Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cwe Clear
ID Title
CVE-2026-47427 Vulnerability in github.com/github/github-mcp-server (CVE-2026-47427)
vulnerability in github.com/github/github-mcp-server (CVE-2026-47427). Risk of unauthorized operations or information disclosure. Exploitable via ``CompletionsHandler``. Mitigation: upgrade to `1.1.0` or later.
CVE-2026-45293 Vulnerability in wp-coding-standards/wpcs (CVE-2026-45293)
vulnerability in wp-coding-standards/wpcs (CVE-2026-45293). Successful exploitation can lead to full system takeover. Exploitable via ``WordPress.WP.EnqueuedResourceParameters``. Mitigation: upgrade to `3.4.1` or later.
CVE-2026-43910 Vulnerability in io.appium:java-client (CVE-2026-43910)
vulnerability in io.appium:java-client (CVE-2026-43910). Confidential information can be exposed externally. Exploitable via `POST /wd/hub/session`. Mitigation: upgrade to `10.1.1` or later.
CVE-2026-66913 Vulnerability in CVE-2026-66913 (CVE-2026-66913)
vulnerability in CVE-2026-66913 (CVE-2026-66913). Risk of unauthorized operations or information disclosure.
CVE-2026-15411 Vulnerability in wordpress (CVE-2026-15411)
vulnerability in wordpress (CVE-2026-15411). Risk of unauthorized operations or information disclosure.
CVE-2026-16774 Vulnerability in wordpress (CVE-2026-16774)
vulnerability in wordpress (CVE-2026-16774). Risk of unauthorized operations or information disclosure.
CVE-2026-13110 Vulnerability in wordpress (CVE-2026-13110)
vulnerability in wordpress (CVE-2026-13110). Risk of unauthorized operations or information disclosure.
CVE-2026-15025 Vulnerability in wordpress (CVE-2026-15025)
vulnerability in wordpress (CVE-2026-15025). Confidential information can be exposed externally.
CVE-2026-4648 Vulnerability in CVE-2026-4648 (CVE-2026-4648)
vulnerability in CVE-2026-4648 (CVE-2026-4648). Risk of unauthorized operations or information disclosure.
CVE-2026-16773 Information Disclosure in wordpress (CVE-2026-16773)
vulnerability in wordpress (CVE-2026-16773). Risk of unauthorized operations or information disclosure.
CVE-2026-21047 Out-of-Bounds Write in CVE-2026-21047 (CVE-2026-21047)
out-of-bounds write in CVE-2026-21047 (CVE-2026-21047). Risk of unauthorized operations or information disclosure.
CVE-2026-15444 SQL Injection in wordpress (CVE-2026-15444)
SQL injection in wordpress (CVE-2026-15444). Confidential information can be exposed externally.
CVE-2026-13440 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13440)
cross-site scripting in wordpress (CVE-2026-13440). Risk of unauthorized operations or information disclosure.
CVE-2026-63303 Vulnerability in path-traversal (CVE-2026-63303)
vulnerability in path-traversal (CVE-2026-63303). Risk of unauthorized operations or information disclosure.
CVE-2026-65880 Code Injection in CVE-2026-65880 (CVE-2026-65880)
code injection in CVE-2026-65880 (CVE-2026-65880). Risk of unauthorized operations or information disclosure.
CVE-2026-63302 Vulnerability in CVE-2026-63302 (CVE-2026-63302)
vulnerability in CVE-2026-63302 (CVE-2026-63302). Risk of unauthorized operations or information disclosure.
CVE-2026-17072 Out-of-Bounds Read in CVE-2026-17072 (CVE-2026-17072)
vulnerability in CVE-2026-17072 (CVE-2026-17072). Risk of unauthorized operations or information disclosure.
CVE-2026-59248 Vulnerability in dos (CVE-2026-59248)
vulnerability in dos (CVE-2026-59248). Risk of unauthorized operations or information disclosure.
CVE-2026-65624 Vulnerability in CVE-2026-65624 (CVE-2026-65624)
vulnerability in CVE-2026-65624 (CVE-2026-65624). Risk of unauthorized operations or information disclosure.
CVE-2026-58246 Vulnerability in CVE-2026-58246 (CVE-2026-58246)
vulnerability in CVE-2026-58246 (CVE-2026-58246). Confidential information can be exposed externally.
CVE-2026-14328 Privilege Escalation in wordpress (CVE-2026-14328)
vulnerability in wordpress (CVE-2026-14328). Successful exploitation can lead to full system takeover. Exploitable via `GET /wp-json/epm/v1/admin/login`.
CVE-2026-14785 SQL Injection in wordpress (CVE-2026-14785)
SQL injection in wordpress (CVE-2026-14785). Confidential information can be exposed externally.
CVE-2026-16462 SQL Injection in CVE-2026-16462 (CVE-2026-16462)
SQL injection in CVE-2026-16462 (CVE-2026-16462). Successful exploitation can lead to full system takeover.
CVE-2026-11598 Cross-Site Scripting (XSS) in wordpress (CVE-2026-11598)
cross-site scripting in wordpress (CVE-2026-11598). Risk of unauthorized operations or information disclosure.
CVE-2026-11841 Vulnerability in CVE-2026-11841 (CVE-2026-11841)
vulnerability in CVE-2026-11841 (CVE-2026-11841). Confidential information can be exposed externally.
CVE-2026-10207 SQL Injection in wordpress (CVE-2026-10207)
SQL injection in wordpress (CVE-2026-10207). Confidential information can be exposed externally.
CVE-2026-8167 Cross-Site Scripting (XSS) in CVE-2026-8167 (CVE-2026-8167)
cross-site scripting in CVE-2026-8167 (CVE-2026-8167). Risk of unauthorized operations or information disclosure.
CVE-2026-9680 Vulnerability in CVE-2026-9680 (CVE-2026-9680)
vulnerability in CVE-2026-9680 (CVE-2026-9680). Risk of unauthorized operations or information disclosure.
CVE-2026-61376 OS Command Injection in CVE-2026-61376 (CVE-2026-61376)
OS command injection in CVE-2026-61376 (CVE-2026-61376). Successful exploitation can lead to full system takeover.
CVE-2026-59764 OS Command Injection in CVE-2026-59764 (CVE-2026-59764)
OS command injection in CVE-2026-59764 (CVE-2026-59764). Successful exploitation can lead to full system takeover.
CVE-2026-12800 SQL Injection in wordpress (CVE-2026-12800)
SQL injection in wordpress (CVE-2026-12800). Confidential information can be exposed externally. Exploitable via `POST /wp-json/wpdmpp/v1/cart/coupon`.
CVE-2026-12741 SQL Injection in wordpress (CVE-2026-12741)
SQL injection in wordpress (CVE-2026-12741). Confidential information can be exposed externally.
CVE-2026-14516 SQL Injection in wordpress (CVE-2026-14516)
SQL injection in wordpress (CVE-2026-14516). Confidential information can be exposed externally.
CVE-2026-15670 SQL Injection in wordpress (CVE-2026-15670)
SQL injection in wordpress (CVE-2026-15670). Confidential information can be exposed externally.
CVE-2026-15671 SQL Injection in wordpress (CVE-2026-15671)
SQL injection in wordpress (CVE-2026-15671). Confidential information can be exposed externally.
CVE-2026-15673 SQL Injection in wordpress (CVE-2026-15673)
SQL injection in wordpress (CVE-2026-15673). Confidential information can be exposed externally.
CVE-2026-13161 SQL Injection in wordpress (CVE-2026-13161)
SQL injection in wordpress (CVE-2026-13161). Confidential information can be exposed externally.
CVE-2026-15267 SQL Injection in wordpress (CVE-2026-15267)
SQL injection in wordpress (CVE-2026-15267). Confidential information can be exposed externally.
CVE-2026-15730 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15730)
cross-site scripting in wordpress (CVE-2026-15730). Risk of unauthorized operations or information disclosure.
CVE-2026-14168 Vulnerability in CVE-2026-14168 (CVE-2026-14168)
vulnerability in CVE-2026-14168 (CVE-2026-14168). Successful exploitation can lead to full system takeover.
CVE-2026-14167 Authorization Flaw in CVE-2026-14167 (CVE-2026-14167)
vulnerability in CVE-2026-14167 (CVE-2026-14167). Successful exploitation can lead to full system takeover.
CVE-2026-11756 Unsafe Deserialization in deserialization (CVE-2026-11756)
vulnerability in deserialization (CVE-2026-11756). Successful exploitation can lead to full system takeover.
CVE-2026-14171 Open Redirect in CVE-2026-14171 (CVE-2026-14171)
vulnerability in CVE-2026-14171 (CVE-2026-14171). Risk of unauthorized operations or information disclosure.
CVE-2026-15014 Vulnerability in wordpress (CVE-2026-15014)
vulnerability in wordpress (CVE-2026-15014). Successful exploitation can lead to full system takeover. Exploitable via ``billing_phone``.
CVE-2024-14041 Vulnerability in bouncycastle (CVE-2024-14041)
vulnerability in bouncycastle (CVE-2024-14041). Confidential information can be exposed externally.
CVE-2026-44387 Cross-Site Scripting (XSS) in jvn (CVE-2026-44387)
cross-site scripting in jvn (CVE-2026-44387). Risk of unauthorized operations or information disclosure.
CVE-2026-16811 SQL Injection in wordpress (CVE-2026-16811)
SQL injection in wordpress (CVE-2026-16811). Confidential information can be exposed externally.
CVE-2026-6251 SQL Injection in wordpress (CVE-2026-6251)
SQL injection in wordpress (CVE-2026-6251). Confidential information can be exposed externally.
CVE-2026-16587 Vulnerability in wordpress (CVE-2026-16587)
vulnerability in wordpress (CVE-2026-16587). Risk of unauthorized operations or information disclosure.
CVE-2026-14821 Vulnerability in wordpress (CVE-2026-14821)
vulnerability in wordpress (CVE-2026-14821). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →