Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: attack-types Clear

ID	Title	Severity	Tags	Detected
CVE-2026-8444	SQL Injection in wordpress (CVE-2026-8444) SQL injection in wordpress (CVE-2026-8444). Successful exploitation can lead to full system takeover.	High	WordPress SQL Injection Cwe 89	2 months ago
CVE-2026-10093	Cross-Site Scripting (XSS) in wordpress (CVE-2026-10093) cross-site scripting in wordpress (CVE-2026-10093). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cross-Site Scripting Cwe 79	2 months ago
CVE-2025-9912	Privilege Escalation in privilege-escalation (CVE-2025-9912) vulnerability in privilege-escalation (CVE-2025-9912). Data can be tampered with by attackers.	Medium	Privilege Escalation Cwe 269	2 months ago
CVE-2026-5667	Vulnerability in jvn (CVE-2026-5667) vulnerability in jvn (CVE-2026-5667). Risk of unauthorized operations or information disclosure.		Jvn Japan Jpcert Denial of Service +1	2 months ago
CVE-2025-10262	Vulnerability in privilege-escalation (CVE-2025-10262) vulnerability in privilege-escalation (CVE-2025-10262). Data can be tampered with by attackers.	Medium	Privilege Escalation Cwe 134	2 months ago
CVE-2026-6933	Unrestricted File Upload in wordpress (CVE-2026-6933) vulnerability in wordpress (CVE-2026-6933). Successful exploitation can lead to full system takeover.	High	PHP WordPress Remote Code Execution Cwe 434	2 months ago
CVE-2026-8443	SQL Injection in wordpress (CVE-2026-8443) SQL injection in wordpress (CVE-2026-8443). Successful exploitation can lead to full system takeover.	High	WordPress SQL Injection Cwe 89	2 months ago
CVE-2026-10635	Use-After-Free in c (CVE-2026-10635) vulnerability in c (CVE-2026-10635). Data can be tampered with by attackers.	Medium	C Denial of Service Cwe 416 Zephyrproject +1	2 months ago
CVE-2026-1765	Out-of-Bounds Read in dos (CVE-2026-1765) vulnerability in dos (CVE-2026-1765). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 125	2 months ago
CVE-2026-1766	Vulnerability in dos (CVE-2026-1766) vulnerability in dos (CVE-2026-1766). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 805 Gnome Localsearch +2	2 months ago
CVE-2026-1767	Vulnerability in dos (CVE-2026-1767) vulnerability in dos (CVE-2026-1767). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 805 Gnome Localsearch +2	2 months ago
CVE-2026-1764	Out-of-Bounds Read in dos (CVE-2026-1764) vulnerability in dos (CVE-2026-1764). Risk of unauthorized operations or information disclosure. Exploitable via ``extract_performers_tags``.	Medium	Denial of Service Cwe 125 Gnome Localsearch +2	2 months ago
CVE-2026-53430	Vulnerability in grpc (CVE-2026-53430) vulnerability in grpc (CVE-2026-53430). Risk of unauthorized operations or information disclosure. Exploitable via ``GRPC.Compressor``. Mitigation: upgrade to `1.0.0` or later.		Denial of Service Cwe 409	2 months ago
CVE-2026-48853	Unsafe Deserialization in grpc (CVE-2026-48853) vulnerability in grpc (CVE-2026-48853). Risk of unauthorized operations or information disclosure. Exploitable via ``Enum.map``. Mitigation: upgrade to `1.0.0` or later.		Remote Code Execution Insecure Deserialization Cwe 502 Cwe 770	2 months ago
CVE-2026-5064	Vulnerability in dos (CVE-2026-5064) vulnerability in dos (CVE-2026-5064). Risk of unauthorized operations or information disclosure.		Denial of Service Cwe 427	2 months ago
CVE-2026-49780	Customer Privilege Escalation in Dokan <= 5.0.2 versions. Customer Privilege Escalation in Dokan <= 5.0.2 versions.	High	Privilege Escalation Cwe 266	2 months ago
CVE-2026-49776	SQL Injection in wordpress (CVE-2026-49776) SQL injection in wordpress (CVE-2026-49776). Confidential information can be exposed externally.	Critical	WordPress SQL Injection Cwe 89	2 months ago
CVE-2026-52693	Unauthenticated SQL Injection in eCommerce Product Catalog <= 3.5.5 versions. Unauthenticated SQL Injection in eCommerce Product Catalog <= 3.5.5 versions.	Critical	SQL Injection Cwe 89	2 months ago
CVE-2026-52697	Subscriber SQL Injection in Taskbuilder <= 5.0.7 versions. Subscriber SQL Injection in Taskbuilder <= 5.0.7 versions.	High	SQL Injection Cwe 89	2 months ago
CVE-2026-52700	Subscriber SQL Injection in WCMultiShipping <= 3.0.2 versions. Subscriber SQL Injection in WCMultiShipping <= 3.0.2 versions.	High	SQL Injection Cwe 89	2 months ago
CVE-2026-49773	Subscriber Cross Site Scripting (XSS) in FV Flowplayer Video Player < 7.5.51.7212 versions. Subscriber Cross Site Scripting (XSS) in FV Flowplayer Video Player < 7.5.51.7212 versions.	Medium	Cross-Site Scripting Cwe 79	2 months ago
CVE-2026-52702	Unauthenticated Cross Site Scripting (XSS) in SEO Redirection <= 9.17 versions. Unauthenticated Cross Site Scripting (XSS) in SEO Redirection <= 9.17 versions.	High	Cross-Site Scripting Cwe 79	2 months ago
CVE-2026-52703	Unauthenticated Path Traversal in FastDup <= 2.7.2 versions. Unauthenticated Path Traversal in FastDup <= 2.7.2 versions.	Critical	Path Traversal Cwe 35	2 months ago
CVE-2026-48964	Subscriber SQL Injection in ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.6 versions. Subscriber SQL Injection in ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.6 versions.	High	WordPress SQL Injection Cwe 89	2 months ago
CVE-2026-49067	Unauthenticated SQL Injection in Advanced 301 and 302 Redirect <= 1.6.9 versions. Unauthenticated SQL Injection in Advanced 301 and 302 Redirect <= 1.6.9 versions.	Critical	SQL Injection Cwe 89	2 months ago
CVE-2026-48966	Unauthenticated Cross Site Scripting (XSS) in Funnel Builder by FunnelKit <= 3.15.0.2 versions. Unauthenticated Cross Site Scripting (XSS) in Funnel Builder by FunnelKit <= 3.15.0.2 versions.	High	Cross-Site Scripting Cwe 79	2 months ago
CVE-2026-49055	Cross-Site Scripting (XSS) in CVE-2026-49055 (CVE-2026-49055) cross-site scripting in CVE-2026-49055 (CVE-2026-49055). Risk of unauthorized operations or information disclosure.	High	Cross-Site Scripting Cwe 79	2 months ago
CVE-2026-49043	Unauthenticated Cross Site Request Forgery (CSRF) in WP Migrate Lite <= 2.7.8 versions. Unauthenticated Cross Site Request Forgery (CSRF) in WP Migrate Lite <= 2.7.8 versions.	Medium	Cross-Site Request Forgery Cwe 352	2 months ago
CVE-2026-49112	Unauthenticated Path Traversal in Shared Files <= 1.7.64 versions. Unauthenticated Path Traversal in Shared Files <= 1.7.64 versions.	High	Path Traversal Cwe 35	2 months ago
CVE-2026-48889	Subscriber Privilege Escalation in Amelia <= 2.3 versions. Subscriber Privilege Escalation in Amelia <= 2.3 versions.	High	Privilege Escalation Cwe 266	2 months ago
CVE-2026-49063	Unauthenticated Privilege Escalation in Listdom <= 5.5.0 versions. Unauthenticated Privilege Escalation in Listdom <= 5.5.0 versions.	High	Privilege Escalation Cwe 266	2 months ago
CVE-2026-49083	Contributor Privilege Escalation in LatePoint <= 5.5.1 versions. Contributor Privilege Escalation in LatePoint <= 5.5.1 versions.	High	Privilege Escalation Cwe 266	2 months ago
CVE-2026-48836	Unauthenticated Remote Code Execution (RCE) in Easy Invoice <= 2.1.19 versions. Unauthenticated Remote Code Execution (RCE) in Easy Invoice <= 2.1.19 versions.	Critical	Remote Code Execution Cwe 94	2 months ago
CVE-2026-48882	Subscriber SQL Injection in WP Time Slots Booking Form <= 1.2.50 versions. Subscriber SQL Injection in WP Time Slots Booking Form <= 1.2.50 versions.	High	SQL Injection Cwe 89	2 months ago
CVE-2026-48874	Subscriber SQL Injection in GamiPress <= 7.8.7 versions. Subscriber SQL Injection in GamiPress <= 7.8.7 versions.	High	SQL Injection Cwe 89	2 months ago
CVE-2026-48886	Unauthenticated SQL Injection in JS Help Desk <= 3.0.9 versions. Unauthenticated SQL Injection in JS Help Desk <= 3.0.9 versions.	Critical	JavaScript SQL Injection Cwe 89	2 months ago
CVE-2026-45439	Unauthenticated SQL Injection in Realtyna Organic IDX plugin <= 5.1.0 versions. Unauthenticated SQL Injection in Realtyna Organic IDX plugin <= 5.1.0 versions.	Critical	SQL Injection Cwe 89	2 months ago
CVE-2026-48870	Subscriber Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.62 versions. Subscriber Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.62 versions.	Medium	Cross-Site Scripting Cwe 79	2 months ago
CVE-2026-48867	Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master <= 11.1.2 versions. Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master <= 11.1.2 versions.	High	Cross-Site Scripting Cwe 79	2 months ago
CVE-2026-48876	Unauthenticated Cross Site Scripting (XSS) in Stop Spammers <= 2026.3 versions. Unauthenticated Cross Site Scripting (XSS) in Stop Spammers <= 2026.3 versions.	High	Cross-Site Scripting Cwe 79	2 months ago
CVE-2026-48838	Unauthenticated Cross Site Scripting (XSS) in Post SMTP <= 3.6.2 versions. Unauthenticated Cross Site Scripting (XSS) in Post SMTP <= 3.6.2 versions.	High	Cross-Site Scripting Cwe 79	2 months ago
CVE-2026-48871	Unauthenticated Cross Site Scripting (XSS) in MW WP Form <= 5.1.3 versions. Unauthenticated Cross Site Scripting (XSS) in MW WP Form <= 5.1.3 versions.	High	Cross-Site Scripting Cwe 79	2 months ago
CVE-2026-48885	Unauthenticated Cross Site Scripting (XSS) in HollerBox <= 2.3.10.1 versions. Unauthenticated Cross Site Scripting (XSS) in HollerBox <= 2.3.10.1 versions.	High	Cross-Site Scripting Cwe 79	2 months ago
CVE-2026-48880	Subscriber Cross Site Scripting (XSS) in WP Job Portal <= 2.5.2 versions. Subscriber Cross Site Scripting (XSS) in WP Job Portal <= 2.5.2 versions.	Medium	Cross-Site Scripting Cwe 79	2 months ago
CVE-2026-42639	Unauthenticated SQL Injection in GD Rating System <= 3.6.2 versions. Unauthenticated SQL Injection in GD Rating System <= 3.6.2 versions.	Critical	SQL Injection Cwe 89	2 months ago
CVE-2026-42665	Unauthenticated SQL Injection in WP Data Access <= 5.5.70 versions. Unauthenticated SQL Injection in WP Data Access <= 5.5.70 versions.	Critical	SQL Injection Cwe 89	2 months ago
CVE-2026-42663	Unauthenticated Cross Site Scripting (XSS) in Simple Membership <= 4.7.2 versions. Unauthenticated Cross Site Scripting (XSS) in Simple Membership <= 4.7.2 versions.	Medium	Cross-Site Scripting Cwe 79	2 months ago
CVE-2026-42656	Subscriber Cross Site Scripting (XSS) in Contest Gallery <= 28.1.6 versions. Subscriber Cross Site Scripting (XSS) in Contest Gallery <= 28.1.6 versions.	Medium	Cross-Site Scripting Cwe 79	2 months ago
CVE-2026-42658	Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.3.8 versions. Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.3.8 versions.	High	Cross-Site Scripting Cwe 79	2 months ago
CVE-2026-42650	Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.6.7 versions. Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.6.7 versions.	High	Cross-Site Scripting Cwe 79	2 months ago

Vulnerabilities

🍪 About cookies