Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cwe Clear
ID Title
CVE-2026-14930 Vulnerability in wordpress (CVE-2026-14930)
vulnerability in wordpress (CVE-2026-14930). Confidential information can be exposed externally.
CVE-2026-14929 Authorization Flaw in wordpress (CVE-2026-14929)
vulnerability in wordpress (CVE-2026-14929). Risk of unauthorized operations or information disclosure.
CVE-2026-14862 Vulnerability in wordpress (CVE-2026-14862)
vulnerability in wordpress (CVE-2026-14862). Risk of unauthorized operations or information disclosure.
CVE-2026-14830 Authentication Bypass in wordpress (CVE-2026-14830)
authentication bypass in wordpress (CVE-2026-14830). Data can be tampered with by attackers.
CVE-2026-14919 Authentication Bypass in wordpress (CVE-2026-14919)
authentication bypass in wordpress (CVE-2026-14919). Successful exploitation can lead to full system takeover.
CVE-2026-14834 Vulnerability in wordpress (CVE-2026-14834)
vulnerability in wordpress (CVE-2026-14834). Risk of unauthorized operations or information disclosure.
CVE-2026-14833 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14833)
cross-site scripting in wordpress (CVE-2026-14833). Successful exploitation can lead to full system takeover.
CVE-2026-14845 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14845)
cross-site scripting in wordpress (CVE-2026-14845). Risk of unauthorized operations or information disclosure.
CVE-2026-14849 Vulnerability in wordpress (CVE-2026-14849)
vulnerability in wordpress (CVE-2026-14849). Risk of unauthorized operations or information disclosure.
CVE-2026-14333 Privilege Escalation in wordpress (CVE-2026-14333)
vulnerability in wordpress (CVE-2026-14333). Confidential information can be exposed externally.
CVE-2026-12721 SQL Injection in wordpress (CVE-2026-12721)
SQL injection in wordpress (CVE-2026-12721). Confidential information can be exposed externally.
CVE-2026-14554 SQL Injection in wordpress (CVE-2026-14554)
SQL injection in wordpress (CVE-2026-14554). Confidential information can be exposed externally.
CVE-2026-13393 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13393)
cross-site scripting in wordpress (CVE-2026-13393). Risk of unauthorized operations or information disclosure.
CVE-2026-13609 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13609)
cross-site scripting in wordpress (CVE-2026-13609). Successful exploitation can lead to full system takeover.
CVE-2026-14319 Information Disclosure in wordpress (CVE-2026-14319)
vulnerability in wordpress (CVE-2026-14319). Confidential information can be exposed externally.
CVE-2026-14483 Unrestricted File Upload in wordpress (CVE-2026-14483)
vulnerability in wordpress (CVE-2026-14483). Successful exploitation can lead to full system takeover.
CVE-2026-14317 Vulnerability in wordpress (CVE-2026-14317)
vulnerability in wordpress (CVE-2026-14317). Risk of unauthorized operations or information disclosure.
CVE-2026-13392 Code Injection in wordpress (CVE-2026-13392)
code injection in wordpress (CVE-2026-13392). Successful exploitation can lead to full system takeover.
CVE-2026-12251 Privilege Escalation in wordpress (CVE-2026-12251)
vulnerability in wordpress (CVE-2026-12251). Successful exploitation can lead to full system takeover.
CVE-2026-12720 Unsafe Deserialization in wordpress (CVE-2026-12720)
vulnerability in wordpress (CVE-2026-12720). Successful exploitation can lead to full system takeover.
CVE-2026-12695 Authentication Bypass in wordpress (CVE-2026-12695)
authentication bypass in wordpress (CVE-2026-12695). Successful exploitation can lead to full system takeover.
CVE-2026-63223 Unrestricted File Upload in codeigniter4/framework (CVE-2026-63223)
vulnerability in codeigniter4/framework (CVE-2026-63223). Successful exploitation can lead to full system takeover. Exploitable via ``is_image``. Mitigation: upgrade to `4.7.4` or later.
CVE-2026-63222 Path Traversal in codeigniter4/framework (CVE-2026-63222)
path traversal in codeigniter4/framework (CVE-2026-63222). Data can be tampered with by attackers. Mitigation: upgrade to `4.7.4` or later.
CVE-2026-63221 SQL Injection in codeigniter4/framework (CVE-2026-63221)
SQL injection in codeigniter4/framework (CVE-2026-63221). Data can be tampered with by attackers. Exploitable via ``WHERE``. Mitigation: upgrade to `4.7.4` or later.
CVE-2026-56672 Cross-Site Scripting (XSS) in CVE-2026-56672 (CVE-2026-56672)
cross-site scripting in CVE-2026-56672 (CVE-2026-56672). Confidential information can be exposed externally. Exploitable via `GET /userdata/{file}`.
CVE-2026-56673 Path Traversal in CVE-2026-56673 (CVE-2026-56673)
path traversal in CVE-2026-56673 (CVE-2026-56673). Confidential information can be exposed externally. Exploitable via `POST /prompt`.
CVE-2026-56671 Path Traversal in CVE-2026-56671 (CVE-2026-56671)
path traversal in CVE-2026-56671 (CVE-2026-56671). Confidential information can be exposed externally.
CVE-2026-56670 Cross-Site Scripting (XSS) in CVE-2026-56670 (CVE-2026-56670)
cross-site scripting in CVE-2026-56670 (CVE-2026-56670). Confidential information can be exposed externally.
CVE-2026-43832 Vulnerability in CVE-2026-43832 (CVE-2026-43832)
vulnerability in CVE-2026-43832 (CVE-2026-43832). Confidential information can be exposed externally.
CVE-2026-43831 Vulnerability in CVE-2026-43831 (CVE-2026-43831)
vulnerability in CVE-2026-43831 (CVE-2026-43831). Confidential information can be exposed externally.
CVE-2026-43830 Command Injection in CVE-2026-43830 (CVE-2026-43830)
command injection in CVE-2026-43830 (CVE-2026-43830). Successful exploitation can lead to full system takeover.
CVE-2026-43829 Vulnerability in CVE-2026-43829 (CVE-2026-43829)
vulnerability in CVE-2026-43829 (CVE-2026-43829). Confidential information can be exposed externally.
CVE-2026-18157 Vulnerability in CVE-2026-18157 (CVE-2026-18157)
vulnerability in CVE-2026-18157 (CVE-2026-18157). Successful exploitation can lead to full system takeover.
CVE-2026-14541 Authentication Bypass in google (CVE-2026-14541)
authentication bypass in google (CVE-2026-14541). Confidential information can be exposed externally.
CVE-2026-14540 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-14540)
SSRF in ssrf (CVE-2026-14540). Risk of unauthorized operations or information disclosure.
CVE-2026-14539 Vulnerability in dos (CVE-2026-14539)
vulnerability in dos (CVE-2026-14539). Risk of unauthorized operations or information disclosure.
CVE-2026-14538 Vulnerability in google (CVE-2026-14538)
vulnerability in google (CVE-2026-14538). Confidential information can be exposed externally.
CVE-2026-14537 Authorization Flaw in google (CVE-2026-14537)
vulnerability in google (CVE-2026-14537). Successful exploitation can lead to full system takeover.
CVE-2026-58039 Vulnerability in CVE-2026-58039 (CVE-2026-58039)
vulnerability in CVE-2026-58039 (CVE-2026-58039). Risk of unauthorized operations or information disclosure.
CVE-2026-66360 Out-of-Bounds Read in dos (CVE-2026-66360)
vulnerability in dos (CVE-2026-66360). Risk of unauthorized operations or information disclosure.
CVE-2026-66364 Out-of-Bounds Read in CVE-2026-66364 (CVE-2026-66364)
vulnerability in CVE-2026-66364 (CVE-2026-66364). Risk of unauthorized operations or information disclosure.
CVE-2026-66369 Out-of-Bounds Read in CVE-2026-66369 (CVE-2026-66369)
vulnerability in CVE-2026-66369 (CVE-2026-66369). Risk of unauthorized operations or information disclosure.
CVE-2026-66720 Out-of-Bounds Read in CVE-2026-66720 (CVE-2026-66720)
vulnerability in CVE-2026-66720 (CVE-2026-66720). Risk of unauthorized operations or information disclosure.
CVE-2026-66421 Cross-Site Scripting (XSS) in tugcantopaloglu (CVE-2026-66421)
cross-site scripting in tugcantopaloglu (CVE-2026-66421). Confidential information can be exposed externally.
CVE-2026-63550 Out-of-Bounds Read in CVE-2026-63550 (CVE-2026-63550)
vulnerability in CVE-2026-63550 (CVE-2026-63550). Risk of unauthorized operations or information disclosure.
CVE-2026-65421 Out-of-Bounds Read in CVE-2026-65421 (CVE-2026-65421)
vulnerability in CVE-2026-65421 (CVE-2026-65421). Risk of unauthorized operations or information disclosure.
CVE-2026-66349 Out-of-Bounds Read in CVE-2026-66349 (CVE-2026-66349)
vulnerability in CVE-2026-66349 (CVE-2026-66349). Risk of unauthorized operations or information disclosure.
CVE-2026-65423 Vulnerability in CVE-2026-65423 (CVE-2026-65423)
vulnerability in CVE-2026-65423 (CVE-2026-65423). Successful exploitation can lead to full system takeover.
CVE-2026-63035 Use-After-Free in dos (CVE-2026-63035)
vulnerability in dos (CVE-2026-63035). Data can be tampered with by attackers.
CVE-2026-63362 Vulnerability in dos (CVE-2026-63362)
vulnerability in dos (CVE-2026-63362). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →