Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: php Clear
ID Title
CVE-2026-16486 Cross-Site Scripting (XSS) in CVE-2026-16486 (CVE-2026-16486)
cross-site scripting in CVE-2026-16486 (CVE-2026-16486). Risk of unauthorized operations or information disclosure.
CVE-2026-16485 Cross-Site Scripting (XSS) in CVE-2026-16485 (CVE-2026-16485)
cross-site scripting in CVE-2026-16485 (CVE-2026-16485). Risk of unauthorized operations or information disclosure.
CVE-2026-16484 Vulnerability in sqli (CVE-2026-16484)
vulnerability in sqli (CVE-2026-16484). Risk of unauthorized operations or information disclosure.
CVE-2026-63092 Vulnerability in CVE-2026-63092 (CVE-2026-63092)
vulnerability in CVE-2026-63092 (CVE-2026-63092). Risk of unauthorized operations or information disclosure.
CVE-2026-63358 Vulnerability in filegator (CVE-2026-63358)
vulnerability in filegator (CVE-2026-63358). Confidential information can be exposed externally.
CVE-2026-47685 Cross-Site Scripting (XSS) in fogproject (CVE-2026-47685)
cross-site scripting in fogproject (CVE-2026-47685). Confidential information can be exposed externally.
CVE-2026-47687 Cross-Site Scripting (XSS) in fogproject (CVE-2026-47687)
cross-site scripting in fogproject (CVE-2026-47687). Confidential information can be exposed externally. Exploitable via ``fogpage.class.php``.
CVE-2026-47689 Cross-Site Scripting (XSS) in fogproject (CVE-2026-47689)
cross-site scripting in fogproject (CVE-2026-47689). Risk of unauthorized operations or information disclosure. Exploitable via ``fogpage.class.php``.
CVE-2026-65049 Authorization Flaw in wordpress (CVE-2026-65049)
vulnerability in wordpress (CVE-2026-65049). Data can be tampered with by attackers.
CVE-2026-16447 Vulnerability in CVE-2026-16447 (CVE-2026-16447)
vulnerability in CVE-2026-16447 (CVE-2026-16447). Risk of unauthorized operations or information disclosure.
CVE-2026-65008 Code Injection in CVE-2026-65008 (CVE-2026-65008)
code injection in CVE-2026-65008 (CVE-2026-65008). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.0.7` or later.
CVE-2026-16334 Vulnerability in sqli (CVE-2026-16334)
vulnerability in sqli (CVE-2026-16334). Risk of unauthorized operations or information disclosure.
CVE-2026-16332 Vulnerability in CVE-2026-16332 (CVE-2026-16332)
vulnerability in CVE-2026-16332 (CVE-2026-16332). Risk of unauthorized operations or information disclosure.
CVE-2026-16329 Vulnerability in CVE-2026-16329 (CVE-2026-16329)
vulnerability in CVE-2026-16329 (CVE-2026-16329). Risk of unauthorized operations or information disclosure.
CVE-2026-16331 Vulnerability in CVE-2026-16331 (CVE-2026-16331)
vulnerability in CVE-2026-16331 (CVE-2026-16331). Risk of unauthorized operations or information disclosure.
CVE-2026-16330 Vulnerability in CVE-2026-16330 (CVE-2026-16330)
vulnerability in CVE-2026-16330 (CVE-2026-16330). Risk of unauthorized operations or information disclosure.
CVE-2026-16327 Vulnerability in CVE-2026-16327 (CVE-2026-16327)
vulnerability in CVE-2026-16327 (CVE-2026-16327). Risk of unauthorized operations or information disclosure.
CVE-2026-64625 OS Command Injection in c (CVE-2026-64625)
OS command injection in c (CVE-2026-64625). Successful exploitation can lead to full system takeover.
CVE-2026-53595 Vulnerability in laravel (CVE-2026-53595)
vulnerability in laravel (CVE-2026-53595). Confidential information can be exposed externally. Exploitable via `POST /user-setup/{hash}/{invite_sent_at}`.
CVE-2026-53594 Path Traversal in laravel (CVE-2026-53594)
path traversal in laravel (CVE-2026-53594). Confidential information can be exposed externally.
CVE-2026-53596 Vulnerability in laravel (CVE-2026-53596)
vulnerability in laravel (CVE-2026-53596). Risk of unauthorized operations or information disclosure.
CVE-2026-53592 Vulnerability in laravel (CVE-2026-53592)
vulnerability in laravel (CVE-2026-53592). Risk of unauthorized operations or information disclosure. Exploitable via ``getQueryParam``.
CVE-2026-53591 Authentication Bypass in laravel (CVE-2026-53591)
authentication bypass in laravel (CVE-2026-53591). Data can be tampered with by attackers. Exploitable via ``last_reply_from``.
CVE-2026-53593 Unrestricted File Upload in laravel (CVE-2026-53593)
vulnerability in laravel (CVE-2026-53593). Successful exploitation can lead to full system takeover. Exploitable via `POST /uploads/upload`.
CVE-2026-60026 Code Injection in CVE-2026-60026 (CVE-2026-60026)
code injection in CVE-2026-60026 (CVE-2026-60026). Risk of unauthorized operations or information disclosure.
CVE-2026-48812 Authentication Bypass in laravel (CVE-2026-48812)
authentication bypass in laravel (CVE-2026-48812). Confidential information can be exposed externally. Exploitable via ``token_type``.
CVE-2026-45295 Vulnerability in laravel (CVE-2026-45295)
vulnerability in laravel (CVE-2026-45295). Risk of unauthorized operations or information disclosure. Exploitable via `GET /thread/read/{conversation_id}/{thread_id}`.
CVE-2026-34239 Vulnerability in CVE-2026-34239 (CVE-2026-34239)
vulnerability in CVE-2026-34239 (CVE-2026-34239). Risk of unauthorized operations or information disclosure.
CVE-2026-50743 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-50743)
vulnerability in csrf (CVE-2026-50743). Risk of unauthorized operations or information disclosure.
CVE-2026-35048 Vulnerability in CVE-2026-35048 (CVE-2026-35048)
vulnerability in CVE-2026-35048 (CVE-2026-35048). Successful exploitation can lead to full system takeover.
CVE-2026-51027 Information Disclosure in CVE-2026-51027 (CVE-2026-51027)
vulnerability in CVE-2026-51027 (CVE-2026-51027). Successful exploitation can lead to full system takeover.
CVE-2026-57311 Unrestricted File Upload in CVE-2026-57311 (CVE-2026-57311)
vulnerability in CVE-2026-57311 (CVE-2026-57311). Risk of unauthorized operations or information disclosure.
CVE-2026-16244 Vulnerability in sqli (CVE-2026-16244)
vulnerability in sqli (CVE-2026-16244). Risk of unauthorized operations or information disclosure.
CVE-2026-16229 Cross-Site Scripting (XSS) in CVE-2026-16229 (CVE-2026-16229)
cross-site scripting in CVE-2026-16229 (CVE-2026-16229). Risk of unauthorized operations or information disclosure.
CVE-2026-16228 Vulnerability in sqli (CVE-2026-16228)
vulnerability in sqli (CVE-2026-16228). Risk of unauthorized operations or information disclosure.
CVE-2026-16227 Vulnerability in sqli (CVE-2026-16227)
vulnerability in sqli (CVE-2026-16227). Risk of unauthorized operations or information disclosure.
CVE-2026-16226 Vulnerability in CVE-2026-16226 (CVE-2026-16226)
vulnerability in CVE-2026-16226 (CVE-2026-16226). Risk of unauthorized operations or information disclosure.
CVE-2026-16220 Cross-Site Scripting (XSS) in CVE-2026-16220 (CVE-2026-16220)
cross-site scripting in CVE-2026-16220 (CVE-2026-16220). Risk of unauthorized operations or information disclosure.
CVE-2026-16219 Path Traversal in path-traversal (CVE-2026-16219)
path traversal in path-traversal (CVE-2026-16219). Risk of unauthorized operations or information disclosure.
CVE-2026-16205 Cross-Site Scripting (XSS) in CVE-2026-16205 (CVE-2026-16205)
cross-site scripting in CVE-2026-16205 (CVE-2026-16205). Risk of unauthorized operations or information disclosure.
CVE-2026-16203 Cross-Site Scripting (XSS) in CVE-2026-16203 (CVE-2026-16203)
cross-site scripting in CVE-2026-16203 (CVE-2026-16203). Risk of unauthorized operations or information disclosure.
CVE-2026-16202 Cross-Site Scripting (XSS) in CVE-2026-16202 (CVE-2026-16202)
cross-site scripting in CVE-2026-16202 (CVE-2026-16202). Risk of unauthorized operations or information disclosure.
CVE-2026-16156 Cross-Site Scripting (XSS) in CVE-2026-16156 (CVE-2026-16156)
cross-site scripting in CVE-2026-16156 (CVE-2026-16156). Risk of unauthorized operations or information disclosure.
CVE-2026-57857 Cross-Site Scripting (XSS) in wordpress (CVE-2026-57857)
cross-site scripting in wordpress (CVE-2026-57857). Risk of unauthorized operations or information disclosure.
CVE-2026-16155 Cross-Site Scripting (XSS) in CVE-2026-16155 (CVE-2026-16155)
cross-site scripting in CVE-2026-16155 (CVE-2026-16155). Risk of unauthorized operations or information disclosure.
CVE-2026-16154 Vulnerability in sqli (CVE-2026-16154)
vulnerability in sqli (CVE-2026-16154). Risk of unauthorized operations or information disclosure.
CVE-2026-16152 Vulnerability in sqli (CVE-2026-16152)
vulnerability in sqli (CVE-2026-16152). Risk of unauthorized operations or information disclosure.
CVE-2026-16131 Vulnerability in sqli (CVE-2026-16131)
vulnerability in sqli (CVE-2026-16131). Risk of unauthorized operations or information disclosure.
CVE-2026-63030 KEV WordPress Core — WordPress Core Interpretation Conflict Vulnerability
WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137.
CVE-2026-36669 Unrestricted File Upload in CVE-2026-36669 (CVE-2026-36669)
vulnerability in CVE-2026-36669 (CVE-2026-36669). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →