Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2023-32309 |
|
Path Traversal in pymdown-extensions (CVE-2023-32309)
path traversal in pymdown-extensions (CVE-2023-32309). Confidential information can be exposed externally. Exploitable via ``base_path``. Mitigation: upgrade to `10.0` or later.
|
| CVE-2026-65309 |
|
Vulnerability in CVE-2026-65309 (CVE-2026-65309)
vulnerability in CVE-2026-65309 (CVE-2026-65309). Confidential information can be exposed externally.
|
| CVE-2026-18218 |
|
Vulnerability in redhat (CVE-2026-18218)
vulnerability in redhat (CVE-2026-18218). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18217 |
|
Vulnerability in redhat (CVE-2026-18217)
vulnerability in redhat (CVE-2026-18217). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18215 |
|
Authentication Bypass in redhat (CVE-2026-18215)
authentication bypass in redhat (CVE-2026-18215). Confidential information can be exposed externally.
|
| CVE-2026-18214 |
|
Vulnerability in redhat (CVE-2026-18214)
vulnerability in redhat (CVE-2026-18214). Confidential information can be exposed externally.
|
| CVE-2026-18211 |
|
Vulnerability in redhat (CVE-2026-18211)
vulnerability in redhat (CVE-2026-18211). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18209 |
|
Vulnerability in redhat (CVE-2026-18209)
vulnerability in redhat (CVE-2026-18209). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18208 |
|
Vulnerability in redhat (CVE-2026-18208)
vulnerability in redhat (CVE-2026-18208). Confidential information can be exposed externally.
|
| CVE-2026-18206 |
|
Vulnerability in redhat (CVE-2026-18206)
vulnerability in redhat (CVE-2026-18206). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18203 |
|
Authorization Flaw in redhat (CVE-2026-18203)
vulnerability in redhat (CVE-2026-18203). Data can be tampered with by attackers.
|
| CVE-2026-16105 |
|
Vulnerability in redhat (CVE-2026-16105)
vulnerability in redhat (CVE-2026-16105). Data can be tampered with by attackers.
|
| CVE-2026-8155 |
|
Vulnerability in wordpress (CVE-2026-8155)
vulnerability in wordpress (CVE-2026-8155). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18452 |
|
Vulnerability in CVE-2026-18452 (CVE-2026-18452)
vulnerability in CVE-2026-18452 (CVE-2026-18452). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16236 |
|
Unrestricted File Upload in wordpress (CVE-2026-16236)
vulnerability in wordpress (CVE-2026-16236). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15381 |
|
SQL Injection in wordpress (CVE-2026-15381)
SQL injection in wordpress (CVE-2026-15381). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15258 |
|
SQL Injection in wordpress (CVE-2026-15258)
SQL injection in wordpress (CVE-2026-15258). Confidential information can be exposed externally.
|
| CVE-2026-15209 |
|
Vulnerability in wordpress (CVE-2026-15209)
vulnerability in wordpress (CVE-2026-15209). Confidential information can be exposed externally.
|
| CVE-2026-15048 |
|
Information Disclosure in wordpress (CVE-2026-15048)
vulnerability in wordpress (CVE-2026-15048). Confidential information can be exposed externally.
|
| CVE-2026-14931 |
|
Information Disclosure in wordpress (CVE-2026-14931)
vulnerability in wordpress (CVE-2026-14931). Confidential information can be exposed externally.
|
| CVE-2026-14930 |
|
Vulnerability in wordpress (CVE-2026-14930)
vulnerability in wordpress (CVE-2026-14930). Confidential information can be exposed externally.
|
| CVE-2026-14929 |
|
Authorization Flaw in wordpress (CVE-2026-14929)
vulnerability in wordpress (CVE-2026-14929). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14928 |
|
Information Disclosure in wordpress (CVE-2026-14928)
vulnerability in wordpress (CVE-2026-14928). Confidential information can be exposed externally.
|
| CVE-2026-14927 |
|
Vulnerability in wordpress (CVE-2026-14927)
vulnerability in wordpress (CVE-2026-14927). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14922 |
|
Cross-Site Scripting (XSS) in CVE-2026-14922 (CVE-2026-14922)
cross-site scripting in CVE-2026-14922 (CVE-2026-14922). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14921 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14921)
cross-site scripting in wordpress (CVE-2026-14921). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14919 |
|
Authentication Bypass in wordpress (CVE-2026-14919)
authentication bypass in wordpress (CVE-2026-14919). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14862 |
|
Vulnerability in wordpress (CVE-2026-14862)
vulnerability in wordpress (CVE-2026-14862). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14849 |
|
Vulnerability in wordpress (CVE-2026-14849)
vulnerability in wordpress (CVE-2026-14849). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14847 |
|
Vulnerability in wordpress (CVE-2026-14847)
vulnerability in wordpress (CVE-2026-14847). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14845 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14845)
cross-site scripting in wordpress (CVE-2026-14845). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14843 |
|
Vulnerability in wordpress (CVE-2026-14843)
vulnerability in wordpress (CVE-2026-14843). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14834 |
|
Vulnerability in wordpress (CVE-2026-14834)
vulnerability in wordpress (CVE-2026-14834). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14833 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14833)
cross-site scripting in wordpress (CVE-2026-14833). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14830 |
|
Authentication Bypass in wordpress (CVE-2026-14830)
authentication bypass in wordpress (CVE-2026-14830). Data can be tampered with by attackers.
|
| CVE-2026-14554 |
|
SQL Injection in wordpress (CVE-2026-14554)
SQL injection in wordpress (CVE-2026-14554). Confidential information can be exposed externally.
|
| CVE-2026-14483 |
|
Unrestricted File Upload in wordpress (CVE-2026-14483)
vulnerability in wordpress (CVE-2026-14483). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14333 |
|
Privilege Escalation in wordpress (CVE-2026-14333)
vulnerability in wordpress (CVE-2026-14333). Confidential information can be exposed externally.
|
| CVE-2026-14319 |
|
Information Disclosure in wordpress (CVE-2026-14319)
vulnerability in wordpress (CVE-2026-14319). Confidential information can be exposed externally.
|
| CVE-2026-14317 |
|
Vulnerability in wordpress (CVE-2026-14317)
vulnerability in wordpress (CVE-2026-14317). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13609 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13609)
cross-site scripting in wordpress (CVE-2026-13609). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13393 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13393)
cross-site scripting in wordpress (CVE-2026-13393). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13392 |
|
Code Injection in wordpress (CVE-2026-13392)
code injection in wordpress (CVE-2026-13392). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12721 |
|
SQL Injection in wordpress (CVE-2026-12721)
SQL injection in wordpress (CVE-2026-12721). Confidential information can be exposed externally.
|
| CVE-2026-12720 |
|
Unsafe Deserialization in wordpress (CVE-2026-12720)
vulnerability in wordpress (CVE-2026-12720). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12697 |
|
Vulnerability in wordpress (CVE-2026-12697)
vulnerability in wordpress (CVE-2026-12697). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12695 |
|
Authentication Bypass in wordpress (CVE-2026-12695)
authentication bypass in wordpress (CVE-2026-12695). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12376 |
|
Vulnerability in wordpress (CVE-2026-12376)
vulnerability in wordpress (CVE-2026-12376). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12251 |
|
Privilege Escalation in wordpress (CVE-2026-12251)
vulnerability in wordpress (CVE-2026-12251). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63223 |
|
Unrestricted File Upload in codeigniter4/framework (CVE-2026-63223)
vulnerability in codeigniter4/framework (CVE-2026-63223). Successful exploitation can lead to full system takeover. Exploitable via ``is_image``. Mitigation: upgrade to `4.7.4` or later.
|