Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-6251 |
|
SQL Injection in wordpress (CVE-2026-6251)
SQL injection in wordpress (CVE-2026-6251). Confidential information can be exposed externally.
|
| CVE-2026-16811 |
|
SQL Injection in wordpress (CVE-2026-16811)
SQL injection in wordpress (CVE-2026-16811). Confidential information can be exposed externally.
|
| CVE-2026-16797 |
|
Vulnerability in wordpress (CVE-2026-16797)
vulnerability in wordpress (CVE-2026-16797). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16587 |
|
Vulnerability in wordpress (CVE-2026-16587)
vulnerability in wordpress (CVE-2026-16587). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16585 |
|
Path Traversal in wordpress (CVE-2026-16585)
path traversal in wordpress (CVE-2026-16585). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15136 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-15136)
vulnerability in wordpress (CVE-2026-15136). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15012 |
|
Information Disclosure in wordpress (CVE-2026-15012)
vulnerability in wordpress (CVE-2026-15012). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14926 |
|
Vulnerability in wordpress (CVE-2026-14926)
vulnerability in wordpress (CVE-2026-14926). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14924 |
|
Vulnerability in wordpress (CVE-2026-14924)
vulnerability in wordpress (CVE-2026-14924). Data can be tampered with by attackers.
|
| CVE-2026-14870 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14870)
cross-site scripting in wordpress (CVE-2026-14870). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14821 |
|
Vulnerability in wordpress (CVE-2026-14821)
vulnerability in wordpress (CVE-2026-14821). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14819 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14819)
cross-site scripting in wordpress (CVE-2026-14819). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14545 |
|
Privilege Escalation in wordpress (CVE-2026-14545)
vulnerability in wordpress (CVE-2026-14545). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14490 |
|
Path Traversal in wordpress (CVE-2026-14490)
path traversal in wordpress (CVE-2026-14490). Confidential information can be exposed externally. Exploitable via ``demi_restore_step``.
|
| CVE-2026-12124 |
|
Vulnerability in c (CVE-2026-12124)
vulnerability in c (CVE-2026-12124). Risk of unauthorized operations or information disclosure. Exploitable via ``pdfdraft_embed_pdf``.
|
| CVE-2026-66473 |
|
Unauthenticated Broken Access Control in Xendit Payment <= 7.1.0 versions.
Unauthenticated Broken Access Control in Xendit Payment <= 7.1.0 versions.
|
| CVE-2026-65447 |
|
Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.6 versions.
Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.6 versions.
|
| CVE-2026-65446 |
|
Unauthenticated Cross Site Scripting (XSS) in Kali Forms <= 2.4.18 versions.
Unauthenticated Cross Site Scripting (XSS) in Kali Forms <= 2.4.18 versions.
|
| CVE-2026-65443 |
|
Unauthenticated Cross Site Scripting (XSS) in BackWPup <= 5.7.4 versions.
Unauthenticated Cross Site Scripting (XSS) in BackWPup <= 5.7.4 versions.
|
| CVE-2026-65442 |
|
Unauthenticated Server Side Request Forgery (SSRF) in FormCraft <= 3.9.15 versions.
Unauthenticated Server Side Request Forgery (SSRF) in FormCraft <= 3.9.15 versions.
|
| CVE-2026-65441 |
|
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.3 versions.
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.3 versions.
|
| CVE-2026-65437 |
|
Unauthenticated Cross Site Scripting (XSS) in Spam protection, AntiSpam, FireWall by CleanTalk <=...
Unauthenticated Cross Site Scripting (XSS) in Spam protection, AntiSpam, FireWall by CleanTalk <=...
|
| CVE-2026-61957 |
|
Unauthenticated Cross Site Scripting (XSS) in miniorange otp verification <= 5.5.1 versions.
Unauthenticated Cross Site Scripting (XSS) in miniorange otp verification <= 5.5.1 versions.
|
| CVE-2026-61953 |
|
Unauthenticated Server Side Request Forgery (SSRF) in Simple Link Directory Pro <= 15.0.6 versions.
Unauthenticated Server Side Request Forgery (SSRF) in Simple Link Directory Pro <= 15.0.6 versions.
|
| CVE-2026-65564 |
|
Unauthenticated Sensitive Data Exposure in MapPress Maps for WordPress <= 2.97.6 versions.
Unauthenticated Sensitive Data Exposure in MapPress Maps for WordPress <= 2.97.6 versions.
|
| CVE-2026-59549 |
|
Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions.
Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions.
|
| CVE-2026-65561 |
|
Contributor Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.0 versions.
Contributor Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.0 versions.
|
| CVE-2026-59551 |
|
Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions.
Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions.
|
| CVE-2026-59531 |
|
Unauthenticated Unknown in Falcon – WordPress Optimizations & Tweaks <= 2.10.0 versions.
Unauthenticated Unknown in Falcon – WordPress Optimizations & Tweaks <= 2.10.0 versions.
|
| CVE-2026-9830 |
|
Authentication Bypass in wordpress (CVE-2026-9830)
authentication bypass in wordpress (CVE-2026-9830). Confidential information can be exposed externally.
|
| CVE-2026-14827 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14827)
cross-site scripting in wordpress (CVE-2026-14827). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14820 |
|
Information Disclosure in wordpress (CVE-2026-14820)
vulnerability in wordpress (CVE-2026-14820). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14568 |
|
Authentication Bypass in wordpress (CVE-2026-14568)
authentication bypass in wordpress (CVE-2026-14568). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13400 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13400)
cross-site scripting in wordpress (CVE-2026-13400). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13597 |
|
Authentication Bypass in wordpress (CVE-2026-13597)
authentication bypass in wordpress (CVE-2026-13597). Confidential information can be exposed externally.
|
| CVE-2026-13714 |
|
Unrestricted File Upload in wordpress (CVE-2026-13714)
vulnerability in wordpress (CVE-2026-13714). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13726 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13726)
cross-site scripting in wordpress (CVE-2026-13726). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14189 |
|
SQL Injection in wordpress (CVE-2026-14189)
SQL injection in wordpress (CVE-2026-14189). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14203 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14203)
cross-site scripting in wordpress (CVE-2026-14203). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14235 |
|
Vulnerability in wordpress (CVE-2026-14235)
vulnerability in wordpress (CVE-2026-14235). Confidential information can be exposed externally.
|
| CVE-2026-14236 |
|
Open Redirect in wordpress (CVE-2026-14236)
vulnerability in wordpress (CVE-2026-14236). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14289 |
|
Code Injection in wordpress (CVE-2026-14289)
code injection in wordpress (CVE-2026-14289). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14190 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14190)
cross-site scripting in wordpress (CVE-2026-14190). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13152 |
|
Privilege Escalation in wordpress (CVE-2026-13152)
vulnerability in wordpress (CVE-2026-13152). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10082 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-10082)
cross-site scripting in wordpress (CVE-2026-10082). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12255 |
|
Authentication Bypass in wordpress (CVE-2026-12255)
authentication bypass in wordpress (CVE-2026-12255). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12394 |
|
Privilege Escalation in wordpress (CVE-2026-12394)
vulnerability in wordpress (CVE-2026-12394). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12493 |
|
Authentication Bypass in wordpress (CVE-2026-12493)
authentication bypass in wordpress (CVE-2026-12493). Data can be tampered with by attackers.
|
| CVE-2026-12982 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-12982)
cross-site scripting in wordpress (CVE-2026-12982). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13390 |
|
Vulnerability in wordpress (CVE-2026-13390)
vulnerability in wordpress (CVE-2026-13390). Risk of unauthorized operations or information disclosure.
|