Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cwe Clear
ID Title
CVE-2026-82328 Out-of-Bounds Read in dos (CVE-2026-82328)
vulnerability in dos (CVE-2026-82328). Risk of unauthorized operations or information disclosure.
CVE-2026-82330 Out-of-Bounds Read in dos (CVE-2026-82330)
vulnerability in dos (CVE-2026-82330). Risk of unauthorized operations or information disclosure.
CVE-2026-82324 Out-of-Bounds Read in dos (CVE-2026-82324)
vulnerability in dos (CVE-2026-82324). Risk of unauthorized operations or information disclosure.
CVE-2026-82227 Contributor SQL Injection in WPBulky <= 1.2.2 versions.
Contributor SQL Injection in WPBulky <= 1.2.2 versions.
CVE-2026-82220 Unauthenticated Other Vulnerability Type in Forminator <= 1.57.1 versions.
Unauthenticated Other Vulnerability Type in Forminator <= 1.57.1 versions.
CVE-2026-82112 Path Traversal in path-traversal (CVE-2026-82112)
path traversal in path-traversal (CVE-2026-82112). Risk of unauthorized operations or information disclosure.
CVE-2026-82078 Vulnerability in CVE-2026-82078 (CVE-2026-82078)
vulnerability in CVE-2026-82078 (CVE-2026-82078). Risk of unauthorized operations or information disclosure.
CVE-2026-81767 Unauthenticated Broken Access Control in Simple Payment <= 2.5.2 versions.
Unauthenticated Broken Access Control in Simple Payment <= 2.5.2 versions.
CVE-2026-81757 Author Remote Code Execution (RCE) in Rank Math SEO <= 1.0.276 versions.
Author Remote Code Execution (RCE) in Rank Math SEO <= 1.0.276 versions.
CVE-2026-81760 Cross-Site Scripting (XSS) in CVE-2026-81760 (CVE-2026-81760)
cross-site scripting in CVE-2026-81760 (CVE-2026-81760). Risk of unauthorized operations or information disclosure.
CVE-2026-81761 Subscriber Broken Access Control in WpEvently <= 5.5.0 versions.
Subscriber Broken Access Control in WpEvently <= 5.5.0 versions.
CVE-2026-81759 Contributor Broken Access Control in WpEvently <= 5.5.0 versions.
Contributor Broken Access Control in WpEvently <= 5.5.0 versions.
CVE-2026-81578 Vulnerability in CVE-2026-81578 (CVE-2026-81578)
vulnerability in CVE-2026-81578 (CVE-2026-81578). Risk of unauthorized operations or information disclosure.
CVE-2026-81284 Contributor Broken Access Control in ACF Extended <= 0.9.2.6 versions.
Contributor Broken Access Control in ACF Extended <= 0.9.2.6 versions.
CVE-2026-81285 Vulnerability in dos (CVE-2026-81285)
vulnerability in dos (CVE-2026-81285). Risk of unauthorized operations or information disclosure.
CVE-2026-6176 Cross-Site Scripting (XSS) in wordpress (CVE-2026-6176)
cross-site scripting in wordpress (CVE-2026-6176). Risk of unauthorized operations or information disclosure.
CVE-2026-5953 Cross-Site Scripting (XSS) in CVE-2026-5953 (CVE-2026-5953)
cross-site scripting in CVE-2026-5953 (CVE-2026-5953). Risk of unauthorized operations or information disclosure.
CVE-2026-5934 Cross-Site Scripting (XSS) in wordpress (CVE-2026-5934)
cross-site scripting in wordpress (CVE-2026-5934). Risk of unauthorized operations or information disclosure.
CVE-2026-5800 Cross-Site Scripting (XSS) in CVE-2026-5800 (CVE-2026-5800)
cross-site scripting in CVE-2026-5800 (CVE-2026-5800). Risk of unauthorized operations or information disclosure.
CVE-2026-58106 Out-of-Bounds Write in c (CVE-2026-58106)
out-of-bounds write in c (CVE-2026-58106). Risk of unauthorized operations or information disclosure.
CVE-2026-58107 Vulnerability in dos (CVE-2026-58107)
vulnerability in dos (CVE-2026-58107). Risk of unauthorized operations or information disclosure.
CVE-2026-5096 SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-5096)
SSRF in wordpress (CVE-2026-5096). Risk of unauthorized operations or information disclosure.
CVE-2026-56854 Authorization Flaw in CVE-2026-56854 (CVE-2026-56854)
vulnerability in CVE-2026-56854 (CVE-2026-56854). Confidential information can be exposed externally.
CVE-2026-50979 Command Injection in CVE-2026-50979 (CVE-2026-50979)
command injection in CVE-2026-50979 (CVE-2026-50979). Confidential information can be exposed externally.
CVE-2026-4378 Cross-Site Scripting (XSS) in CVE-2026-4378 (CVE-2026-4378)
cross-site scripting in CVE-2026-4378 (CVE-2026-4378). Risk of unauthorized operations or information disclosure.
CVE-2026-3423 Cross-Site Scripting (XSS) in wordpress (CVE-2026-3423)
cross-site scripting in wordpress (CVE-2026-3423). Risk of unauthorized operations or information disclosure.
CVE-2026-38638 Vulnerability in dos (CVE-2026-38638)
vulnerability in dos (CVE-2026-38638). Risk of unauthorized operations or information disclosure.
CVE-2026-38725 Cross-Site Scripting (XSS) in CVE-2026-38725 (CVE-2026-38725)
cross-site scripting in CVE-2026-38725 (CVE-2026-38725). Risk of unauthorized operations or information disclosure.
CVE-2026-37751 OS Command Injection in CVE-2026-37751 (CVE-2026-37751)
OS command injection in CVE-2026-37751 (CVE-2026-37751). Successful exploitation can lead to full system takeover.
CVE-2026-37710 Cross-Site Scripting (XSS) in CVE-2026-37710 (CVE-2026-37710)
cross-site scripting in CVE-2026-37710 (CVE-2026-37710). Risk of unauthorized operations or information disclosure.
CVE-2026-38636 Vulnerability in dos (CVE-2026-38636)
vulnerability in dos (CVE-2026-38636). Risk of unauthorized operations or information disclosure.
CVE-2026-38093 Path Traversal in path-traversal (CVE-2026-38093)
path traversal in path-traversal (CVE-2026-38093). Risk of unauthorized operations or information disclosure.
CVE-2026-37237 Vulnerability in dos (CVE-2026-37237)
vulnerability in dos (CVE-2026-37237). Risk of unauthorized operations or information disclosure.
CVE-2026-37736 Vulnerability in dos (CVE-2026-37736)
vulnerability in dos (CVE-2026-37736). Risk of unauthorized operations or information disclosure.
CVE-2026-19412 Vulnerability in CVE-2026-19412 (CVE-2026-19412)
vulnerability in CVE-2026-19412 (CVE-2026-19412). Risk of unauthorized operations or information disclosure.
CVE-2026-55108 Vulnerability in github.com/oam-dev/kubevela (CVE-2026-55108)
vulnerability in github.com/oam-dev/kubevela (CVE-2026-55108). Risk of unauthorized operations or information disclosure. Exploitable via ``ComponentDefinition``. Mitigation: upgrade to `1.11.0-alpha.4` or later.
CVE-2026-54746 Vulnerability in github.com/hatchet-dev/hatchet (CVE-2026-54746)
vulnerability in github.com/hatchet-dev/hatchet (CVE-2026-54746). Risk of unauthorized operations or information disclosure. Exploitable via ``Dispatcher``. Mitigation: upgrade to `0.91.2` or later.
CVE-2026-82258 Vulnerability in CVE-2026-82258 (CVE-2026-82258)
vulnerability in CVE-2026-82258 (CVE-2026-82258). Risk of unauthorized operations or information disclosure.
CVE-2026-82259 Unsafe Deserialization in dos (CVE-2026-82259)
vulnerability in dos (CVE-2026-82259). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.53.3` or later.
CVE-2026-82260 Vulnerability in dos (CVE-2026-82260)
vulnerability in dos (CVE-2026-82260). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.52.2` or later.
CVE-2026-82257 Vulnerability in CVE-2026-82257 (CVE-2026-82257)
vulnerability in CVE-2026-82257 (CVE-2026-82257). Risk of unauthorized operations or information disclosure.
CVE-2026-82261 Vulnerability in dos (CVE-2026-82261)
vulnerability in dos (CVE-2026-82261). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.52.2` or later.
CVE-2026-82256 Vulnerability in dos (CVE-2026-82256)
vulnerability in dos (CVE-2026-82256). Risk of unauthorized operations or information disclosure.
CVE-2026-82251 Path Traversal in path-traversal (CVE-2026-82251)
path traversal in path-traversal (CVE-2026-82251). Confidential information can be exposed externally.
CVE-2026-82255 Vulnerability in CVE-2026-82255 (CVE-2026-82255)
vulnerability in CVE-2026-82255 (CVE-2026-82255). Confidential information can be exposed externally.
CVE-2026-82253 Path Traversal in path-traversal (CVE-2026-82253)
path traversal in path-traversal (CVE-2026-82253). Confidential information can be exposed externally.
CVE-2026-82252 Vulnerability in CVE-2026-82252 (CVE-2026-82252)
vulnerability in CVE-2026-82252 (CVE-2026-82252). Confidential information can be exposed externally.
CVE-2026-82245 Vulnerability in CVE-2026-82245 (CVE-2026-82245)
vulnerability in CVE-2026-82245 (CVE-2026-82245). Data can be tampered with by attackers.
CVE-2026-82242 Vulnerability in CVE-2026-82242 (CVE-2026-82242)
vulnerability in CVE-2026-82242 (CVE-2026-82242). Data can be tampered with by attackers. Exploitable via `POST /api/resources/duplicate`.
CVE-2026-82244 Code Injection in CVE-2026-82244 (CVE-2026-82244)
code injection in CVE-2026-82244 (CVE-2026-82244). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →