Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: wordpress Clear
ID Title
CVE-2026-15350 Vulnerability in wordpress (CVE-2026-15350)
vulnerability in wordpress (CVE-2026-15350). Risk of unauthorized operations or information disclosure.
CVE-2026-15324 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15324)
cross-site scripting in wordpress (CVE-2026-15324). Risk of unauthorized operations or information disclosure.
CVE-2026-15022 SQL Injection in wordpress (CVE-2026-15022)
SQL injection in wordpress (CVE-2026-15022). Confidential information can be exposed externally.
CVE-2026-13767 SQL Injection in wordpress (CVE-2026-13767)
SQL injection in wordpress (CVE-2026-13767). Confidential information can be exposed externally.
CVE-2026-15407 Vulnerability in wordpress (CVE-2026-15407)
vulnerability in wordpress (CVE-2026-15407). Risk of unauthorized operations or information disclosure.
CVE-2026-13755 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13755)
cross-site scripting in wordpress (CVE-2026-13755). Risk of unauthorized operations or information disclosure.
CVE-2026-15103 Privilege Escalation in wordpress (CVE-2026-15103)
vulnerability in wordpress (CVE-2026-15103). Successful exploitation can lead to full system takeover. Exploitable via ``group_id``.
CVE-2026-13754 SQL Injection in wordpress (CVE-2026-13754)
SQL injection in wordpress (CVE-2026-13754). Confidential information can be exposed externally.
CVE-2026-15005 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-15005)
vulnerability in wordpress (CVE-2026-15005). Successful exploitation can lead to full system takeover.
CVE-2026-13741 Privilege Escalation in wordpress (CVE-2026-13741)
vulnerability in wordpress (CVE-2026-13741). Successful exploitation can lead to full system takeover. Exploitable via ``digits_reg_userrole``.
CVE-2026-15021 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15021)
cross-site scripting in wordpress (CVE-2026-15021). Risk of unauthorized operations or information disclosure.
CVE-2026-15099 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15099)
cross-site scripting in wordpress (CVE-2026-15099). Risk of unauthorized operations or information disclosure.
CVE-2026-15008 Unsafe Deserialization in wordpress (CVE-2026-15008)
vulnerability in wordpress (CVE-2026-15008). Successful exploitation can lead to full system takeover.
CVE-2026-12979 Vulnerability in wordpress (CVE-2026-12979)
vulnerability in wordpress (CVE-2026-12979). Risk of unauthorized operations or information disclosure.
CVE-2026-12978 Cross-Site Scripting (XSS) in wordpress (CVE-2026-12978)
cross-site scripting in wordpress (CVE-2026-12978). Risk of unauthorized operations or information disclosure.
CVE-2026-12907 Vulnerability in wordpress (CVE-2026-12907)
vulnerability in wordpress (CVE-2026-12907). Risk of unauthorized operations or information disclosure.
CVE-2026-12906 Vulnerability in wordpress (CVE-2026-12906)
vulnerability in wordpress (CVE-2026-12906). Risk of unauthorized operations or information disclosure.
CVE-2026-12869 Cross-Site Scripting (XSS) in wordpress (CVE-2026-12869)
cross-site scripting in wordpress (CVE-2026-12869). Risk of unauthorized operations or information disclosure.
CVE-2026-12684 Unrestricted File Upload in wordpress (CVE-2026-12684)
vulnerability in wordpress (CVE-2026-12684). Risk of unauthorized operations or information disclosure.
CVE-2026-12585 Authentication Bypass in wordpress (CVE-2026-12585)
authentication bypass in wordpress (CVE-2026-12585). Successful exploitation can lead to full system takeover.
CVE-2026-12525 Privilege Escalation in wordpress (CVE-2026-12525)
vulnerability in wordpress (CVE-2026-12525). Successful exploitation can lead to full system takeover.
CVE-2026-12510 Vulnerability in wordpress (CVE-2026-12510)
vulnerability in wordpress (CVE-2026-12510). Confidential information can be exposed externally.
CVE-2026-12492 Authentication Bypass in wordpress (CVE-2026-12492)
authentication bypass in wordpress (CVE-2026-12492). Successful exploitation can lead to full system takeover.
CVE-2026-12395 SQL Injection in wordpress (CVE-2026-12395)
SQL injection in wordpress (CVE-2026-12395). Confidential information can be exposed externally.
CVE-2026-11866 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-11866)
vulnerability in wordpress (CVE-2026-11866). Risk of unauthorized operations or information disclosure.
CVE-2026-11371 Cross-Site Scripting (XSS) in wordpress (CVE-2026-11371)
cross-site scripting in wordpress (CVE-2026-11371). Risk of unauthorized operations or information disclosure.
CVE-2026-15306 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15306)
cross-site scripting in wordpress (CVE-2026-15306). Risk of unauthorized operations or information disclosure.
CVE-2026-15458 SQL Injection in wordpress (CVE-2026-15458)
SQL injection in wordpress (CVE-2026-15458). Confidential information can be exposed externally.
CVE-2026-15445 SQL Injection in wordpress (CVE-2026-15445)
SQL injection in wordpress (CVE-2026-15445). Confidential information can be exposed externally.
CVE-2026-15013 Vulnerability in wordpress (CVE-2026-15013)
vulnerability in wordpress (CVE-2026-15013). Successful exploitation can lead to full system takeover. Exploitable via ``SignatureMethod``.
CVE-2026-13042 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13042)
cross-site scripting in wordpress (CVE-2026-13042). Risk of unauthorized operations or information disclosure.
CVE-2026-15652 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15652)
cross-site scripting in wordpress (CVE-2026-15652). Risk of unauthorized operations or information disclosure.
CVE-2026-15336 Vulnerability in wordpress (CVE-2026-15336)
vulnerability in wordpress (CVE-2026-15336). Risk of unauthorized operations or information disclosure.
CVE-2026-14987 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14987)
cross-site scripting in wordpress (CVE-2026-14987). Risk of unauthorized operations or information disclosure.
CVE-2026-13005 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13005)
cross-site scripting in wordpress (CVE-2026-13005). Risk of unauthorized operations or information disclosure.
CVE-2026-12941 SQL Injection in wordpress (CVE-2026-12941)
SQL injection in wordpress (CVE-2026-12941). Confidential information can be exposed externally.
CVE-2026-12753 SQL Injection in wordpress (CVE-2026-12753)
SQL injection in wordpress (CVE-2026-12753). Confidential information can be exposed externally.
CVE-2026-12434 Vulnerability in wordpress (CVE-2026-12434)
vulnerability in wordpress (CVE-2026-12434). Risk of unauthorized operations or information disclosure.
CVE-2026-12409 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-12409)
vulnerability in wordpress (CVE-2026-12409). Risk of unauthorized operations or information disclosure.
CVE-2026-12997 Path Traversal in wordpress (CVE-2026-12997)
path traversal in wordpress (CVE-2026-12997). Confidential information can be exposed externally.
CVE-2026-12512 SQL Injection in wordpress (CVE-2026-12512)
SQL injection in wordpress (CVE-2026-12512). Confidential information can be exposed externally.
CVE-2026-12281 Authentication Bypass in wordpress (CVE-2026-12281)
authentication bypass in wordpress (CVE-2026-12281). Successful exploitation can lead to full system takeover.
CVE-2026-11580 Vulnerability in wordpress (CVE-2026-11580)
vulnerability in wordpress (CVE-2026-11580). Confidential information can be exposed externally.
CVE-2026-11579 Unrestricted File Upload in wordpress (CVE-2026-11579)
vulnerability in wordpress (CVE-2026-11579). Risk of unauthorized operations or information disclosure.
CVE-2026-13001 Vulnerability in wordpress (CVE-2026-13001)
vulnerability in wordpress (CVE-2026-13001). Successful exploitation can lead to full system takeover.
CVE-2026-9341 Vulnerability in wordpress (CVE-2026-9341)
vulnerability in wordpress (CVE-2026-9341). Risk of unauthorized operations or information disclosure.
CVE-2026-11567 Vulnerability in wordpress (CVE-2026-11567)
vulnerability in wordpress (CVE-2026-11567). Data can be tampered with by attackers.
CVE-2026-11563 Vulnerability in wordpress (CVE-2026-11563)
vulnerability in wordpress (CVE-2026-11563). Data can be tampered with by attackers.
CVE-2026-12583 Unsafe Deserialization in wordpress (CVE-2026-12583)
vulnerability in wordpress (CVE-2026-12583). Successful exploitation can lead to full system takeover.
CVE-2026-12988 Vulnerability in c (CVE-2026-12988)
vulnerability in c (CVE-2026-12988). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →