Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cwe Tag: wordpress Clear
ID Title
CVE-2026-15369 Privilege Escalation in wordpress (CVE-2026-15369)
vulnerability in wordpress (CVE-2026-15369). Successful exploitation can lead to full system takeover.
CVE-2026-75807 Authentication Bypass in wordpress (CVE-2026-75807)
authentication bypass in wordpress (CVE-2026-75807). Successful exploitation can lead to full system takeover.
CVE-2026-14494 Unrestricted File Upload in wordpress (CVE-2026-14494)
vulnerability in wordpress (CVE-2026-14494). Successful exploitation can lead to full system takeover.
CVE-2026-6176 Cross-Site Scripting (XSS) in wordpress (CVE-2026-6176)
cross-site scripting in wordpress (CVE-2026-6176). Risk of unauthorized operations or information disclosure.
CVE-2026-5934 Cross-Site Scripting (XSS) in wordpress (CVE-2026-5934)
cross-site scripting in wordpress (CVE-2026-5934). Risk of unauthorized operations or information disclosure.
CVE-2026-5096 SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-5096)
SSRF in wordpress (CVE-2026-5096). Risk of unauthorized operations or information disclosure.
CVE-2026-3423 Cross-Site Scripting (XSS) in wordpress (CVE-2026-3423)
cross-site scripting in wordpress (CVE-2026-3423). Risk of unauthorized operations or information disclosure.
CVE-2026-5510 Cross-Site Scripting (XSS) in wordpress (CVE-2026-5510)
cross-site scripting in wordpress (CVE-2026-5510). Risk of unauthorized operations or information disclosure.
CVE-2026-6128 Cross-Site Scripting (XSS) in wordpress (CVE-2026-6128)
cross-site scripting in wordpress (CVE-2026-6128). Risk of unauthorized operations or information disclosure.
CVE-2026-79706 Unrestricted File Upload in wordpress (CVE-2026-79706)
vulnerability in wordpress (CVE-2026-79706). Risk of unauthorized operations or information disclosure.
CVE-2026-79996 Privilege Escalation in wordpress (CVE-2026-79996)
vulnerability in wordpress (CVE-2026-79996). Successful exploitation can lead to full system takeover.
CVE-2026-5097 SQL Injection in wordpress (CVE-2026-5097)
SQL injection in wordpress (CVE-2026-5097). Confidential information can be exposed externally.
CVE-2026-6286 Cross-Site Scripting (XSS) in wordpress (CVE-2026-6286)
cross-site scripting in wordpress (CVE-2026-6286). Risk of unauthorized operations or information disclosure.
CVE-2026-77701 Vulnerability in wordpress (CVE-2026-77701)
vulnerability in wordpress (CVE-2026-77701). Risk of unauthorized operations or information disclosure.
CVE-2026-76581 Vulnerability in wordpress (CVE-2026-76581)
vulnerability in wordpress (CVE-2026-76581). Successful exploitation can lead to full system takeover. Exploitable via ``wdpsso_step1``.
CVE-2026-12513 Vulnerability in wordpress (CVE-2026-12513)
vulnerability in wordpress (CVE-2026-12513). Data can be tampered with by attackers.
CVE-2026-4246 Cross-Site Scripting (XSS) in wordpress (CVE-2026-4246)
cross-site scripting in wordpress (CVE-2026-4246). Risk of unauthorized operations or information disclosure.
CVE-2026-14558 Unsafe Deserialization in wordpress (CVE-2026-14558)
vulnerability in wordpress (CVE-2026-14558). Successful exploitation can lead to full system takeover.
CVE-2026-19084 Vulnerability in wordpress (CVE-2026-19084)
vulnerability in wordpress (CVE-2026-19084). Confidential information can be exposed externally.
CVE-2026-19423 Privilege Escalation in wordpress (CVE-2026-19423)
vulnerability in wordpress (CVE-2026-19423). Successful exploitation can lead to full system takeover.
CVE-2026-12514 Vulnerability in wordpress (CVE-2026-12514)
vulnerability in wordpress (CVE-2026-12514). Risk of unauthorized operations or information disclosure.
CVE-2026-14567 Information Disclosure in wordpress (CVE-2026-14567)
vulnerability in wordpress (CVE-2026-14567). Risk of unauthorized operations or information disclosure.
CVE-2026-76053 Cross-Site Scripting (XSS) in wordpress (CVE-2026-76053)
cross-site scripting in wordpress (CVE-2026-76053). Risk of unauthorized operations or information disclosure.
CVE-2026-77365 Cross-Site Scripting (XSS) in wordpress (CVE-2026-77365)
cross-site scripting in wordpress (CVE-2026-77365). Risk of unauthorized operations or information disclosure.
CVE-2026-3129 Cross-Site Scripting (XSS) in wordpress (CVE-2026-3129)
cross-site scripting in wordpress (CVE-2026-3129). Risk of unauthorized operations or information disclosure. Exploitable via ``width``.
CVE-2026-18983 Unrestricted File Upload in wordpress (CVE-2026-18983)
vulnerability in wordpress (CVE-2026-18983). Successful exploitation can lead to full system takeover.
CVE-2026-16654 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16654)
cross-site scripting in wordpress (CVE-2026-16654). Risk of unauthorized operations or information disclosure.
CVE-2026-18324 Cross-Site Scripting (XSS) in wordpress (CVE-2026-18324)
cross-site scripting in wordpress (CVE-2026-18324). Risk of unauthorized operations or information disclosure.
CVE-2026-18978 Cross-Site Scripting (XSS) in wordpress (CVE-2026-18978)
cross-site scripting in wordpress (CVE-2026-18978). Risk of unauthorized operations or information disclosure.
CVE-2026-15798 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15798)
cross-site scripting in wordpress (CVE-2026-15798). Risk of unauthorized operations or information disclosure.
CVE-2026-16759 Vulnerability in wordpress (CVE-2026-16759)
vulnerability in wordpress (CVE-2026-16759). Risk of unauthorized operations or information disclosure.
CVE-2026-19092 Vulnerability in wordpress (CVE-2026-19092)
vulnerability in wordpress (CVE-2026-19092). Successful exploitation can lead to full system takeover.
CVE-2026-32564 Subscriber SQL Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.
Subscriber SQL Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.
CVE-2026-78333 Cross-Site Scripting (XSS) in wordpress (CVE-2026-78333)
cross-site scripting in wordpress (CVE-2026-78333). Successful exploitation can lead to full system takeover.
CVE-2026-78138 Information Disclosure in wordpress (CVE-2026-78138)
vulnerability in wordpress (CVE-2026-78138). Risk of unauthorized operations or information disclosure.
CVE-2026-78125 Information Disclosure in wordpress (CVE-2026-78125)
vulnerability in wordpress (CVE-2026-78125). Risk of unauthorized operations or information disclosure.
CVE-2026-77018 Unrestricted File Upload in wordpress (CVE-2026-77018)
vulnerability in wordpress (CVE-2026-77018). Successful exploitation can lead to full system takeover.
CVE-2026-78137 Vulnerability in wordpress (CVE-2026-78137)
vulnerability in wordpress (CVE-2026-78137). Data can be tampered with by attackers.
CVE-2026-77016 Vulnerability in wordpress (CVE-2026-77016)
vulnerability in wordpress (CVE-2026-77016). Data can be tampered with by attackers.
CVE-2026-76549 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-76549)
vulnerability in wordpress (CVE-2026-76549). Data can be tampered with by attackers.
CVE-2026-77017 Information Disclosure in wordpress (CVE-2026-77017)
vulnerability in wordpress (CVE-2026-77017). Confidential information can be exposed externally.
CVE-2026-13416 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13416)
cross-site scripting in wordpress (CVE-2026-13416). Risk of unauthorized operations or information disclosure.
CVE-2026-19454 Authorization Flaw in wordpress (CVE-2026-19454)
vulnerability in wordpress (CVE-2026-19454). Confidential information can be exposed externally.
CVE-2026-16569 Vulnerability in wordpress (CVE-2026-16569)
vulnerability in wordpress (CVE-2026-16569). Risk of unauthorized operations or information disclosure.
CVE-2026-19225 Code Injection in wordpress (CVE-2026-19225)
code injection in wordpress (CVE-2026-19225). Successful exploitation can lead to full system takeover.
CVE-2026-19223 Code Injection in wordpress (CVE-2026-19223)
code injection in wordpress (CVE-2026-19223). Successful exploitation can lead to full system takeover.
CVE-2026-13415 Privilege Escalation in wordpress (CVE-2026-13415)
vulnerability in wordpress (CVE-2026-13415). Successful exploitation can lead to full system takeover.
CVE-2026-19715 Information Disclosure in wordpress (CVE-2026-19715)
vulnerability in wordpress (CVE-2026-19715). Confidential information can be exposed externally.
CVE-2026-13414 Vulnerability in wordpress (CVE-2026-13414)
vulnerability in wordpress (CVE-2026-13414). Risk of unauthorized operations or information disclosure.
CVE-2026-15990 Path Traversal in wordpress (CVE-2026-15990)
path traversal in wordpress (CVE-2026-15990). Confidential information can be exposed externally.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →