Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-2942 |
|
Unrestricted File Upload in wordpress (CVE-2026-2942)
vulnerability in wordpress (CVE-2026-2942). Successful exploitation can lead to full system takeover.
|
| CVE-2026-0811 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-0811)
vulnerability in wordpress (CVE-2026-0811). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-0814 |
|
Vulnerability in wordpress (CVE-2026-0814)
vulnerability in wordpress (CVE-2026-0814). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2509 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-2509)
cross-site scripting in wordpress (CVE-2026-2509). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-1673 |
|
Cross-Site Request Forgery (CSRF) in csharp (CVE-2026-1673)
vulnerability in csharp (CVE-2026-1673). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2481 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-2481)
cross-site scripting in wordpress (CVE-2026-2481). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3243 |
|
The Advanced Members for ACF plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the create_crop function in all versions up to, and including, 1....
The Advanced Members for ACF plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the create_crop function in all versions up to, and including, 1.2.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...
|
| CVE-2026-1865 |
|
SQL Injection in wordpress (CVE-2026-1865)
SQL injection in wordpress (CVE-2026-1865). Confidential information can be exposed externally.
|
| CVE-2026-1672 |
|
Cross-Site Request Forgery (CSRF) in csharp (CVE-2026-1672)
vulnerability in csharp (CVE-2026-1672). Data can be tampered with by attackers.
|
| CVE-2026-4303 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-4303)
cross-site scripting in wordpress (CVE-2026-4303). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4073 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-4073)
cross-site scripting in wordpress (CVE-2026-4073). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4300 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-4300)
cross-site scripting in wordpress (CVE-2026-4300). Risk of unauthorized operations or information disclosure. Exploitable via ``rbs_gallery_LoadingWord``.
|
| CVE-2026-4025 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-4025)
cross-site scripting in wordpress (CVE-2026-4025). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39688 |
|
Vulnerability in wordpress (CVE-2026-39688)
vulnerability in wordpress (CVE-2026-39688). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39654 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-39654)
cross-site scripting in wordpress (CVE-2026-39654). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39644 |
|
Vulnerability in wordpress (CVE-2026-39644)
vulnerability in wordpress (CVE-2026-39644). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39614 |
|
Vulnerability in wordpress (CVE-2026-39614)
vulnerability in wordpress (CVE-2026-39614). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39466 |
|
SQL Injection in wordpress (CVE-2026-39466)
SQL injection in wordpress (CVE-2026-39466). Confidential information can be exposed externally.
|
| CVE-2026-1396 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-1396)
cross-site scripting in wordpress (CVE-2026-1396). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4654 |
|
Vulnerability in wordpress (CVE-2026-4654)
vulnerability in wordpress (CVE-2026-4654). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4655 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-4655)
cross-site scripting in wordpress (CVE-2026-4655). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4330 |
|
Vulnerability in wordpress (CVE-2026-4330)
vulnerability in wordpress (CVE-2026-4330). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5506 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-5506)
cross-site scripting in wordpress (CVE-2026-5506). Risk of unauthorized operations or information disclosure. Exploitable via ``wave``.
|
| CVE-2026-5508 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-5508)
cross-site scripting in wordpress (CVE-2026-5508). Risk of unauthorized operations or information disclosure. Exploitable via ``wowpress``.
|
| CVE-2026-5169 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-5169)
cross-site scripting in wordpress (CVE-2026-5169). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4808 |
|
Unrestricted File Upload in wordpress (CVE-2026-4808)
vulnerability in wordpress (CVE-2026-4808). Successful exploitation can lead to full system takeover.
|
| CVE-2026-4338 |
|
Vulnerability in wordpress (CVE-2026-4338)
vulnerability in wordpress (CVE-2026-4338). Confidential information can be exposed externally.
|
| CVE-2026-4871 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-4871)
cross-site scripting in wordpress (CVE-2026-4871). Risk of unauthorized operations or information disclosure. Exploitable via ``scm_member_data``.
|
| CVE-2026-5167 |
|
Vulnerability in wordpress (CVE-2026-5167)
vulnerability in wordpress (CVE-2026-5167). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3781 |
|
SQL Injection in wordpress (CVE-2026-3781)
SQL injection in wordpress (CVE-2026-3781). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4141 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-4141)
vulnerability in wordpress (CVE-2026-4141). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3477 |
|
Vulnerability in wordpress (CVE-2026-3477)
vulnerability in wordpress (CVE-2026-3477). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3480 |
|
Vulnerability in wordpress (CVE-2026-3480)
vulnerability in wordpress (CVE-2026-3480). Confidential information can be exposed externally.
|
| CVE-2026-3535 |
|
Unrestricted File Upload in wordpress (CVE-2026-3535)
vulnerability in wordpress (CVE-2026-3535). Successful exploitation can lead to full system takeover. Exploitable via ``wp_ajax_nopriv_``.
|
| CVE-2026-3594 |
|
Information Disclosure in wordpress (CVE-2026-3594)
vulnerability in wordpress (CVE-2026-3594). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3618 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-3618)
cross-site scripting in wordpress (CVE-2026-3618). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2838 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-2838)
cross-site scripting in wordpress (CVE-2026-2838). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3142 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-3142)
cross-site scripting in wordpress (CVE-2026-3142). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-1794 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2025-1794)
cross-site scripting in wordpress (CVE-2025-1794). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4299 |
|
Vulnerability in wordpress (CVE-2026-4299)
vulnerability in wordpress (CVE-2026-4299). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4333 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-4333)
cross-site scripting in wordpress (CVE-2026-4333). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3646 |
|
Vulnerability in wordpress (CVE-2026-3646)
vulnerability in wordpress (CVE-2026-3646). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4003 |
|
Vulnerability in wordpress (CVE-2026-4003)
vulnerability in wordpress (CVE-2026-4003). Successful exploitation can lead to full system takeover.
|
| CVE-2026-4341 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-4341)
cross-site scripting in wordpress (CVE-2026-4341). Risk of unauthorized operations or information disclosure. Exploitable via ``follow_us_text``.
|
| CVE-2026-4785 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-4785)
cross-site scripting in wordpress (CVE-2026-4785). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3513 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-3513)
cross-site scripting in wordpress (CVE-2026-3513). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3600 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-3600)
cross-site scripting in wordpress (CVE-2026-3600). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3239 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-3239)
cross-site scripting in wordpress (CVE-2026-3239). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4379 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-4379)
cross-site scripting in wordpress (CVE-2026-4379). Risk of unauthorized operations or information disclosure. Exploitable via ``group``.
|
| CVE-2026-2988 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-2988)
cross-site scripting in wordpress (CVE-2026-2988). Risk of unauthorized operations or information disclosure.
|