Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-15350 |
|
Vulnerability in wordpress (CVE-2026-15350)
vulnerability in wordpress (CVE-2026-15350). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15324 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15324)
cross-site scripting in wordpress (CVE-2026-15324). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15022 |
|
SQL Injection in wordpress (CVE-2026-15022)
SQL injection in wordpress (CVE-2026-15022). Confidential information can be exposed externally.
|
| CVE-2026-13767 |
|
SQL Injection in wordpress (CVE-2026-13767)
SQL injection in wordpress (CVE-2026-13767). Confidential information can be exposed externally.
|
| CVE-2026-15407 |
|
Vulnerability in wordpress (CVE-2026-15407)
vulnerability in wordpress (CVE-2026-15407). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13755 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13755)
cross-site scripting in wordpress (CVE-2026-13755). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15103 |
|
Privilege Escalation in wordpress (CVE-2026-15103)
vulnerability in wordpress (CVE-2026-15103). Successful exploitation can lead to full system takeover. Exploitable via ``group_id``.
|
| CVE-2026-13754 |
|
SQL Injection in wordpress (CVE-2026-13754)
SQL injection in wordpress (CVE-2026-13754). Confidential information can be exposed externally.
|
| CVE-2026-15005 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-15005)
vulnerability in wordpress (CVE-2026-15005). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13741 |
|
Privilege Escalation in wordpress (CVE-2026-13741)
vulnerability in wordpress (CVE-2026-13741). Successful exploitation can lead to full system takeover. Exploitable via ``digits_reg_userrole``.
|
| CVE-2026-15021 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15021)
cross-site scripting in wordpress (CVE-2026-15021). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15099 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15099)
cross-site scripting in wordpress (CVE-2026-15099). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15008 |
|
Unsafe Deserialization in wordpress (CVE-2026-15008)
vulnerability in wordpress (CVE-2026-15008). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12979 |
|
Vulnerability in wordpress (CVE-2026-12979)
vulnerability in wordpress (CVE-2026-12979). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12978 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-12978)
cross-site scripting in wordpress (CVE-2026-12978). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12907 |
|
Vulnerability in wordpress (CVE-2026-12907)
vulnerability in wordpress (CVE-2026-12907). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12906 |
|
Vulnerability in wordpress (CVE-2026-12906)
vulnerability in wordpress (CVE-2026-12906). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12869 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-12869)
cross-site scripting in wordpress (CVE-2026-12869). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12684 |
|
Unrestricted File Upload in wordpress (CVE-2026-12684)
vulnerability in wordpress (CVE-2026-12684). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12585 |
|
Authentication Bypass in wordpress (CVE-2026-12585)
authentication bypass in wordpress (CVE-2026-12585). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12525 |
|
Privilege Escalation in wordpress (CVE-2026-12525)
vulnerability in wordpress (CVE-2026-12525). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12510 |
|
Vulnerability in wordpress (CVE-2026-12510)
vulnerability in wordpress (CVE-2026-12510). Confidential information can be exposed externally.
|
| CVE-2026-12492 |
|
Authentication Bypass in wordpress (CVE-2026-12492)
authentication bypass in wordpress (CVE-2026-12492). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12395 |
|
SQL Injection in wordpress (CVE-2026-12395)
SQL injection in wordpress (CVE-2026-12395). Confidential information can be exposed externally.
|
| CVE-2026-11866 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-11866)
vulnerability in wordpress (CVE-2026-11866). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11371 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-11371)
cross-site scripting in wordpress (CVE-2026-11371). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15306 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15306)
cross-site scripting in wordpress (CVE-2026-15306). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15458 |
|
SQL Injection in wordpress (CVE-2026-15458)
SQL injection in wordpress (CVE-2026-15458). Confidential information can be exposed externally.
|
| CVE-2026-15445 |
|
SQL Injection in wordpress (CVE-2026-15445)
SQL injection in wordpress (CVE-2026-15445). Confidential information can be exposed externally.
|
| CVE-2026-15013 |
|
Vulnerability in wordpress (CVE-2026-15013)
vulnerability in wordpress (CVE-2026-15013). Successful exploitation can lead to full system takeover. Exploitable via ``SignatureMethod``.
|
| CVE-2026-13042 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13042)
cross-site scripting in wordpress (CVE-2026-13042). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15652 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15652)
cross-site scripting in wordpress (CVE-2026-15652). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15336 |
|
Vulnerability in wordpress (CVE-2026-15336)
vulnerability in wordpress (CVE-2026-15336). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14987 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14987)
cross-site scripting in wordpress (CVE-2026-14987). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13005 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13005)
cross-site scripting in wordpress (CVE-2026-13005). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12941 |
|
SQL Injection in wordpress (CVE-2026-12941)
SQL injection in wordpress (CVE-2026-12941). Confidential information can be exposed externally.
|
| CVE-2026-12753 |
|
SQL Injection in wordpress (CVE-2026-12753)
SQL injection in wordpress (CVE-2026-12753). Confidential information can be exposed externally.
|
| CVE-2026-12434 |
|
Vulnerability in wordpress (CVE-2026-12434)
vulnerability in wordpress (CVE-2026-12434). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12409 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-12409)
vulnerability in wordpress (CVE-2026-12409). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12997 |
|
Path Traversal in wordpress (CVE-2026-12997)
path traversal in wordpress (CVE-2026-12997). Confidential information can be exposed externally.
|
| CVE-2026-12512 |
|
SQL Injection in wordpress (CVE-2026-12512)
SQL injection in wordpress (CVE-2026-12512). Confidential information can be exposed externally.
|
| CVE-2026-12281 |
|
Authentication Bypass in wordpress (CVE-2026-12281)
authentication bypass in wordpress (CVE-2026-12281). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11580 |
|
Vulnerability in wordpress (CVE-2026-11580)
vulnerability in wordpress (CVE-2026-11580). Confidential information can be exposed externally.
|
| CVE-2026-11579 |
|
Unrestricted File Upload in wordpress (CVE-2026-11579)
vulnerability in wordpress (CVE-2026-11579). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13001 |
|
Vulnerability in wordpress (CVE-2026-13001)
vulnerability in wordpress (CVE-2026-13001). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9341 |
|
Vulnerability in wordpress (CVE-2026-9341)
vulnerability in wordpress (CVE-2026-9341). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11567 |
|
Vulnerability in wordpress (CVE-2026-11567)
vulnerability in wordpress (CVE-2026-11567). Data can be tampered with by attackers.
|
| CVE-2026-11563 |
|
Vulnerability in wordpress (CVE-2026-11563)
vulnerability in wordpress (CVE-2026-11563). Data can be tampered with by attackers.
|
| CVE-2026-12583 |
|
Unsafe Deserialization in wordpress (CVE-2026-12583)
vulnerability in wordpress (CVE-2026-12583). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12988 |
|
Vulnerability in c (CVE-2026-12988)
vulnerability in c (CVE-2026-12988). Risk of unauthorized operations or information disclosure.
|