Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-19000 |
|
SSRF (Server-Side Request Forgery) in CVE-2026-19000 (CVE-2026-19000)
SSRF in CVE-2026-19000 (CVE-2026-19000). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18997 |
|
Vulnerability in CVE-2026-18997 (CVE-2026-18997)
vulnerability in CVE-2026-18997 (CVE-2026-18997). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15459 |
|
Authentication Bypass in wordpress (CVE-2026-15459)
authentication bypass in wordpress (CVE-2026-15459). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18992 |
|
Vulnerability in CVE-2026-18992 (CVE-2026-18992)
vulnerability in CVE-2026-18992 (CVE-2026-18992). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18993 |
|
Vulnerability in CVE-2026-18993 (CVE-2026-18993)
vulnerability in CVE-2026-18993 (CVE-2026-18993). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18995 |
|
Information Disclosure in CVE-2026-18995 (CVE-2026-18995)
vulnerability in CVE-2026-18995 (CVE-2026-18995). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18909 |
|
Vulnerability in dos (CVE-2026-18909)
vulnerability in dos (CVE-2026-18909). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18325 |
|
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...
|
| CVE-2026-16636 |
|
The FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP...
The FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP...
|
| CVE-2026-15991 |
|
The File Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the connector function in all versions from 6.0 - 6.9. This makes it possible...
The File Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the connector function in all versions from 6.0 - 6.9. This makes it possible for authenticated attackers, with subscriber-level access and above, to read and delete arbitrary f...
|
| CVE-2026-18991 |
|
Path Traversal in path-traversal (CVE-2026-18991)
path traversal in path-traversal (CVE-2026-18991). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18990 |
|
Authentication Bypass in CVE-2026-18990 (CVE-2026-18990)
authentication bypass in CVE-2026-18990 (CVE-2026-18990). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18980 |
|
Vulnerability in CVE-2026-18980 (CVE-2026-18980)
vulnerability in CVE-2026-18980 (CVE-2026-18980). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18973 |
|
SSRF (Server-Side Request Forgery) in CVE-2026-18973 (CVE-2026-18973)
SSRF in CVE-2026-18973 (CVE-2026-18973). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18974 |
|
Information Disclosure in CVE-2026-18974 (CVE-2026-18974)
vulnerability in CVE-2026-18974 (CVE-2026-18974). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67872 |
|
Vulnerability in dos (CVE-2026-67872)
vulnerability in dos (CVE-2026-67872). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67873 |
|
Vulnerability in c (CVE-2026-67873)
vulnerability in c (CVE-2026-67873). Successful exploitation can lead to full system takeover.
|
| CVE-2026-67869 |
|
Vulnerability in dos (CVE-2026-67869)
vulnerability in dos (CVE-2026-67869). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67871 |
|
Vulnerability in c (CVE-2026-67871)
vulnerability in c (CVE-2026-67871). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-52466 |
|
Authorization Flaw in CVE-2026-52466 (CVE-2026-52466)
vulnerability in CVE-2026-52466 (CVE-2026-52466). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18969 |
|
Vulnerability in CVE-2026-18969 (CVE-2026-18969)
vulnerability in CVE-2026-18969 (CVE-2026-18969). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19028 |
|
Out-of-Bounds Read in c (CVE-2026-19028)
vulnerability in c (CVE-2026-19028). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19027 |
|
Out-of-Bounds Read in c (CVE-2026-19027)
vulnerability in c (CVE-2026-19027). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67870 |
|
Vulnerability in CVE-2026-67870 (CVE-2026-67870)
vulnerability in CVE-2026-67870 (CVE-2026-67870). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18970 |
|
Vulnerability in sqli (CVE-2026-18970)
vulnerability in sqli (CVE-2026-18970). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18968 |
|
Cross-Site Scripting (XSS) in CVE-2026-18968 (CVE-2026-18968)
cross-site scripting in CVE-2026-18968 (CVE-2026-18968). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67531 |
|
Code Injection in CVE-2026-67531 (CVE-2026-67531)
code injection in CVE-2026-67531 (CVE-2026-67531). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67863 |
|
Use-After-Free in dos (CVE-2026-67863)
vulnerability in dos (CVE-2026-67863). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19024 |
|
Vulnerability in dos (CVE-2026-19024)
vulnerability in dos (CVE-2026-19024). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19026 |
|
Vulnerability in c (CVE-2026-19026)
vulnerability in c (CVE-2026-19026). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19023 |
|
Vulnerability in dos (CVE-2026-19023)
vulnerability in dos (CVE-2026-19023). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67867 |
|
Vulnerability in dos (CVE-2026-67867)
vulnerability in dos (CVE-2026-67867). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67866 |
|
Vulnerability in dos (CVE-2026-67866)
vulnerability in dos (CVE-2026-67866). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-63823 |
|
Vulnerability in CVE-2025-63823 (CVE-2025-63823)
vulnerability in CVE-2025-63823 (CVE-2025-63823). Successful exploitation can lead to full system takeover.
|
| CVE-2026-67864 |
|
Vulnerability in dos (CVE-2026-67864)
vulnerability in dos (CVE-2026-67864). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67865 |
|
Out-of-Bounds Read in dos (CVE-2026-67865)
vulnerability in dos (CVE-2026-67865). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-63822 |
|
Vulnerability in CVE-2025-63822 (CVE-2025-63822)
vulnerability in CVE-2025-63822 (CVE-2025-63822). Confidential information can be exposed externally.
|
| CVE-2026-71321 |
|
Vulnerability in nuxt (CVE-2026-71321)
vulnerability in nuxt (CVE-2026-71321). Risk of unauthorized operations or information disclosure. Exploitable via `POST /__nuxt_island/`. Mitigation: upgrade to `3.21.10` or later.
|
| CVE-2026-34966 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-34966)
SSRF in ssrf (CVE-2026-34966). Confidential information can be exposed externally.
|
| CVE-2026-18959 |
|
Path Traversal in path-traversal (CVE-2026-18959)
path traversal in path-traversal (CVE-2026-18959). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18839 |
|
Vulnerability in dos (CVE-2026-18839)
vulnerability in dos (CVE-2026-18839). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17583 |
|
Vulnerability in CVE-2026-17583 (CVE-2026-17583)
vulnerability in CVE-2026-17583 (CVE-2026-17583). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18411 |
|
Vulnerability in CVE-2026-18411 (CVE-2026-18411)
vulnerability in CVE-2026-18411 (CVE-2026-18411). Data can be tampered with by attackers.
|
| CVE-2026-71320 |
|
Vulnerability in nuxt (CVE-2026-71320)
vulnerability in nuxt (CVE-2026-71320). Successful exploitation can lead to full system takeover. Exploitable via ``resolveDynamicComponent``. Mitigation: upgrade to `3.21.10` or later.
|
| CVE-2026-71319 |
|
Code Injection in @nuxt/devtools (CVE-2026-71319)
code injection in @nuxt/devtools (CVE-2026-71319). Successful exploitation can lead to full system takeover. Exploitable via ``ensureDevAuthToken``. Mitigation: upgrade to `3.3.1` or later.
|
| CVE-2026-71318 |
|
Vulnerability in nuxt (CVE-2026-71318)
vulnerability in nuxt (CVE-2026-71318). Risk of unauthorized operations or information disclosure. Exploitable via ``resolveDynamicComponent``. Mitigation: upgrade to `3.21.10` or later.
|
| CVE-2026-71316 |
|
Vulnerability in nuxt (CVE-2026-71316)
vulnerability in nuxt (CVE-2026-71316). Confidential information can be exposed externally. Exploitable via ``routeRules``. Mitigation: upgrade to `4.5.1` or later.
|
| CVE-2026-71315 |
|
Vulnerability in nuxt (CVE-2026-71315)
vulnerability in nuxt (CVE-2026-71315). Confidential information can be exposed externally. Exploitable via ``appMiddleware``. Mitigation: upgrade to `3.21.10` or later.
|
| CVE-2026-71314 |
|
Vulnerability in nuxt (CVE-2026-71314)
vulnerability in nuxt (CVE-2026-71314). Risk of unauthorized operations or information disclosure. Exploitable via ``ssrRenderList``. Mitigation: upgrade to `3.21.10` or later.
|
| CVE-2026-71313 |
|
Path Traversal in github.com/rclone/rclone (CVE-2026-71313)
path traversal in github.com/rclone/rclone (CVE-2026-71313). Data can be tampered with by attackers. Exploitable via ``Dot``. Mitigation: upgrade to `1.75.0` or later.
|