Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-76205 |
|
SQL Injection in sqli (CVE-2026-76205)
SQL injection in sqli (CVE-2026-76205). Confidential information can be exposed externally.
|
| CVE-2026-75918 |
|
Information Disclosure in CVE-2026-75918 (CVE-2026-75918)
vulnerability in CVE-2026-75918 (CVE-2026-75918). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75917 |
|
Cross-Site Scripting (XSS) in CVE-2026-75917 (CVE-2026-75917)
cross-site scripting in CVE-2026-75917 (CVE-2026-75917). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75916 |
|
Cross-Site Scripting (XSS) in CVE-2026-75916 (CVE-2026-75916)
cross-site scripting in CVE-2026-75916 (CVE-2026-75916). Successful exploitation can lead to full system takeover.
|
| CVE-2026-71694 |
|
Cross-Site Request Forgery (CSRF) in CVE-2026-71694 (CVE-2026-71694)
vulnerability in CVE-2026-71694 (CVE-2026-71694). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70422 |
|
SQL Injection in sqli (CVE-2026-70422)
SQL injection in sqli (CVE-2026-70422). Confidential information can be exposed externally.
|
| CVE-2026-70421 |
|
Privilege Escalation in dell (CVE-2026-70421)
vulnerability in dell (CVE-2026-70421). Successful exploitation can lead to full system takeover.
|
| CVE-2026-56088 |
|
SQL Injection in sqli (CVE-2026-56088)
SQL injection in sqli (CVE-2026-56088). Confidential information can be exposed externally.
|
| CVE-2026-54796 |
|
OS Command Injection in dell (CVE-2026-54796)
OS command injection in dell (CVE-2026-54796). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54795 |
|
OS Command Injection in dell (CVE-2026-54795)
OS command injection in dell (CVE-2026-54795). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54794 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-54794)
SSRF in ssrf (CVE-2026-54794). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51367 |
|
Vulnerability in CVE-2026-51367 (CVE-2026-51367)
vulnerability in CVE-2026-51367 (CVE-2026-51367). Confidential information can be exposed externally.
|
| CVE-2026-43961 |
|
Code Injection in CVE-2026-43961 (CVE-2026-43961)
code injection in CVE-2026-43961 (CVE-2026-43961). Successful exploitation can lead to full system takeover.
|
| CVE-2024-58376 |
|
OS Command Injection in CVE-2024-58376 (CVE-2024-58376)
OS command injection in CVE-2024-58376 (CVE-2024-58376). Successful exploitation can lead to full system takeover.
|
| CVE-2020-37267 |
|
Vulnerability in CVE-2020-37267 (CVE-2020-37267)
vulnerability in CVE-2020-37267 (CVE-2020-37267). Confidential information can be exposed externally. Mitigation: upgrade to `23.25.1` or later.
|
| CVE-2019-25766 |
|
Vulnerability in CVE-2019-25766 (CVE-2019-25766)
vulnerability in CVE-2019-25766 (CVE-2019-25766). Confidential information can be exposed externally.
|
| CVE-2026-76235 |
|
Vulnerability in dos (CVE-2026-76235)
vulnerability in dos (CVE-2026-76235). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73394 |
|
Unauthenticated Broken Access Control in Stitch Express <= 1.9.0 versions.
Unauthenticated Broken Access Control in Stitch Express <= 1.9.0 versions.
|
| CVE-2026-73387 |
|
Unauthenticated Local File Inclusion in Resido <= 1.5 versions.
Unauthenticated Local File Inclusion in Resido <= 1.5 versions.
|
| CVE-2026-73386 |
|
Vulnerability in CVE-2026-73386 (CVE-2026-73386)
vulnerability in CVE-2026-73386 (CVE-2026-73386). Confidential information can be exposed externally.
|
| CVE-2026-73385 |
|
Unauthenticated Broken Access Control in Outranking Plugin Options <= 1.1.3 versions.
Unauthenticated Broken Access Control in Outranking Plugin Options <= 1.1.3 versions.
|
| CVE-2026-73384 |
|
Unauthenticated Sensitive Data Exposure in Pay with Contact Form 7 <= 1.0.4 versions.
Unauthenticated Sensitive Data Exposure in Pay with Contact Form 7 <= 1.0.4 versions.
|
| CVE-2026-73354 |
|
Unauthenticated Cross Site Scripting (XSS) in SimplyRETS Real Estate IDX <= 3.2.8 versions.
Unauthenticated Cross Site Scripting (XSS) in SimplyRETS Real Estate IDX <= 3.2.8 versions.
|
| CVE-2026-73184 |
|
Unauthenticated Cross Site Scripting (XSS) in Global Gallery <= 11.1.2 versions.
Unauthenticated Cross Site Scripting (XSS) in Global Gallery <= 11.1.2 versions.
|
| CVE-2026-73182 |
|
Unauthenticated Cross Site Scripting (XSS) in BBQ Pro <= 3.9 versions.
Unauthenticated Cross Site Scripting (XSS) in BBQ Pro <= 3.9 versions.
|
| CVE-2026-66668 |
|
Subscriber SQL Injection in Community by PeepSo <= 9.0.5.2 versions.
Subscriber SQL Injection in Community by PeepSo <= 9.0.5.2 versions.
|
| CVE-2026-66596 |
|
Unauthenticated Cross Site Scripting (XSS) in Newsletter <= 9.3.3 versions.
Unauthenticated Cross Site Scripting (XSS) in Newsletter <= 9.3.3 versions.
|
| CVE-2026-61986 |
|
Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.5 versions.
Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.5 versions.
|
| CVE-2026-32552 |
|
Subscriber SQL Injection in YITH WooCommerce Membership Premium <= 2.33.0 versions.
Subscriber SQL Injection in YITH WooCommerce Membership Premium <= 2.33.0 versions.
|
| CVE-2026-75589 |
|
Vulnerability in CVE-2026-75589 (CVE-2026-75589)
vulnerability in CVE-2026-75589 (CVE-2026-75589). Confidential information can be exposed externally.
|
| CVE-2026-58088 |
|
Vulnerability in privilege-escalation (CVE-2026-58088)
vulnerability in privilege-escalation (CVE-2026-58088). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58087 |
|
Out-of-Bounds Read in privilege-escalation (CVE-2026-58087)
vulnerability in privilege-escalation (CVE-2026-58087). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58086 |
|
Vulnerability in CVE-2026-58086 (CVE-2026-58086)
vulnerability in CVE-2026-58086 (CVE-2026-58086). Data can be tampered with by attackers.
|
| CVE-2026-58085 |
|
Vulnerability in CVE-2026-58085 (CVE-2026-58085)
vulnerability in CVE-2026-58085 (CVE-2026-58085). Data can be tampered with by attackers.
|
| CVE-2026-58083 |
|
Use-After-Free in privilege-escalation (CVE-2026-58083)
vulnerability in privilege-escalation (CVE-2026-58083). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75981 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-75981)
cross-site scripting in wordpress (CVE-2026-75981). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15780 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15780)
cross-site scripting in wordpress (CVE-2026-15780). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49430 |
|
Vulnerability in CVE-2026-49430 (CVE-2026-49430)
vulnerability in CVE-2026-49430 (CVE-2026-49430). Successful exploitation can lead to full system takeover.
|
| CVE-2026-49428 |
|
Vulnerability in CVE-2026-49428 (CVE-2026-49428)
vulnerability in CVE-2026-49428 (CVE-2026-49428). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19842 |
|
Authentication Bypass in wordpress (CVE-2026-19842)
authentication bypass in wordpress (CVE-2026-19842). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19055 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-19055)
cross-site scripting in wordpress (CVE-2026-19055). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17565 |
|
SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-17565)
SSRF in wordpress (CVE-2026-17565). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19056 |
|
Cross-Site Scripting (XSS) in c (CVE-2026-19056)
cross-site scripting in c (CVE-2026-19056). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16570 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16570)
cross-site scripting in wordpress (CVE-2026-16570). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14861 |
|
Vulnerability in wordpress (CVE-2026-14861)
vulnerability in wordpress (CVE-2026-14861). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16950 |
|
SQL Injection in wordpress (CVE-2026-16950)
SQL injection in wordpress (CVE-2026-16950). Confidential information can be exposed externally.
|
| CVE-2026-16617 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16617)
cross-site scripting in wordpress (CVE-2026-16617). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14334 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14334)
cross-site scripting in wordpress (CVE-2026-14334). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16616 |
|
Path Traversal in wordpress (CVE-2026-16616)
path traversal in wordpress (CVE-2026-16616). Confidential information can be exposed externally.
|
| CVE-2026-13174 |
|
Vulnerability in wordpress (CVE-2026-13174)
vulnerability in wordpress (CVE-2026-13174). Successful exploitation can lead to full system takeover.
|