Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-9723 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-9723)
vulnerability in wordpress (CVE-2026-9723). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2425 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-2425)
cross-site scripting in wordpress (CVE-2026-2425). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3620 |
|
Vulnerability in wordpress (CVE-2026-3620)
vulnerability in wordpress (CVE-2026-3620). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4080 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-4080)
cross-site scripting in wordpress (CVE-2026-4080). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4081 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-4081)
cross-site scripting in wordpress (CVE-2026-4081). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8293 |
|
Authentication Bypass in wordpress (CVE-2026-8293)
authentication bypass in wordpress (CVE-2026-8293). Successful exploitation can lead to full system takeover.
|
| CVE-2026-8206 |
|
Privilege Escalation in wordpress (CVE-2026-8206)
vulnerability in wordpress (CVE-2026-8206). Successful exploitation can lead to full system takeover.
|
| CVE-2026-3722 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-3722)
cross-site scripting in wordpress (CVE-2026-3722). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10100 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-10100)
cross-site scripting in wordpress (CVE-2026-10100). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9050 |
|
Vulnerability in wordpress (CVE-2026-9050)
vulnerability in wordpress (CVE-2026-9050). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9048 |
|
Authorization Flaw in wordpress (CVE-2026-9048)
vulnerability in wordpress (CVE-2026-9048). Risk of unauthorized operations or information disclosure.
|
| CVE-2018-25434 |
|
SQL Injection in wordpress (CVE-2018-25434)
SQL injection in wordpress (CVE-2018-25434). Confidential information can be exposed externally.
|
| CVE-2026-8382 |
|
Vulnerability in wordpress (CVE-2026-8382)
vulnerability in wordpress (CVE-2026-8382). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7465 |
|
Privilege Escalation in wordpress (CVE-2026-7465)
vulnerability in wordpress (CVE-2026-7465). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9757 |
|
SQL Injection in wordpress (CVE-2026-9757)
SQL injection in wordpress (CVE-2026-9757). Confidential information can be exposed externally.
|
| CVE-2026-7459 |
|
Vulnerability in wordpress (CVE-2026-7459)
vulnerability in wordpress (CVE-2026-7459). Successful exploitation can lead to full system takeover.
|
| CVE-2026-4290 |
|
Vulnerability in wordpress (CVE-2026-4290)
vulnerability in wordpress (CVE-2026-4290). Data can be tampered with by attackers.
|
| CVE-2025-12714 |
|
Vulnerability in wordpress (CVE-2025-12714)
vulnerability in wordpress (CVE-2025-12714). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9189 |
|
Vulnerability in wordpress (CVE-2026-9189)
vulnerability in wordpress (CVE-2026-9189). Risk of unauthorized operations or information disclosure. Exploitable via ``mc_gross``.
|
| CVE-2026-6075 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-6075)
vulnerability in wordpress (CVE-2026-6075). Data can be tampered with by attackers.
|
| CVE-2026-10039 |
|
SQL Injection in wordpress (CVE-2026-10039)
SQL injection in wordpress (CVE-2026-10039). Confidential information can be exposed externally.
|
| CVE-2026-9243 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-9243)
cross-site scripting in wordpress (CVE-2026-9243). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3655 |
|
Authentication Bypass in wordpress (CVE-2026-3655)
authentication bypass in wordpress (CVE-2026-3655). Successful exploitation can lead to full system takeover. Exploitable via ``lwp_ajax_register``.
|
| CVE-2025-11262 |
|
The Link Whisper Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...
The Link Whisper Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...
|
| CVE-2025-11993 |
|
Unsafe Deserialization in wordpress (CVE-2025-11993)
vulnerability in wordpress (CVE-2025-11993). Successful exploitation can lead to full system takeover.
|
| CVE-2025-14042 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2025-14042)
cross-site scripting in wordpress (CVE-2025-14042). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6275 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-6275)
cross-site scripting in wordpress (CVE-2026-6275). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9714 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-9714)
cross-site scripting in wordpress (CVE-2026-9714). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8732 |
|
Vulnerability in wordpress (CVE-2026-8732)
vulnerability in wordpress (CVE-2026-8732). Successful exploitation can lead to full system takeover.
|
| CVE-2026-2128 |
|
Information Disclosure in wordpress (CVE-2026-2128)
vulnerability in wordpress (CVE-2026-2128). Risk of unauthorized operations or information disclosure. Exploitable via ``wordpress_logged_in_``.
|
| CVE-2026-8995 |
|
Information Disclosure in wordpress (CVE-2026-8995)
vulnerability in wordpress (CVE-2026-8995). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7430 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-7430)
cross-site scripting in wordpress (CVE-2026-7430). Risk of unauthorized operations or information disclosure. Exploitable via ``WPEditor.php``.
|
| CVE-2026-8809 |
|
Privilege Escalation in wordpress (CVE-2026-8809)
vulnerability in wordpress (CVE-2026-8809). Successful exploitation can lead to full system takeover.
|
| CVE-2026-8689 |
|
Vulnerability in c (CVE-2026-8689)
vulnerability in c (CVE-2026-8689). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7048 |
|
SQL Injection in wordpress (CVE-2026-7048)
SQL injection in wordpress (CVE-2026-7048). Confidential information can be exposed externally.
|
| CVE-2026-6937 |
|
Vulnerability in wordpress (CVE-2026-6937)
vulnerability in wordpress (CVE-2026-6937). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7526 |
|
Information Disclosure in wordpress (CVE-2026-7526)
vulnerability in wordpress (CVE-2026-7526). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9015 |
|
Vulnerability in wordpress (CVE-2026-9015)
vulnerability in wordpress (CVE-2026-9015). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4334 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-4334)
cross-site scripting in wordpress (CVE-2026-4334). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6226 |
|
Privilege Escalation in wordpress (CVE-2026-6226)
vulnerability in wordpress (CVE-2026-6226). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7651 |
|
Vulnerability in wordpress (CVE-2026-7651)
vulnerability in wordpress (CVE-2026-7651). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7660 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-7660)
cross-site scripting in wordpress (CVE-2026-7660). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7797 |
|
SQL Injection in wordpress (CVE-2026-7797)
SQL injection in wordpress (CVE-2026-7797). Confidential information can be exposed externally.
|
| CVE-2026-7862 |
|
Vulnerability in wordpress (CVE-2026-7862)
vulnerability in wordpress (CVE-2026-7862). Data can be tampered with by attackers.
|
| CVE-2026-8682 |
|
Vulnerability in wordpress (CVE-2026-8682)
vulnerability in wordpress (CVE-2026-8682). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9227 |
|
Unrestricted File Upload in wordpress (CVE-2026-9227)
vulnerability in wordpress (CVE-2026-9227). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9618 |
|
Cross-Site Request Forgery (CSRF) in csharp (CVE-2026-9618)
vulnerability in csharp (CVE-2026-9618). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6427 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-6427)
cross-site scripting in wordpress (CVE-2026-6427). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6455 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-6455)
vulnerability in wordpress (CVE-2026-6455). Data can be tampered with by attackers.
|
| CVE-2026-7052 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-7052)
cross-site scripting in wordpress (CVE-2026-7052). Risk of unauthorized operations or information disclosure.
|