Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-9021 |
|
Vulnerability in wordpress (CVE-2026-9021)
vulnerability in wordpress (CVE-2026-9021). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58306 |
|
Vulnerability in CVE-2026-58306 (CVE-2026-58306)
vulnerability in CVE-2026-58306 (CVE-2026-58306). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58305 |
|
Vulnerability in CVE-2026-58305 (CVE-2026-58305)
vulnerability in CVE-2026-58305 (CVE-2026-58305). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9240 |
|
Vulnerability in wordpress (CVE-2026-9240)
vulnerability in wordpress (CVE-2026-9240). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59691 |
|
Out-of-Bounds Write in dos (CVE-2026-59691)
out-of-bounds write in dos (CVE-2026-59691). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56291 KEV |
|
[KEV] Unrestricted File Upload in Balbooa forms (CVE-2026-56291)
vulnerability in Balbooa forms (CVE-2026-56291). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-56289 |
|
Vulnerability in dos (CVE-2026-56289)
vulnerability in dos (CVE-2026-56289). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50644 |
|
SQL Injection in sqli (CVE-2026-50644)
SQL injection in sqli (CVE-2026-50644). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14372 |
|
Path Traversal in wordpress (CVE-2026-14372)
path traversal in wordpress (CVE-2026-14372). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4298 |
|
Vulnerability in wordpress (CVE-2026-4298)
vulnerability in wordpress (CVE-2026-4298). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58303 |
|
Vulnerability in CVE-2026-58303 (CVE-2026-58303)
vulnerability in CVE-2026-58303 (CVE-2026-58303). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58304 |
|
Out-of-Bounds Read in CVE-2026-58304 (CVE-2026-58304)
vulnerability in CVE-2026-58304 (CVE-2026-58304). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56288 |
|
Vulnerability in dos (CVE-2026-56288)
vulnerability in dos (CVE-2026-56288). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5955 |
|
SQL Injection in sqli (CVE-2026-5955)
SQL injection in sqli (CVE-2026-5955). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13441 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13441)
cross-site scripting in wordpress (CVE-2026-13441). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-1989 |
|
Vulnerability in CVE-2026-1989 (CVE-2026-1989)
vulnerability in CVE-2026-1989 (CVE-2026-1989). Confidential information can be exposed externally.
|
| CVE-2026-1365 |
|
Vulnerability in CVE-2026-1365 (CVE-2026-1365)
vulnerability in CVE-2026-1365 (CVE-2026-1365). Confidential information can be exposed externally.
|
| CVE-2026-56458 |
|
Vulnerability in hcltechsw (CVE-2026-56458)
vulnerability in hcltechsw (CVE-2026-56458). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5793 |
|
Cross-Site Scripting (XSS) in CVE-2026-5793 (CVE-2026-5793)
cross-site scripting in CVE-2026-5793 (CVE-2026-5793). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56460 |
|
Vulnerability in hcltechsw (CVE-2026-56460)
vulnerability in hcltechsw (CVE-2026-56460). Confidential information can be exposed externally.
|
| CVE-2026-12428 |
|
Vulnerability in wordpress (CVE-2026-12428)
vulnerability in wordpress (CVE-2026-12428). Confidential information can be exposed externally.
|
| CVE-2026-15158 |
|
Unrestricted File Upload in wordpress (CVE-2026-15158)
vulnerability in wordpress (CVE-2026-15158). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12433 |
|
Vulnerability in wordpress (CVE-2026-12433)
vulnerability in wordpress (CVE-2026-12433). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2342 |
|
Cross-Site Scripting (XSS) in CVE-2026-2342 (CVE-2026-2342)
cross-site scripting in CVE-2026-2342 (CVE-2026-2342). Confidential information can be exposed externally.
|
| CVE-2026-56459 |
|
Vulnerability in hcltechsw (CVE-2026-56459)
vulnerability in hcltechsw (CVE-2026-56459). Confidential information can be exposed externally.
|
| CVE-2026-12590 |
|
Vulnerability in body-parser (CVE-2026-12590)
vulnerability in body-parser (CVE-2026-12590). Risk of unauthorized operations or information disclosure. Exploitable via ``limit``. Mitigation: upgrade to `2.3.0` or later.
|
| CVE-2026-6910 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-6910)
cross-site scripting in wordpress (CVE-2026-6910). Risk of unauthorized operations or information disclosure. Exploitable via ``bookero_products``.
|
| CVE-2026-31984 |
|
Vulnerability in nozominetworks (CVE-2026-31984)
vulnerability in nozominetworks (CVE-2026-31984). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-33390 |
|
Vulnerability in nozominetworks (CVE-2026-33390)
vulnerability in nozominetworks (CVE-2026-33390). Data can be tampered with by attackers.
|
| CVE-2026-8848 |
|
Vulnerability in wordpress (CVE-2026-8848)
vulnerability in wordpress (CVE-2026-8848). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15000 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15000)
cross-site scripting in wordpress (CVE-2026-15000). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31983 |
|
Vulnerability in nozominetworks (CVE-2026-31983)
vulnerability in nozominetworks (CVE-2026-31983). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31985 |
|
Vulnerability in CVE-2026-31985 (CVE-2026-31985)
vulnerability in CVE-2026-31985 (CVE-2026-31985). Data can be tampered with by attackers.
|
| CVE-2026-7558 |
|
Vulnerability in wordpress (CVE-2026-7558)
vulnerability in wordpress (CVE-2026-7558). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31981 |
|
Cross-Site Scripting (XSS) in nozominetworks (CVE-2026-31981)
cross-site scripting in nozominetworks (CVE-2026-31981). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31982 |
|
Open Redirect in nozominetworks (CVE-2026-31982)
vulnerability in nozominetworks (CVE-2026-31982). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4653 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-4653)
cross-site scripting in wordpress (CVE-2026-4653). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57111 |
|
Vulnerability in apache (CVE-2026-57111)
vulnerability in apache (CVE-2026-57111). Confidential information can be exposed externally.
|
| CVE-2026-8996 |
|
Vulnerability in wordpress (CVE-2026-8996)
vulnerability in wordpress (CVE-2026-8996). Confidential information can be exposed externally.
|
| CVE-2026-14343 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14343)
cross-site scripting in wordpress (CVE-2026-14343). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13450 |
|
Vulnerability in wordpress (CVE-2026-13450)
vulnerability in wordpress (CVE-2026-13450). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14245 |
|
Vulnerability in wordpress (CVE-2026-14245)
vulnerability in wordpress (CVE-2026-14245). Successful exploitation can lead to full system takeover. Exploitable via ``form_nonce``.
|
| CVE-2026-14342 |
|
SQL Injection in wordpress (CVE-2026-14342)
SQL injection in wordpress (CVE-2026-14342). Confidential information can be exposed externally.
|
| CVE-2026-12170 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-12170)
cross-site scripting in wordpress (CVE-2026-12170). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13080 |
|
Vulnerability in wordpress (CVE-2026-13080)
vulnerability in wordpress (CVE-2026-13080). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13334 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13334)
cross-site scripting in wordpress (CVE-2026-13334). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47840 |
|
Vulnerability in CVE-2026-47840 (CVE-2026-47840)
vulnerability in CVE-2026-47840 (CVE-2026-47840). Data can be tampered with by attackers.
|
| CVE-2026-47830 |
|
Vulnerability in c (CVE-2026-47830)
vulnerability in c (CVE-2026-47830). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12517 |
|
Vulnerability in wordpress (CVE-2026-12517)
vulnerability in wordpress (CVE-2026-12517). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13771 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13771)
cross-site scripting in wordpress (CVE-2026-13771). Risk of unauthorized operations or information disclosure.
|