Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: vendors Clear
ID Title
CVE-2026-16291 Vulnerability in wordpress (CVE-2026-16291)
vulnerability in wordpress (CVE-2026-16291). Risk of unauthorized operations or information disclosure.
CVE-2026-16285 Vulnerability in wordpress (CVE-2026-16285)
vulnerability in wordpress (CVE-2026-16285). Confidential information can be exposed externally.
CVE-2026-16063 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16063)
cross-site scripting in wordpress (CVE-2026-16063). Risk of unauthorized operations or information disclosure.
CVE-2026-15248 Vulnerability in wordpress (CVE-2026-15248)
vulnerability in wordpress (CVE-2026-15248). Data can be tampered with by attackers.
CVE-2026-16273 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16273)
cross-site scripting in wordpress (CVE-2026-16273). Risk of unauthorized operations or information disclosure.
CVE-2026-16256 Privilege Escalation in wordpress (CVE-2026-16256)
vulnerability in wordpress (CVE-2026-16256). Successful exploitation can lead to full system takeover.
CVE-2026-16261 Authentication Bypass in wordpress (CVE-2026-16261)
authentication bypass in wordpress (CVE-2026-16261). Risk of unauthorized operations or information disclosure.
CVE-2026-16064 Authorization Flaw in wordpress (CVE-2026-16064)
vulnerability in wordpress (CVE-2026-16064). Risk of unauthorized operations or information disclosure.
CVE-2026-15385 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15385)
cross-site scripting in wordpress (CVE-2026-15385). Risk of unauthorized operations or information disclosure.
CVE-2026-15939 Authorization Flaw in wordpress (CVE-2026-15939)
vulnerability in wordpress (CVE-2026-15939). Risk of unauthorized operations or information disclosure.
CVE-2026-16042 Vulnerability in wordpress (CVE-2026-16042)
vulnerability in wordpress (CVE-2026-16042). Risk of unauthorized operations or information disclosure.
CVE-2026-15241 Vulnerability in wordpress (CVE-2026-15241)
vulnerability in wordpress (CVE-2026-15241). Confidential information can be exposed externally.
CVE-2026-15206 Authentication Bypass in wordpress (CVE-2026-15206)
authentication bypass in wordpress (CVE-2026-15206). Confidential information can be exposed externally.
CVE-2026-15236 Information Disclosure in wordpress (CVE-2026-15236)
vulnerability in wordpress (CVE-2026-15236). Confidential information can be exposed externally.
CVE-2026-15151 Vulnerability in wordpress (CVE-2026-15151)
vulnerability in wordpress (CVE-2026-15151). Confidential information can be exposed externally.
CVE-2026-16062 Unsafe Deserialization in wordpress (CVE-2026-16062)
vulnerability in wordpress (CVE-2026-16062). Successful exploitation can lead to full system takeover.
CVE-2026-14841 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14841)
cross-site scripting in wordpress (CVE-2026-14841). Risk of unauthorized operations or information disclosure.
CVE-2026-14817 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14817)
cross-site scripting in wordpress (CVE-2026-14817). Successful exploitation can lead to full system takeover.
CVE-2026-14938 Vulnerability in wordpress (CVE-2026-14938)
vulnerability in wordpress (CVE-2026-14938). Risk of unauthorized operations or information disclosure.
CVE-2026-14864 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14864)
cross-site scripting in wordpress (CVE-2026-14864). Risk of unauthorized operations or information disclosure.
CVE-2026-13389 Vulnerability in wordpress (CVE-2026-13389)
vulnerability in wordpress (CVE-2026-13389). Risk of unauthorized operations or information disclosure.
CVE-2026-12586 Authentication Bypass in wordpress (CVE-2026-12586)
authentication bypass in wordpress (CVE-2026-12586). Successful exploitation can lead to full system takeover.
CVE-2025-15675 Cross-Site Scripting (XSS) in wordpress (CVE-2025-15675)
cross-site scripting in wordpress (CVE-2025-15675). Risk of unauthorized operations or information disclosure.
CVE-2026-11872 Vulnerability in wordpress (CVE-2026-11872)
vulnerability in wordpress (CVE-2026-11872). Risk of unauthorized operations or information disclosure.
CVE-2026-8457 Vulnerability in wordpress (CVE-2026-8457)
vulnerability in wordpress (CVE-2026-8457). Successful exploitation can lead to full system takeover.
CVE-2026-18352 Path Traversal in wordpress (CVE-2026-18352)
path traversal in wordpress (CVE-2026-18352). Confidential information can be exposed externally.
CVE-2026-13339 Path Traversal in wordpress (CVE-2026-13339)
path traversal in wordpress (CVE-2026-13339). Confidential information can be exposed externally.
CVE-2026-18556 KEV [KEV] Vulnerability in N-able n-central (CVE-2026-18556)
vulnerability in N-able n-central (CVE-2026-18556). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
CVE-2026-67340 Code Injection in CVE-2026-67340 (CVE-2026-67340)
code injection in CVE-2026-67340 (CVE-2026-67340). Successful exploitation can lead to full system takeover.
CVE-2026-6453 SQL Injection in wordpress (CVE-2026-6453)
SQL injection in wordpress (CVE-2026-6453). Confidential information can be exposed externally.
CVE-2026-18435 Cross-Site Scripting (XSS) in wordpress (CVE-2026-18435)
cross-site scripting in wordpress (CVE-2026-18435). Risk of unauthorized operations or information disclosure.
CVE-2026-18062 Cross-Site Scripting (XSS) in wordpress (CVE-2026-18062)
cross-site scripting in wordpress (CVE-2026-18062). Risk of unauthorized operations or information disclosure.
CVE-2026-18344 Cross-Site Scripting (XSS) in wordpress (CVE-2026-18344)
cross-site scripting in wordpress (CVE-2026-18344). Risk of unauthorized operations or information disclosure.
CVE-2026-18059 Information Disclosure in wordpress (CVE-2026-18059)
vulnerability in wordpress (CVE-2026-18059). Risk of unauthorized operations or information disclosure.
CVE-2026-17571 Cross-Site Scripting (XSS) in wordpress (CVE-2026-17571)
cross-site scripting in wordpress (CVE-2026-17571). Risk of unauthorized operations or information disclosure.
CVE-2026-17555 SQL Injection in wordpress (CVE-2026-17555)
SQL injection in wordpress (CVE-2026-17555). Confidential information can be exposed externally.
CVE-2026-16685 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16685)
cross-site scripting in wordpress (CVE-2026-16685). Risk of unauthorized operations or information disclosure.
CVE-2026-16684 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16684)
cross-site scripting in wordpress (CVE-2026-16684). Risk of unauthorized operations or information disclosure.
CVE-2026-17605 Vulnerability in wordpress (CVE-2026-17605)
vulnerability in wordpress (CVE-2026-17605). Successful exploitation can lead to full system takeover.
CVE-2026-17580 Vulnerability in wordpress (CVE-2026-17580)
vulnerability in wordpress (CVE-2026-17580). Confidential information can be exposed externally.
CVE-2026-16635 Privilege Escalation in wordpress (CVE-2026-16635)
vulnerability in wordpress (CVE-2026-16635). Successful exploitation can lead to full system takeover.
CVE-2026-16614 SQL Injection in wordpress (CVE-2026-16614)
SQL injection in wordpress (CVE-2026-16614). Confidential information can be exposed externally.
CVE-2026-16144 Code Injection in wordpress (CVE-2026-16144)
code injection in wordpress (CVE-2026-16144). Successful exploitation can lead to full system takeover.
CVE-2026-16091 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16091)
cross-site scripting in wordpress (CVE-2026-16091). Risk of unauthorized operations or information disclosure.
CVE-2026-16090 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16090)
cross-site scripting in wordpress (CVE-2026-16090). Risk of unauthorized operations or information disclosure.
CVE-2026-16087 SQL Injection in wordpress (CVE-2026-16087)
SQL injection in wordpress (CVE-2026-16087). Confidential information can be exposed externally.
CVE-2026-15964 Vulnerability in wordpress (CVE-2026-15964)
vulnerability in wordpress (CVE-2026-15964). Successful exploitation can lead to full system takeover. Exploitable via ``wp_ajax_nopriv_ssoprocess_ajax``.
CVE-2026-15951 SQL Injection in wordpress (CVE-2026-15951)
SQL injection in wordpress (CVE-2026-15951). Confidential information can be exposed externally. Exploitable via ``fields``.
CVE-2026-15950 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15950)
cross-site scripting in wordpress (CVE-2026-15950). Risk of unauthorized operations or information disclosure.
CVE-2026-15662 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15662)
cross-site scripting in wordpress (CVE-2026-15662). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →