Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-9021 Vulnerability in wordpress (CVE-2026-9021)
vulnerability in wordpress (CVE-2026-9021). Risk of unauthorized operations or information disclosure.
CVE-2026-58306 Vulnerability in CVE-2026-58306 (CVE-2026-58306)
vulnerability in CVE-2026-58306 (CVE-2026-58306). Risk of unauthorized operations or information disclosure.
CVE-2026-58305 Vulnerability in CVE-2026-58305 (CVE-2026-58305)
vulnerability in CVE-2026-58305 (CVE-2026-58305). Risk of unauthorized operations or information disclosure.
CVE-2026-9240 Vulnerability in wordpress (CVE-2026-9240)
vulnerability in wordpress (CVE-2026-9240). Risk of unauthorized operations or information disclosure.
CVE-2026-59691 Out-of-Bounds Write in dos (CVE-2026-59691)
out-of-bounds write in dos (CVE-2026-59691). Risk of unauthorized operations or information disclosure.
CVE-2026-56291 KEV [KEV] Unrestricted File Upload in Balbooa forms (CVE-2026-56291)
vulnerability in Balbooa forms (CVE-2026-56291). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-56289 Vulnerability in dos (CVE-2026-56289)
vulnerability in dos (CVE-2026-56289). Risk of unauthorized operations or information disclosure.
CVE-2026-50644 SQL Injection in sqli (CVE-2026-50644)
SQL injection in sqli (CVE-2026-50644). Risk of unauthorized operations or information disclosure.
CVE-2026-14372 Path Traversal in wordpress (CVE-2026-14372)
path traversal in wordpress (CVE-2026-14372). Risk of unauthorized operations or information disclosure.
CVE-2026-4298 Vulnerability in wordpress (CVE-2026-4298)
vulnerability in wordpress (CVE-2026-4298). Risk of unauthorized operations or information disclosure.
CVE-2026-58303 Vulnerability in CVE-2026-58303 (CVE-2026-58303)
vulnerability in CVE-2026-58303 (CVE-2026-58303). Risk of unauthorized operations or information disclosure.
CVE-2026-58304 Out-of-Bounds Read in CVE-2026-58304 (CVE-2026-58304)
vulnerability in CVE-2026-58304 (CVE-2026-58304). Risk of unauthorized operations or information disclosure.
CVE-2026-56288 Vulnerability in dos (CVE-2026-56288)
vulnerability in dos (CVE-2026-56288). Risk of unauthorized operations or information disclosure.
CVE-2026-5955 SQL Injection in sqli (CVE-2026-5955)
SQL injection in sqli (CVE-2026-5955). Successful exploitation can lead to full system takeover.
CVE-2026-13441 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13441)
cross-site scripting in wordpress (CVE-2026-13441). Risk of unauthorized operations or information disclosure.
CVE-2026-1989 Vulnerability in CVE-2026-1989 (CVE-2026-1989)
vulnerability in CVE-2026-1989 (CVE-2026-1989). Confidential information can be exposed externally.
CVE-2026-1365 Vulnerability in CVE-2026-1365 (CVE-2026-1365)
vulnerability in CVE-2026-1365 (CVE-2026-1365). Confidential information can be exposed externally.
CVE-2026-56458 Vulnerability in hcltechsw (CVE-2026-56458)
vulnerability in hcltechsw (CVE-2026-56458). Risk of unauthorized operations or information disclosure.
CVE-2026-5793 Cross-Site Scripting (XSS) in CVE-2026-5793 (CVE-2026-5793)
cross-site scripting in CVE-2026-5793 (CVE-2026-5793). Risk of unauthorized operations or information disclosure.
CVE-2026-56460 Vulnerability in hcltechsw (CVE-2026-56460)
vulnerability in hcltechsw (CVE-2026-56460). Confidential information can be exposed externally.
CVE-2026-12428 Vulnerability in wordpress (CVE-2026-12428)
vulnerability in wordpress (CVE-2026-12428). Confidential information can be exposed externally.
CVE-2026-15158 Unrestricted File Upload in wordpress (CVE-2026-15158)
vulnerability in wordpress (CVE-2026-15158). Successful exploitation can lead to full system takeover.
CVE-2026-12433 Vulnerability in wordpress (CVE-2026-12433)
vulnerability in wordpress (CVE-2026-12433). Risk of unauthorized operations or information disclosure.
CVE-2026-2342 Cross-Site Scripting (XSS) in CVE-2026-2342 (CVE-2026-2342)
cross-site scripting in CVE-2026-2342 (CVE-2026-2342). Confidential information can be exposed externally.
CVE-2026-56459 Vulnerability in hcltechsw (CVE-2026-56459)
vulnerability in hcltechsw (CVE-2026-56459). Confidential information can be exposed externally.
CVE-2026-12590 Vulnerability in body-parser (CVE-2026-12590)
vulnerability in body-parser (CVE-2026-12590). Risk of unauthorized operations or information disclosure. Exploitable via ``limit``. Mitigation: upgrade to `2.3.0` or later.
CVE-2026-6910 Cross-Site Scripting (XSS) in wordpress (CVE-2026-6910)
cross-site scripting in wordpress (CVE-2026-6910). Risk of unauthorized operations or information disclosure. Exploitable via ``bookero_products``.
CVE-2026-31984 Vulnerability in nozominetworks (CVE-2026-31984)
vulnerability in nozominetworks (CVE-2026-31984). Risk of unauthorized operations or information disclosure.
CVE-2026-33390 Vulnerability in nozominetworks (CVE-2026-33390)
vulnerability in nozominetworks (CVE-2026-33390). Data can be tampered with by attackers.
CVE-2026-8848 Vulnerability in wordpress (CVE-2026-8848)
vulnerability in wordpress (CVE-2026-8848). Successful exploitation can lead to full system takeover.
CVE-2026-15000 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15000)
cross-site scripting in wordpress (CVE-2026-15000). Risk of unauthorized operations or information disclosure.
CVE-2026-31983 Vulnerability in nozominetworks (CVE-2026-31983)
vulnerability in nozominetworks (CVE-2026-31983). Risk of unauthorized operations or information disclosure.
CVE-2026-31985 Vulnerability in CVE-2026-31985 (CVE-2026-31985)
vulnerability in CVE-2026-31985 (CVE-2026-31985). Data can be tampered with by attackers.
CVE-2026-7558 Vulnerability in wordpress (CVE-2026-7558)
vulnerability in wordpress (CVE-2026-7558). Risk of unauthorized operations or information disclosure.
CVE-2026-31981 Cross-Site Scripting (XSS) in nozominetworks (CVE-2026-31981)
cross-site scripting in nozominetworks (CVE-2026-31981). Risk of unauthorized operations or information disclosure.
CVE-2026-31982 Open Redirect in nozominetworks (CVE-2026-31982)
vulnerability in nozominetworks (CVE-2026-31982). Risk of unauthorized operations or information disclosure.
CVE-2026-4653 Cross-Site Scripting (XSS) in wordpress (CVE-2026-4653)
cross-site scripting in wordpress (CVE-2026-4653). Risk of unauthorized operations or information disclosure.
CVE-2026-57111 Vulnerability in apache (CVE-2026-57111)
vulnerability in apache (CVE-2026-57111). Confidential information can be exposed externally.
CVE-2026-8996 Vulnerability in wordpress (CVE-2026-8996)
vulnerability in wordpress (CVE-2026-8996). Confidential information can be exposed externally.
CVE-2026-14343 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14343)
cross-site scripting in wordpress (CVE-2026-14343). Risk of unauthorized operations or information disclosure.
CVE-2026-13450 Vulnerability in wordpress (CVE-2026-13450)
vulnerability in wordpress (CVE-2026-13450). Risk of unauthorized operations or information disclosure.
CVE-2026-14245 Vulnerability in wordpress (CVE-2026-14245)
vulnerability in wordpress (CVE-2026-14245). Successful exploitation can lead to full system takeover. Exploitable via ``form_nonce``.
CVE-2026-14342 SQL Injection in wordpress (CVE-2026-14342)
SQL injection in wordpress (CVE-2026-14342). Confidential information can be exposed externally.
CVE-2026-12170 Cross-Site Scripting (XSS) in wordpress (CVE-2026-12170)
cross-site scripting in wordpress (CVE-2026-12170). Risk of unauthorized operations or information disclosure.
CVE-2026-13080 Vulnerability in wordpress (CVE-2026-13080)
vulnerability in wordpress (CVE-2026-13080). Successful exploitation can lead to full system takeover.
CVE-2026-13334 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13334)
cross-site scripting in wordpress (CVE-2026-13334). Risk of unauthorized operations or information disclosure.
CVE-2026-47840 Vulnerability in CVE-2026-47840 (CVE-2026-47840)
vulnerability in CVE-2026-47840 (CVE-2026-47840). Data can be tampered with by attackers.
CVE-2026-47830 Vulnerability in c (CVE-2026-47830)
vulnerability in c (CVE-2026-47830). Successful exploitation can lead to full system takeover.
CVE-2026-12517 Vulnerability in wordpress (CVE-2026-12517)
vulnerability in wordpress (CVE-2026-12517). Risk of unauthorized operations or information disclosure.
CVE-2026-13771 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13771)
cross-site scripting in wordpress (CVE-2026-13771). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →