Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-8910 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-8910)
vulnerability in wordpress (CVE-2026-8910). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8940 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-8940)
vulnerability in wordpress (CVE-2026-8940). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10553 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-10553)
vulnerability in wordpress (CVE-2026-10553). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9719 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-9719)
vulnerability in wordpress (CVE-2026-9719). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7047 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-7047)
vulnerability in wordpress (CVE-2026-7047). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11270 |
|
Cross-Site Request Forgery (CSRF) in google (CVE-2026-11270)
vulnerability in google (CVE-2026-11270). Confidential information can be exposed externally.
|
| CVE-2026-11265 |
|
Cross-Site Request Forgery (CSRF) in google (CVE-2026-11265)
vulnerability in google (CVE-2026-11265). Confidential information can be exposed externally.
|
| CVE-2026-11214 |
|
Vulnerability in google (CVE-2026-11214)
vulnerability in google (CVE-2026-11214). Confidential information can be exposed externally.
|
| CVE-2026-11200 |
|
Vulnerability in google (CVE-2026-11200)
vulnerability in google (CVE-2026-11200). Confidential information can be exposed externally.
|
| CVE-2026-11194 |
|
Vulnerability in google (CVE-2026-11194)
vulnerability in google (CVE-2026-11194). Confidential information can be exposed externally.
|
| CVE-2026-11195 |
|
Vulnerability in google (CVE-2026-11195)
vulnerability in google (CVE-2026-11195). Confidential information can be exposed externally.
|
| CVE-2026-11156 |
|
Cross-Site Request Forgery (CSRF) in google (CVE-2026-11156)
vulnerability in google (CVE-2026-11156). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11148 |
|
Cross-Site Request Forgery (CSRF) in google (CVE-2026-11148)
vulnerability in google (CVE-2026-11148). Confidential information can be exposed externally.
|
| CVE-2026-11155 |
|
Cross-Site Request Forgery (CSRF) in google (CVE-2026-11155)
vulnerability in google (CVE-2026-11155). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11139 |
|
Cross-Site Request Forgery (CSRF) in google (CVE-2026-11139)
vulnerability in google (CVE-2026-11139). Confidential information can be exposed externally.
|
| CVE-2026-11134 |
|
Cross-Site Request Forgery (CSRF) in google (CVE-2026-11134)
vulnerability in google (CVE-2026-11134). Confidential information can be exposed externally.
|
| CVE-2026-11129 |
|
Cross-Site Request Forgery (CSRF) in google (CVE-2026-11129)
vulnerability in google (CVE-2026-11129). Confidential information can be exposed externally.
|
| CVE-2026-11106 |
|
Cross-Site Request Forgery (CSRF) in google (CVE-2026-11106)
vulnerability in google (CVE-2026-11106). Confidential information can be exposed externally.
|
| CVE-2026-11083 |
|
Vulnerability in google (CVE-2026-11083)
vulnerability in google (CVE-2026-11083). Confidential information can be exposed externally.
|
| CVE-2026-11084 |
|
Vulnerability in google (CVE-2026-11084)
vulnerability in google (CVE-2026-11084). Confidential information can be exposed externally.
|
| CVE-2026-11020 |
|
Vulnerability in google (CVE-2026-11020)
vulnerability in google (CVE-2026-11020). Confidential information can be exposed externally.
|
| CVE-2026-43985 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-43985)
vulnerability in csrf (CVE-2026-43985). Successful exploitation can lead to full system takeover. Exploitable via ``configUpdate``.
|
| CVE-2019-25729 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2019-25729)
vulnerability in csrf (CVE-2019-25729). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9732 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-9732)
vulnerability in wordpress (CVE-2026-9732). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34460 |
|
Vulnerability in csrf (CVE-2026-34460)
vulnerability in csrf (CVE-2026-34460). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4071 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-4071)
vulnerability in wordpress (CVE-2026-4071). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9722 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-9722)
vulnerability in wordpress (CVE-2026-9722). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8422 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-8422)
vulnerability in wordpress (CVE-2026-8422). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9599 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-9599)
vulnerability in wordpress (CVE-2026-9599). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9730 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-9730)
vulnerability in wordpress (CVE-2026-9730). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9723 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-9723)
vulnerability in wordpress (CVE-2026-9723). Risk of unauthorized operations or information disclosure.
|
| CVE-2018-25435 |
|
Cross-Site Request Forgery (CSRF) in CVE-2018-25435 (CVE-2018-25435)
vulnerability in CVE-2018-25435 (CVE-2018-25435). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49433 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-49433)
vulnerability in csrf (CVE-2026-49433). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40549 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-40549)
vulnerability in csrf (CVE-2026-40549). Risk of unauthorized operations or information disclosure.
|
| CVE-2018-25397 |
|
Cross-Site Request Forgery (CSRF) in CVE-2018-25397 (CVE-2018-25397)
vulnerability in CVE-2018-25397 (CVE-2018-25397). Risk of unauthorized operations or information disclosure.
|
| CVE-2018-25387 |
|
Cross-Site Request Forgery (CSRF) in CVE-2018-25387 (CVE-2018-25387)
vulnerability in CVE-2018-25387 (CVE-2018-25387). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6075 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-6075)
vulnerability in wordpress (CVE-2026-6075). Data can be tampered with by attackers.
|
| CVE-2026-35266 |
|
Vulnerability in c (CVE-2026-35266)
vulnerability in c (CVE-2026-35266). Confidential information can be exposed externally.
|
| CVE-2026-9618 |
|
Cross-Site Request Forgery (CSRF) in csharp (CVE-2026-9618)
vulnerability in csharp (CVE-2026-9618). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6455 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-6455)
vulnerability in wordpress (CVE-2026-6455). Data can be tampered with by attackers.
|
| CVE-2026-7533 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-7533)
vulnerability in wordpress (CVE-2026-7533). Risk of unauthorized operations or information disclosure. Exploitable via ``admin_init``.
|
| CVE-2026-48147 |
|
Vulnerability in @budibase/backend-core (CVE-2026-48147)
vulnerability in @budibase/backend-core (CVE-2026-48147). Data can be tampered with by attackers. Exploitable via `POST /api/global/users/invite`. Mitigation: upgrade to `3.35.4` or later.
|
| CVE-2026-9674 |
|
Cross-Site Request Forgery (CSRF) in org.jenkins-ci.plugins:jenkins-multijob-plugin (CVE-2026-9674)
vulnerability in org.jenkins-ci.plugins:jenkins-multijob-plugin (CVE-2026-9674). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `669.v9d96a` or later.
|
| CVE-2026-48925 |
|
Cross-Site Request Forgery (CSRF) in org.jenkins-ci.plugins:github-integration-parent (CVE-2026-48925)
vulnerability in org.jenkins-ci.plugins:github-integration-parent (CVE-2026-48925). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.7.4` or later.
|
| CVE-2026-30498 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-30498)
vulnerability in csrf (CVE-2026-30498). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8906 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-8906)
vulnerability in wordpress (CVE-2026-8906). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8942 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-8942)
vulnerability in wordpress (CVE-2026-8942). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49001 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-49001)
vulnerability in csrf (CVE-2026-49001). Data can be tampered with by attackers.
|
| CVE-2026-8938 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-8938)
vulnerability in wordpress (CVE-2026-8938). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8943 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-8943)
vulnerability in wordpress (CVE-2026-8943). Risk of unauthorized operations or information disclosure.
|