Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cwe Clear
ID Title
CVE-2026-11447 Vulnerability in CVE-2026-11447 (CVE-2026-11447)
vulnerability in CVE-2026-11447 (CVE-2026-11447). Risk of unauthorized operations or information disclosure.
CVE-2026-26422 Vulnerability in privilege-escalation (CVE-2026-26422)
vulnerability in privilege-escalation (CVE-2026-26422). Successful exploitation can lead to full system takeover.
CVE-2026-11437 SSRF (Server-Side Request Forgery) in CVE-2026-11437 (CVE-2026-11437)
SSRF in CVE-2026-11437 (CVE-2026-11437). Risk of unauthorized operations or information disclosure.
CVE-2026-11438 Vulnerability in CVE-2026-11438 (CVE-2026-11438)
vulnerability in CVE-2026-11438 (CVE-2026-11438). Risk of unauthorized operations or information disclosure.
CVE-2026-11440 Vulnerability in CVE-2026-11440 (CVE-2026-11440)
vulnerability in CVE-2026-11440 (CVE-2026-11440). Risk of unauthorized operations or information disclosure.
CVE-2026-11439 Vulnerability in CVE-2026-11439 (CVE-2026-11439)
vulnerability in CVE-2026-11439 (CVE-2026-11439). Risk of unauthorized operations or information disclosure.
CVE-2026-11441 Vulnerability in CVE-2026-11441 (CVE-2026-11441)
vulnerability in CVE-2026-11441 (CVE-2026-11441). Risk of unauthorized operations or information disclosure.
CVE-2026-11436 Cross-Site Scripting (XSS) in CVE-2026-11436 (CVE-2026-11436)
cross-site scripting in CVE-2026-11436 (CVE-2026-11436). Risk of unauthorized operations or information disclosure.
CVE-2026-11435 Vulnerability in sqli (CVE-2026-11435)
vulnerability in sqli (CVE-2026-11435). Risk of unauthorized operations or information disclosure.
CVE-2026-11434 Cross-Site Scripting (XSS) in CVE-2026-11434 (CVE-2026-11434)
cross-site scripting in CVE-2026-11434 (CVE-2026-11434). Risk of unauthorized operations or information disclosure.
CVE-2026-11413 Buffer Overflow in CVE-2026-11413 (CVE-2026-11413)
vulnerability in CVE-2026-11413 (CVE-2026-11413). Successful exploitation can lead to full system takeover.
CVE-2026-11412 Vulnerability in sqli (CVE-2026-11412)
vulnerability in sqli (CVE-2026-11412). Risk of unauthorized operations or information disclosure.
CVE-2026-11408 Command Injection in CVE-2026-11408 (CVE-2026-11408)
command injection in CVE-2026-11408 (CVE-2026-11408). Risk of unauthorized operations or information disclosure.
CVE-2026-11411 Path Traversal in path-traversal (CVE-2026-11411)
path traversal in path-traversal (CVE-2026-11411). Risk of unauthorized operations or information disclosure.
CVE-2026-11406 Vulnerability in CVE-2026-11406 (CVE-2026-11406)
vulnerability in CVE-2026-11406 (CVE-2026-11406). Risk of unauthorized operations or information disclosure.
CVE-2026-9829 SQL Injection in wordpress (CVE-2026-9829)
SQL injection in wordpress (CVE-2026-9829). Confidential information can be exposed externally.
CVE-2026-9594 Cross-Site Scripting (XSS) in wordpress (CVE-2026-9594)
cross-site scripting in wordpress (CVE-2026-9594). Risk of unauthorized operations or information disclosure.
CVE-2026-7624 Vulnerability in wordpress (CVE-2026-7624)
vulnerability in wordpress (CVE-2026-7624). Risk of unauthorized operations or information disclosure. Exploitable via ``sq_manage_settings``.
CVE-2026-8502 Vulnerability in wordpress (CVE-2026-8502)
vulnerability in wordpress (CVE-2026-8502). Risk of unauthorized operations or information disclosure.
CVE-2026-9197 Path Traversal in wordpress (CVE-2026-9197)
path traversal in wordpress (CVE-2026-9197). Confidential information can be exposed externally.
CVE-2026-8978 SQL Injection in wordpress (CVE-2026-8978)
SQL injection in wordpress (CVE-2026-8978). Confidential information can be exposed externally.
CVE-2026-7796 Cross-Site Scripting (XSS) in wordpress (CVE-2026-7796)
cross-site scripting in wordpress (CVE-2026-7796). Risk of unauthorized operations or information disclosure.
CVE-2026-8991 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8991)
cross-site scripting in wordpress (CVE-2026-8991). Risk of unauthorized operations or information disclosure.
CVE-2026-9280 Cross-Site Scripting (XSS) in wordpress (CVE-2026-9280)
cross-site scripting in wordpress (CVE-2026-9280). Risk of unauthorized operations or information disclosure.
CVE-2026-7795 Cross-Site Scripting (XSS) in wordpress (CVE-2026-7795)
cross-site scripting in wordpress (CVE-2026-7795). Risk of unauthorized operations or information disclosure.
CVE-2026-7566 Unsafe Deserialization in wordpress (CVE-2026-7566)
vulnerability in wordpress (CVE-2026-7566). Successful exploitation can lead to full system takeover.
CVE-2026-7565 Path Traversal in wordpress (CVE-2026-7565)
path traversal in wordpress (CVE-2026-7565). Confidential information can be exposed externally.
CVE-2026-7537 Unrestricted File Upload in wordpress (CVE-2026-7537)
vulnerability in wordpress (CVE-2026-7537). Successful exploitation can lead to full system takeover.
CVE-2026-2500 Path Traversal in csharp (CVE-2026-2500)
path traversal in csharp (CVE-2026-2500). Confidential information can be exposed externally. Exploitable via ``filename``.
CVE-2026-9008 Vulnerability in wordpress (CVE-2026-9008)
vulnerability in wordpress (CVE-2026-9008). Risk of unauthorized operations or information disclosure.
CVE-2026-8901 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8901)
cross-site scripting in wordpress (CVE-2026-8901). Risk of unauthorized operations or information disclosure.
CVE-2026-9281 Cross-Site Scripting (XSS) in wordpress (CVE-2026-9281)
cross-site scripting in wordpress (CVE-2026-9281). Risk of unauthorized operations or information disclosure.
CVE-2026-8438 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8438)
cross-site scripting in wordpress (CVE-2026-8438). Risk of unauthorized operations or information disclosure.
CVE-2026-8900 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8900)
cross-site scripting in wordpress (CVE-2026-8900). Risk of unauthorized operations or information disclosure.
CVE-2026-9719 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-9719)
vulnerability in wordpress (CVE-2026-9719). Risk of unauthorized operations or information disclosure.
CVE-2026-8976 Vulnerability in wordpress (CVE-2026-8976)
vulnerability in wordpress (CVE-2026-8976). Risk of unauthorized operations or information disclosure.
CVE-2026-9290 Path Traversal in wordpress (CVE-2026-9290)
path traversal in wordpress (CVE-2026-9290). Confidential information can be exposed externally.
CVE-2026-6448 SQL Injection in wordpress (CVE-2026-6448)
SQL injection in wordpress (CVE-2026-6448). Confidential information can be exposed externally.
CVE-2026-8893 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8893)
cross-site scripting in wordpress (CVE-2026-8893). Risk of unauthorized operations or information disclosure.
CVE-2026-6240 Vulnerability in dos (CVE-2026-6240)
vulnerability in dos (CVE-2026-6240). Risk of unauthorized operations or information disclosure.
CVE-2026-7047 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-7047)
vulnerability in wordpress (CVE-2026-7047). Risk of unauthorized operations or information disclosure.
CVE-2026-6241 Vulnerability in dos (CVE-2026-6241)
vulnerability in dos (CVE-2026-6241). Risk of unauthorized operations or information disclosure.
CVE-2026-6242 Vulnerability in CVE-2026-6242 (CVE-2026-6242)
vulnerability in CVE-2026-6242 (CVE-2026-6242). Risk of unauthorized operations or information disclosure.
CVE-2025-12656 Vulnerability in wordpress (CVE-2025-12656)
vulnerability in wordpress (CVE-2025-12656). Risk of unauthorized operations or information disclosure.
CVE-2026-34123 Authentication Bypass in CVE-2026-34123 (CVE-2026-34123)
authentication bypass in CVE-2026-34123 (CVE-2026-34123). Risk of unauthorized operations or information disclosure.
CVE-2026-6239 Vulnerability in dos (CVE-2026-6239)
vulnerability in dos (CVE-2026-6239). Risk of unauthorized operations or information disclosure.
CVE-2026-7523 Vulnerability in wordpress (CVE-2026-7523)
vulnerability in wordpress (CVE-2026-7523). Risk of unauthorized operations or information disclosure.
CVE-2026-7654 Unsafe Deserialization in wordpress (CVE-2026-7654)
vulnerability in wordpress (CVE-2026-7654). Successful exploitation can lead to full system takeover. Exploitable via ``allowed_classes``.
CVE-2026-11424 Information Disclosure in ssrf (CVE-2026-11424)
vulnerability in ssrf (CVE-2026-11424). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.1.1` or later.
CVE-2026-11416 Path Traversal in path-traversal (CVE-2026-11416)
path traversal in path-traversal (CVE-2026-11416). Data can be tampered with by attackers.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →