Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-6627 |
|
The WPFormify – Stripe Payments with Form and Checkout plugin for WordPress is vulnerable to...
The WPFormify – Stripe Payments with Form and Checkout plugin for WordPress is vulnerable to...
|
| CVE-2026-6639 |
|
Vulnerability in wordpress (CVE-2026-6639)
vulnerability in wordpress (CVE-2026-6639). Confidential information can be exposed externally. Exploitable via ``wp_ajax_nopriv_``.
|
| CVE-2026-6972 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-6972)
cross-site scripting in wordpress (CVE-2026-6972). Risk of unauthorized operations or information disclosure. Exploitable via ``chart_size``.
|
| CVE-2026-6020 |
|
Vulnerability in wordpress (CVE-2026-6020)
vulnerability in wordpress (CVE-2026-6020). Successful exploitation can lead to full system takeover.
|
| CVE-2026-6079 |
|
Vulnerability in wordpress (CVE-2026-6079)
vulnerability in wordpress (CVE-2026-6079). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5581 |
|
Vulnerability in wordpress (CVE-2026-5581)
vulnerability in wordpress (CVE-2026-5581). Data can be tampered with by attackers. Exploitable via ``wp_ajax_nopriv_gfmu_delete_file``.
|
| CVE-2026-5651 |
|
SQL Injection in wordpress (CVE-2026-5651)
SQL injection in wordpress (CVE-2026-5651). Confidential information can be exposed externally.
|
| CVE-2026-5108 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-5108)
cross-site scripting in wordpress (CVE-2026-5108). Risk of unauthorized operations or information disclosure. Exploitable via ``innerHTML``.
|
| CVE-2026-5116 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-5116)
cross-site scripting in wordpress (CVE-2026-5116). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4431 |
|
Vulnerability in wordpress (CVE-2026-4431)
vulnerability in wordpress (CVE-2026-4431). Data can be tampered with by attackers. Exploitable via ``rbsm_submit_post``.
|
| CVE-2026-17532 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-17532)
cross-site scripting in wordpress (CVE-2026-17532). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18881 |
|
SQL Injection in wordpress (CVE-2026-18881)
SQL injection in wordpress (CVE-2026-18881). Confidential information can be exposed externally. Exploitable via ``tableon_get_table_data``.
|
| CVE-2026-17505 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-17505)
cross-site scripting in wordpress (CVE-2026-17505). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11969 |
|
SQL Injection in wordpress (CVE-2026-11969)
SQL injection in wordpress (CVE-2026-11969). Confidential information can be exposed externally.
|
| CVE-2026-11977 |
|
SQL Injection in wordpress (CVE-2026-11977)
SQL injection in wordpress (CVE-2026-11977). Confidential information can be exposed externally.
|
| CVE-2026-12000 |
|
Vulnerability in wordpress (CVE-2026-12000)
vulnerability in wordpress (CVE-2026-12000). Confidential information can be exposed externally.
|
| CVE-2026-15281 |
|
SQL Injection in wordpress (CVE-2026-15281)
SQL injection in wordpress (CVE-2026-15281). Confidential information can be exposed externally.
|
| CVE-2026-11920 |
|
SQL Injection in wordpress (CVE-2026-11920)
SQL injection in wordpress (CVE-2026-11920). Confidential information can be exposed externally.
|
| CVE-2026-11454 |
|
Vulnerability in wordpress (CVE-2026-11454)
vulnerability in wordpress (CVE-2026-11454). Confidential information can be exposed externally. Exploitable via `GET /wp-json/gh/v4/contacts/`.
|
| CVE-2026-17515 |
|
Information Disclosure in wordpress (CVE-2026-17515)
vulnerability in wordpress (CVE-2026-17515). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16993 |
|
Information Disclosure in wordpress (CVE-2026-16993)
vulnerability in wordpress (CVE-2026-16993). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16604 |
|
Information Disclosure in wordpress (CVE-2026-16604)
vulnerability in wordpress (CVE-2026-16604). Confidential information can be exposed externally.
|
| CVE-2026-16603 |
|
Information Disclosure in wordpress (CVE-2026-16603)
vulnerability in wordpress (CVE-2026-16603). Confidential information can be exposed externally.
|
| CVE-2026-16613 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-16613)
vulnerability in wordpress (CVE-2026-16613). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16736 |
|
Vulnerability in wordpress (CVE-2026-16736)
vulnerability in wordpress (CVE-2026-16736). Confidential information can be exposed externally.
|
| CVE-2026-16746 |
|
Vulnerability in wordpress (CVE-2026-16746)
vulnerability in wordpress (CVE-2026-16746). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16940 |
|
Path Traversal in wordpress (CVE-2026-16940)
path traversal in wordpress (CVE-2026-16940). Data can be tampered with by attackers.
|
| CVE-2026-16942 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16942)
cross-site scripting in wordpress (CVE-2026-16942). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16968 |
|
Information Disclosure in wordpress (CVE-2026-16968)
vulnerability in wordpress (CVE-2026-16968). Confidential information can be exposed externally.
|
| CVE-2026-16981 |
|
Vulnerability in wordpress (CVE-2026-16981)
vulnerability in wordpress (CVE-2026-16981). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16605 |
|
Vulnerability in wordpress (CVE-2026-16605)
vulnerability in wordpress (CVE-2026-16605). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16573 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16573)
cross-site scripting in wordpress (CVE-2026-16573). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16055 |
|
Authentication Bypass in wordpress (CVE-2026-16055)
authentication bypass in wordpress (CVE-2026-16055). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16561 |
|
Vulnerability in wordpress (CVE-2026-16561)
vulnerability in wordpress (CVE-2026-16561). Confidential information can be exposed externally.
|
| CVE-2026-16036 |
|
Authentication Bypass in wordpress (CVE-2026-16036)
authentication bypass in wordpress (CVE-2026-16036). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15360 |
|
SQL Injection in wordpress (CVE-2026-15360)
SQL injection in wordpress (CVE-2026-15360). Confidential information can be exposed externally.
|
| CVE-2026-15372 |
|
Authentication Bypass in wordpress (CVE-2026-15372)
authentication bypass in wordpress (CVE-2026-15372). Confidential information can be exposed externally.
|
| CVE-2026-15230 |
|
Vulnerability in wordpress (CVE-2026-15230)
vulnerability in wordpress (CVE-2026-15230). Confidential information can be exposed externally.
|
| CVE-2026-16583 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16583)
cross-site scripting in wordpress (CVE-2026-16583). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16602 |
|
Information Disclosure in wordpress (CVE-2026-16602)
vulnerability in wordpress (CVE-2026-16602). Confidential information can be exposed externally.
|
| CVE-2026-15210 |
|
Authentication Bypass in wordpress (CVE-2026-15210)
authentication bypass in wordpress (CVE-2026-15210). Confidential information can be exposed externally.
|
| CVE-2026-14553 |
|
Unrestricted File Upload in wordpress (CVE-2026-14553)
vulnerability in wordpress (CVE-2026-14553). Confidential information can be exposed externally.
|
| CVE-2025-15677 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2025-15677)
cross-site scripting in wordpress (CVE-2025-15677). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8761 |
|
Vulnerability in wordpress (CVE-2026-8761)
vulnerability in wordpress (CVE-2026-8761). Successful exploitation can lead to full system takeover. Exploitable via ``CustomersController``.
|
| CVE-2026-7753 |
|
Vulnerability in wordpress (CVE-2026-7753)
vulnerability in wordpress (CVE-2026-7753). Confidential information can be exposed externally. Exploitable via ``ccb_export_nonce``.
|
| CVE-2026-9273 |
|
Vulnerability in wordpress (CVE-2026-9273)
vulnerability in wordpress (CVE-2026-9273). Confidential information can be exposed externally.
|
| CVE-2026-8790 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-8790)
cross-site scripting in wordpress (CVE-2026-8790). Risk of unauthorized operations or information disclosure. Exploitable via ``shouttext``.
|
| CVE-2026-5062 |
|
SQL Injection in wordpress (CVE-2026-5062)
SQL injection in wordpress (CVE-2026-5062). Confidential information can be exposed externally.
|
| CVE-2026-15941 |
|
SQL Injection in wordpress (CVE-2026-15941)
SQL injection in wordpress (CVE-2026-15941). Confidential information can be exposed externally. Exploitable via ``edit_posts``.
|
| CVE-2026-16143 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16143)
cross-site scripting in wordpress (CVE-2026-16143). Risk of unauthorized operations or information disclosure.
|