Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: web-frameworks Clear
ID Title
CVE-2026-9810 Privilege Escalation in wordpress (CVE-2026-9810)
vulnerability in wordpress (CVE-2026-9810). Successful exploitation can lead to full system takeover.
CVE-2026-13402 Information Disclosure in wordpress (CVE-2026-13402)
vulnerability in wordpress (CVE-2026-13402). Risk of unauthorized operations or information disclosure.
CVE-2026-12393 Vulnerability in wordpress (CVE-2026-12393)
vulnerability in wordpress (CVE-2026-12393). Risk of unauthorized operations or information disclosure.
CVE-2026-11966 Vulnerability in wordpress (CVE-2026-11966)
vulnerability in wordpress (CVE-2026-11966). Risk of unauthorized operations or information disclosure.
CVE-2026-11961 Privilege Escalation in wordpress (CVE-2026-11961)
vulnerability in wordpress (CVE-2026-11961). Successful exploitation can lead to full system takeover.
CVE-2026-11575 Vulnerability in wordpress (CVE-2026-11575)
vulnerability in wordpress (CVE-2026-11575). Data can be tampered with by attackers.
CVE-2026-10525 Cross-Site Scripting (XSS) in wordpress (CVE-2026-10525)
cross-site scripting in wordpress (CVE-2026-10525). Risk of unauthorized operations or information disclosure.
CVE-2026-15982 Privilege Escalation in wordpress (CVE-2026-15982)
vulnerability in wordpress (CVE-2026-15982). Successful exploitation can lead to full system takeover.
CVE-2026-15094 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15094)
cross-site scripting in wordpress (CVE-2026-15094). Risk of unauthorized operations or information disclosure.
CVE-2026-15759 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15759)
cross-site scripting in wordpress (CVE-2026-15759). Risk of unauthorized operations or information disclosure.
CVE-2026-15457 Path Traversal in wordpress (CVE-2026-15457)
path traversal in wordpress (CVE-2026-15457). Confidential information can be exposed externally.
CVE-2026-15349 Vulnerability in wordpress (CVE-2026-15349)
vulnerability in wordpress (CVE-2026-15349). Risk of unauthorized operations or information disclosure.
CVE-2026-15161 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15161)
cross-site scripting in wordpress (CVE-2026-15161). Risk of unauthorized operations or information disclosure.
CVE-2026-14503 Information Disclosure in wordpress (CVE-2026-14503)
vulnerability in wordpress (CVE-2026-14503). Confidential information can be exposed externally.
CVE-2026-13765 Vulnerability in wordpress (CVE-2026-13765)
vulnerability in wordpress (CVE-2026-13765). Confidential information can be exposed externally.
CVE-2026-13352 Unrestricted File Upload in wordpress (CVE-2026-13352)
vulnerability in wordpress (CVE-2026-13352). Successful exploitation can lead to full system takeover.
CVE-2026-8616 Vulnerability in wordpress (CVE-2026-8616)
vulnerability in wordpress (CVE-2026-8616). Risk of unauthorized operations or information disclosure.
CVE-2026-15395 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15395)
cross-site scripting in wordpress (CVE-2026-15395). Risk of unauthorized operations or information disclosure.
CVE-2026-15160 Path Traversal in wordpress (CVE-2026-15160)
path traversal in wordpress (CVE-2026-15160). Risk of unauthorized operations or information disclosure.
CVE-2026-15159 Vulnerability in wordpress (CVE-2026-15159)
vulnerability in wordpress (CVE-2026-15159). Risk of unauthorized operations or information disclosure.
CVE-2026-11324 Cross-Site Scripting (XSS) in wordpress (CVE-2026-11324)
cross-site scripting in wordpress (CVE-2026-11324). Risk of unauthorized operations or information disclosure.
CVE-2026-2594 Cross-Site Scripting (XSS) in wordpress (CVE-2026-2594)
cross-site scripting in wordpress (CVE-2026-2594). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.0.7` or later.
CVE-2026-14956 Privilege Escalation in wordpress (CVE-2026-14956)
vulnerability in wordpress (CVE-2026-14956). Successful exploitation can lead to full system takeover.
CVE-2026-14782 SQL Injection in wordpress (CVE-2026-14782)
SQL injection in wordpress (CVE-2026-14782). Confidential information can be exposed externally.
CVE-2026-45336 Vulnerability in flask (CVE-2026-45336)
vulnerability in flask (CVE-2026-45336). Confidential information can be exposed externally.
CVE-2026-7543 Cross-Site Scripting (XSS) in wordpress (CVE-2026-7543)
cross-site scripting in wordpress (CVE-2026-7543). Risk of unauthorized operations or information disclosure.
CVE-2026-15610 Vulnerability in wordpress (CVE-2026-15610)
vulnerability in wordpress (CVE-2026-15610). Risk of unauthorized operations or information disclosure.
CVE-2026-15727 SQL Injection in wordpress (CVE-2026-15727)
SQL injection in wordpress (CVE-2026-15727). Confidential information can be exposed externally.
CVE-2026-15651 SQL Injection in wordpress (CVE-2026-15651)
SQL injection in wordpress (CVE-2026-15651). Confidential information can be exposed externally.
CVE-2026-15021 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15021)
cross-site scripting in wordpress (CVE-2026-15021). Risk of unauthorized operations or information disclosure.
CVE-2026-15106 Vulnerability in wordpress (CVE-2026-15106)
vulnerability in wordpress (CVE-2026-15106). Risk of unauthorized operations or information disclosure.
CVE-2026-15350 Vulnerability in wordpress (CVE-2026-15350)
vulnerability in wordpress (CVE-2026-15350). Risk of unauthorized operations or information disclosure.
CVE-2026-15324 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15324)
cross-site scripting in wordpress (CVE-2026-15324). Risk of unauthorized operations or information disclosure.
CVE-2026-15022 SQL Injection in wordpress (CVE-2026-15022)
SQL injection in wordpress (CVE-2026-15022). Confidential information can be exposed externally.
CVE-2026-13767 SQL Injection in wordpress (CVE-2026-13767)
SQL injection in wordpress (CVE-2026-13767). Confidential information can be exposed externally.
CVE-2026-15407 Vulnerability in wordpress (CVE-2026-15407)
vulnerability in wordpress (CVE-2026-15407). Risk of unauthorized operations or information disclosure.
CVE-2026-13755 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13755)
cross-site scripting in wordpress (CVE-2026-13755). Risk of unauthorized operations or information disclosure.
CVE-2026-15103 Privilege Escalation in wordpress (CVE-2026-15103)
vulnerability in wordpress (CVE-2026-15103). Successful exploitation can lead to full system takeover. Exploitable via ``group_id``.
CVE-2026-13754 SQL Injection in wordpress (CVE-2026-13754)
SQL injection in wordpress (CVE-2026-13754). Confidential information can be exposed externally.
CVE-2026-15005 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-15005)
vulnerability in wordpress (CVE-2026-15005). Successful exploitation can lead to full system takeover.
CVE-2026-13741 Privilege Escalation in wordpress (CVE-2026-13741)
vulnerability in wordpress (CVE-2026-13741). Successful exploitation can lead to full system takeover. Exploitable via ``digits_reg_userrole``.
CVE-2026-15099 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15099)
cross-site scripting in wordpress (CVE-2026-15099). Risk of unauthorized operations or information disclosure.
CVE-2026-15008 Unsafe Deserialization in wordpress (CVE-2026-15008)
vulnerability in wordpress (CVE-2026-15008). Successful exploitation can lead to full system takeover.
CVE-2026-12907 Vulnerability in wordpress (CVE-2026-12907)
vulnerability in wordpress (CVE-2026-12907). Risk of unauthorized operations or information disclosure.
CVE-2026-12979 Vulnerability in wordpress (CVE-2026-12979)
vulnerability in wordpress (CVE-2026-12979). Risk of unauthorized operations or information disclosure.
CVE-2026-12978 Cross-Site Scripting (XSS) in wordpress (CVE-2026-12978)
cross-site scripting in wordpress (CVE-2026-12978). Risk of unauthorized operations or information disclosure.
CVE-2026-12869 Cross-Site Scripting (XSS) in wordpress (CVE-2026-12869)
cross-site scripting in wordpress (CVE-2026-12869). Risk of unauthorized operations or information disclosure.
CVE-2026-12585 Authentication Bypass in wordpress (CVE-2026-12585)
authentication bypass in wordpress (CVE-2026-12585). Successful exploitation can lead to full system takeover.
CVE-2026-12684 Unrestricted File Upload in wordpress (CVE-2026-12684)
vulnerability in wordpress (CVE-2026-12684). Risk of unauthorized operations or information disclosure.
CVE-2026-12906 Vulnerability in wordpress (CVE-2026-12906)
vulnerability in wordpress (CVE-2026-12906). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →