risk of unauthorized operations or information disclosure.
CVE-2026-28147 Vulnerability in CVE-2026-28147 (CVE-2026-28147)
vulnerability in CVE-2026-28147 (CVE-2026-28147). Risk of unauthorized operations or information disclosure.
CVE-2026-16289 Vulnerability in wordpress (CVE-2026-16289)
vulnerability in wordpress (CVE-2026-16289). Risk of unauthorized operations or information disclosure.
CVE-2026-16274 Vulnerability in wordpress (CVE-2026-16274)
vulnerability in wordpress (CVE-2026-16274). Risk of unauthorized operations or information disclosure.
CVE-2026-16276 Vulnerability in wordpress (CVE-2026-16276)
vulnerability in wordpress (CVE-2026-16276). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →