Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: wordpress Clear
ID Title
CVE-2026-6627 The WPFormify – Stripe Payments with Form and Checkout plugin for WordPress is vulnerable to...
The WPFormify – Stripe Payments with Form and Checkout plugin for WordPress is vulnerable to...
CVE-2026-6639 Vulnerability in wordpress (CVE-2026-6639)
vulnerability in wordpress (CVE-2026-6639). Confidential information can be exposed externally. Exploitable via ``wp_ajax_nopriv_``.
CVE-2026-6972 Cross-Site Scripting (XSS) in wordpress (CVE-2026-6972)
cross-site scripting in wordpress (CVE-2026-6972). Risk of unauthorized operations or information disclosure. Exploitable via ``chart_size``.
CVE-2026-6020 Vulnerability in wordpress (CVE-2026-6020)
vulnerability in wordpress (CVE-2026-6020). Successful exploitation can lead to full system takeover.
CVE-2026-6079 Vulnerability in wordpress (CVE-2026-6079)
vulnerability in wordpress (CVE-2026-6079). Risk of unauthorized operations or information disclosure.
CVE-2026-5581 Vulnerability in wordpress (CVE-2026-5581)
vulnerability in wordpress (CVE-2026-5581). Data can be tampered with by attackers. Exploitable via ``wp_ajax_nopriv_gfmu_delete_file``.
CVE-2026-5651 SQL Injection in wordpress (CVE-2026-5651)
SQL injection in wordpress (CVE-2026-5651). Confidential information can be exposed externally.
CVE-2026-5108 Cross-Site Scripting (XSS) in wordpress (CVE-2026-5108)
cross-site scripting in wordpress (CVE-2026-5108). Risk of unauthorized operations or information disclosure. Exploitable via ``innerHTML``.
CVE-2026-5116 Cross-Site Scripting (XSS) in wordpress (CVE-2026-5116)
cross-site scripting in wordpress (CVE-2026-5116). Risk of unauthorized operations or information disclosure.
CVE-2026-4431 Vulnerability in wordpress (CVE-2026-4431)
vulnerability in wordpress (CVE-2026-4431). Data can be tampered with by attackers. Exploitable via ``rbsm_submit_post``.
CVE-2026-17532 Cross-Site Scripting (XSS) in wordpress (CVE-2026-17532)
cross-site scripting in wordpress (CVE-2026-17532). Risk of unauthorized operations or information disclosure.
CVE-2026-18881 SQL Injection in wordpress (CVE-2026-18881)
SQL injection in wordpress (CVE-2026-18881). Confidential information can be exposed externally. Exploitable via ``tableon_get_table_data``.
CVE-2026-17505 Cross-Site Scripting (XSS) in wordpress (CVE-2026-17505)
cross-site scripting in wordpress (CVE-2026-17505). Risk of unauthorized operations or information disclosure.
CVE-2026-11969 SQL Injection in wordpress (CVE-2026-11969)
SQL injection in wordpress (CVE-2026-11969). Confidential information can be exposed externally.
CVE-2026-11977 SQL Injection in wordpress (CVE-2026-11977)
SQL injection in wordpress (CVE-2026-11977). Confidential information can be exposed externally.
CVE-2026-12000 Vulnerability in wordpress (CVE-2026-12000)
vulnerability in wordpress (CVE-2026-12000). Confidential information can be exposed externally.
CVE-2026-15281 SQL Injection in wordpress (CVE-2026-15281)
SQL injection in wordpress (CVE-2026-15281). Confidential information can be exposed externally.
CVE-2026-11920 SQL Injection in wordpress (CVE-2026-11920)
SQL injection in wordpress (CVE-2026-11920). Confidential information can be exposed externally.
CVE-2026-11454 Vulnerability in wordpress (CVE-2026-11454)
vulnerability in wordpress (CVE-2026-11454). Confidential information can be exposed externally. Exploitable via `GET /wp-json/gh/v4/contacts/`.
CVE-2026-17515 Information Disclosure in wordpress (CVE-2026-17515)
vulnerability in wordpress (CVE-2026-17515). Risk of unauthorized operations or information disclosure.
CVE-2026-16993 Information Disclosure in wordpress (CVE-2026-16993)
vulnerability in wordpress (CVE-2026-16993). Risk of unauthorized operations or information disclosure.
CVE-2026-16604 Information Disclosure in wordpress (CVE-2026-16604)
vulnerability in wordpress (CVE-2026-16604). Confidential information can be exposed externally.
CVE-2026-16603 Information Disclosure in wordpress (CVE-2026-16603)
vulnerability in wordpress (CVE-2026-16603). Confidential information can be exposed externally.
CVE-2026-16613 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-16613)
vulnerability in wordpress (CVE-2026-16613). Risk of unauthorized operations or information disclosure.
CVE-2026-16736 Vulnerability in wordpress (CVE-2026-16736)
vulnerability in wordpress (CVE-2026-16736). Confidential information can be exposed externally.
CVE-2026-16746 Vulnerability in wordpress (CVE-2026-16746)
vulnerability in wordpress (CVE-2026-16746). Risk of unauthorized operations or information disclosure.
CVE-2026-16940 Path Traversal in wordpress (CVE-2026-16940)
path traversal in wordpress (CVE-2026-16940). Data can be tampered with by attackers.
CVE-2026-16942 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16942)
cross-site scripting in wordpress (CVE-2026-16942). Risk of unauthorized operations or information disclosure.
CVE-2026-16968 Information Disclosure in wordpress (CVE-2026-16968)
vulnerability in wordpress (CVE-2026-16968). Confidential information can be exposed externally.
CVE-2026-16981 Vulnerability in wordpress (CVE-2026-16981)
vulnerability in wordpress (CVE-2026-16981). Risk of unauthorized operations or information disclosure.
CVE-2026-16605 Vulnerability in wordpress (CVE-2026-16605)
vulnerability in wordpress (CVE-2026-16605). Successful exploitation can lead to full system takeover.
CVE-2026-16573 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16573)
cross-site scripting in wordpress (CVE-2026-16573). Successful exploitation can lead to full system takeover.
CVE-2026-16055 Authentication Bypass in wordpress (CVE-2026-16055)
authentication bypass in wordpress (CVE-2026-16055). Successful exploitation can lead to full system takeover.
CVE-2026-16561 Vulnerability in wordpress (CVE-2026-16561)
vulnerability in wordpress (CVE-2026-16561). Confidential information can be exposed externally.
CVE-2026-16036 Authentication Bypass in wordpress (CVE-2026-16036)
authentication bypass in wordpress (CVE-2026-16036). Risk of unauthorized operations or information disclosure.
CVE-2026-15360 SQL Injection in wordpress (CVE-2026-15360)
SQL injection in wordpress (CVE-2026-15360). Confidential information can be exposed externally.
CVE-2026-15372 Authentication Bypass in wordpress (CVE-2026-15372)
authentication bypass in wordpress (CVE-2026-15372). Confidential information can be exposed externally.
CVE-2026-15230 Vulnerability in wordpress (CVE-2026-15230)
vulnerability in wordpress (CVE-2026-15230). Confidential information can be exposed externally.
CVE-2026-16583 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16583)
cross-site scripting in wordpress (CVE-2026-16583). Risk of unauthorized operations or information disclosure.
CVE-2026-16602 Information Disclosure in wordpress (CVE-2026-16602)
vulnerability in wordpress (CVE-2026-16602). Confidential information can be exposed externally.
CVE-2026-15210 Authentication Bypass in wordpress (CVE-2026-15210)
authentication bypass in wordpress (CVE-2026-15210). Confidential information can be exposed externally.
CVE-2026-14553 Unrestricted File Upload in wordpress (CVE-2026-14553)
vulnerability in wordpress (CVE-2026-14553). Confidential information can be exposed externally.
CVE-2025-15677 Cross-Site Scripting (XSS) in wordpress (CVE-2025-15677)
cross-site scripting in wordpress (CVE-2025-15677). Risk of unauthorized operations or information disclosure.
CVE-2026-8761 Vulnerability in wordpress (CVE-2026-8761)
vulnerability in wordpress (CVE-2026-8761). Successful exploitation can lead to full system takeover. Exploitable via ``CustomersController``.
CVE-2026-7753 Vulnerability in wordpress (CVE-2026-7753)
vulnerability in wordpress (CVE-2026-7753). Confidential information can be exposed externally. Exploitable via ``ccb_export_nonce``.
CVE-2026-9273 Vulnerability in wordpress (CVE-2026-9273)
vulnerability in wordpress (CVE-2026-9273). Confidential information can be exposed externally.
CVE-2026-8790 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8790)
cross-site scripting in wordpress (CVE-2026-8790). Risk of unauthorized operations or information disclosure. Exploitable via ``shouttext``.
CVE-2026-5062 SQL Injection in wordpress (CVE-2026-5062)
SQL injection in wordpress (CVE-2026-5062). Confidential information can be exposed externally.
CVE-2026-15941 SQL Injection in wordpress (CVE-2026-15941)
SQL injection in wordpress (CVE-2026-15941). Confidential information can be exposed externally. Exploitable via ``edit_posts``.
CVE-2026-16143 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16143)
cross-site scripting in wordpress (CVE-2026-16143). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →