Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: vendors Clear
ID Title
CVE-2026-39644 Vulnerability in wordpress (CVE-2026-39644)
vulnerability in wordpress (CVE-2026-39644). Risk of unauthorized operations or information disclosure.
CVE-2026-39623 Vulnerability in CVE-2026-39623 (CVE-2026-39623)
vulnerability in CVE-2026-39623 (CVE-2026-39623). Successful exploitation can lead to full system takeover.
CVE-2026-39613 Vulnerability in CVE-2026-39613 (CVE-2026-39613)
vulnerability in CVE-2026-39613 (CVE-2026-39613). Successful exploitation can lead to full system takeover.
CVE-2026-39614 Vulnerability in wordpress (CVE-2026-39614)
vulnerability in wordpress (CVE-2026-39614). Risk of unauthorized operations or information disclosure.
CVE-2026-39611 Vulnerability in CVE-2026-39611 (CVE-2026-39611)
vulnerability in CVE-2026-39611 (CVE-2026-39611). Successful exploitation can lead to full system takeover.
CVE-2026-39544 Vulnerability in CVE-2026-39544 (CVE-2026-39544)
vulnerability in CVE-2026-39544 (CVE-2026-39544). Successful exploitation can lead to full system takeover.
CVE-2026-39538 Vulnerability in CVE-2026-39538 (CVE-2026-39538)
vulnerability in CVE-2026-39538 (CVE-2026-39538). Successful exploitation can lead to full system takeover.
CVE-2026-39466 SQL Injection in wordpress (CVE-2026-39466)
SQL injection in wordpress (CVE-2026-39466). Confidential information can be exposed externally.
CVE-2026-1396 Cross-Site Scripting (XSS) in wordpress (CVE-2026-1396)
cross-site scripting in wordpress (CVE-2026-1396). Risk of unauthorized operations or information disclosure.
CVE-2026-4654 Vulnerability in wordpress (CVE-2026-4654)
vulnerability in wordpress (CVE-2026-4654). Risk of unauthorized operations or information disclosure.
CVE-2026-4655 Cross-Site Scripting (XSS) in wordpress (CVE-2026-4655)
cross-site scripting in wordpress (CVE-2026-4655). Risk of unauthorized operations or information disclosure.
CVE-2026-4330 Vulnerability in wordpress (CVE-2026-4330)
vulnerability in wordpress (CVE-2026-4330). Risk of unauthorized operations or information disclosure.
CVE-2026-5169 Cross-Site Scripting (XSS) in wordpress (CVE-2026-5169)
cross-site scripting in wordpress (CVE-2026-5169). Risk of unauthorized operations or information disclosure.
CVE-2026-5506 Cross-Site Scripting (XSS) in wordpress (CVE-2026-5506)
cross-site scripting in wordpress (CVE-2026-5506). Risk of unauthorized operations or information disclosure. Exploitable via ``wave``.
CVE-2026-5508 Cross-Site Scripting (XSS) in wordpress (CVE-2026-5508)
cross-site scripting in wordpress (CVE-2026-5508). Risk of unauthorized operations or information disclosure. Exploitable via ``wowpress``.
CVE-2026-4808 Unrestricted File Upload in wordpress (CVE-2026-4808)
vulnerability in wordpress (CVE-2026-4808). Successful exploitation can lead to full system takeover.
CVE-2026-4338 Vulnerability in wordpress (CVE-2026-4338)
vulnerability in wordpress (CVE-2026-4338). Confidential information can be exposed externally.
CVE-2026-4871 Cross-Site Scripting (XSS) in wordpress (CVE-2026-4871)
cross-site scripting in wordpress (CVE-2026-4871). Risk of unauthorized operations or information disclosure. Exploitable via ``scm_member_data``.
CVE-2026-5167 Vulnerability in wordpress (CVE-2026-5167)
vulnerability in wordpress (CVE-2026-5167). Risk of unauthorized operations or information disclosure.
CVE-2026-3781 SQL Injection in wordpress (CVE-2026-3781)
SQL injection in wordpress (CVE-2026-3781). Risk of unauthorized operations or information disclosure.
CVE-2026-4141 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-4141)
vulnerability in wordpress (CVE-2026-4141). Risk of unauthorized operations or information disclosure.
CVE-2026-3535 Unrestricted File Upload in wordpress (CVE-2026-3535)
vulnerability in wordpress (CVE-2026-3535). Successful exploitation can lead to full system takeover. Exploitable via ``wp_ajax_nopriv_``.
CVE-2026-3477 Vulnerability in wordpress (CVE-2026-3477)
vulnerability in wordpress (CVE-2026-3477). Risk of unauthorized operations or information disclosure.
CVE-2026-3480 Vulnerability in wordpress (CVE-2026-3480)
vulnerability in wordpress (CVE-2026-3480). Confidential information can be exposed externally.
CVE-2026-3594 Information Disclosure in wordpress (CVE-2026-3594)
vulnerability in wordpress (CVE-2026-3594). Risk of unauthorized operations or information disclosure.
CVE-2026-3618 Cross-Site Scripting (XSS) in wordpress (CVE-2026-3618)
cross-site scripting in wordpress (CVE-2026-3618). Risk of unauthorized operations or information disclosure.
CVE-2026-2838 Cross-Site Scripting (XSS) in wordpress (CVE-2026-2838)
cross-site scripting in wordpress (CVE-2026-2838). Risk of unauthorized operations or information disclosure.
CVE-2026-3142 Cross-Site Scripting (XSS) in wordpress (CVE-2026-3142)
cross-site scripting in wordpress (CVE-2026-3142). Risk of unauthorized operations or information disclosure.
CVE-2025-1794 Cross-Site Scripting (XSS) in wordpress (CVE-2025-1794)
cross-site scripting in wordpress (CVE-2025-1794). Risk of unauthorized operations or information disclosure.
CVE-2026-3646 Vulnerability in wordpress (CVE-2026-3646)
vulnerability in wordpress (CVE-2026-3646). Risk of unauthorized operations or information disclosure.
CVE-2026-4341 Cross-Site Scripting (XSS) in wordpress (CVE-2026-4341)
cross-site scripting in wordpress (CVE-2026-4341). Risk of unauthorized operations or information disclosure. Exploitable via ``follow_us_text``.
CVE-2026-4299 Vulnerability in wordpress (CVE-2026-4299)
vulnerability in wordpress (CVE-2026-4299). Risk of unauthorized operations or information disclosure.
CVE-2026-4333 Cross-Site Scripting (XSS) in wordpress (CVE-2026-4333)
cross-site scripting in wordpress (CVE-2026-4333). Risk of unauthorized operations or information disclosure.
CVE-2026-4003 Vulnerability in wordpress (CVE-2026-4003)
vulnerability in wordpress (CVE-2026-4003). Successful exploitation can lead to full system takeover.
CVE-2026-4785 Cross-Site Scripting (XSS) in wordpress (CVE-2026-4785)
cross-site scripting in wordpress (CVE-2026-4785). Risk of unauthorized operations or information disclosure.
CVE-2026-3513 Cross-Site Scripting (XSS) in wordpress (CVE-2026-3513)
cross-site scripting in wordpress (CVE-2026-3513). Risk of unauthorized operations or information disclosure.
CVE-2026-3600 Cross-Site Scripting (XSS) in wordpress (CVE-2026-3600)
cross-site scripting in wordpress (CVE-2026-3600). Risk of unauthorized operations or information disclosure.
CVE-2026-3239 Cross-Site Scripting (XSS) in wordpress (CVE-2026-3239)
cross-site scripting in wordpress (CVE-2026-3239). Risk of unauthorized operations or information disclosure.
CVE-2026-4379 Cross-Site Scripting (XSS) in wordpress (CVE-2026-4379)
cross-site scripting in wordpress (CVE-2026-4379). Risk of unauthorized operations or information disclosure. Exploitable via ``group``.
CVE-2026-2988 Cross-Site Scripting (XSS) in wordpress (CVE-2026-2988)
cross-site scripting in wordpress (CVE-2026-2988). Risk of unauthorized operations or information disclosure.
CVE-2026-3296 Unsafe Deserialization in wordpress (CVE-2026-3296)
vulnerability in wordpress (CVE-2026-3296). Successful exploitation can lead to full system takeover.
CVE-2026-3499 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-3499)
vulnerability in wordpress (CVE-2026-3499). Successful exploitation can lead to full system takeover.
CVE-2025-14732 Vulnerability in wordpress (CVE-2025-14732)
vulnerability in wordpress (CVE-2025-14732). Risk of unauthorized operations or information disclosure.
CVE-2026-3357 Unsafe Deserialization in deserialization (CVE-2026-3357)
vulnerability in deserialization (CVE-2026-3357). Successful exploitation can lead to full system takeover.
CVE-2026-4788 Vulnerability in ibm (CVE-2026-4788)
vulnerability in ibm (CVE-2026-4788). Successful exploitation can lead to full system takeover.
CVE-2026-1343 SSRF (Server-Side Request Forgery) in ibm (CVE-2026-1343)
SSRF in ibm (CVE-2026-1343). Risk of unauthorized operations or information disclosure.
CVE-2026-1346 Vulnerability in ibm (CVE-2026-1346)
vulnerability in ibm (CVE-2026-1346). Successful exploitation can lead to full system takeover.
CVE-2026-39370 SSRF (Server-Side Request Forgery) in WWBN/AVideo (CVE-2026-39370)
SSRF in WWBN/AVideo (CVE-2026-39370). Confidential information can be exposed externally. Exploitable via `POST /objects/aVideoEncoder.json.php`.
CVE-2026-39369 Path Traversal in WWBN/AVideo (CVE-2026-39369)
path traversal in WWBN/AVideo (CVE-2026-39369). Confidential information can be exposed externally. Exploitable via `POST /objects/aVideoEncoderReceiveImage.json.php`.
CVE-2026-1340 KEV [KEV] Code Injection in Ivanti endpoint-manager-mobile-epmm (CVE-2026-1340)
code injection in Ivanti endpoint-manager-mobile-epmm (CVE-2026-1340). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →