Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-78478 |
|
Vulnerability in wordpress (CVE-2026-78478)
vulnerability in wordpress (CVE-2026-78478). Successful exploitation can lead to full system takeover.
|
| CVE-2026-78467 |
|
Vulnerability in wordpress (CVE-2026-78467)
vulnerability in wordpress (CVE-2026-78467). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76063 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-76063)
cross-site scripting in wordpress (CVE-2026-76063). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75930 |
|
Vulnerability in wordpress (CVE-2026-75930)
vulnerability in wordpress (CVE-2026-75930). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19892 |
|
Vulnerability in wordpress (CVE-2026-19892)
vulnerability in wordpress (CVE-2026-19892). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19943 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-19943)
cross-site scripting in wordpress (CVE-2026-19943). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17089 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-17089)
cross-site scripting in wordpress (CVE-2026-17089). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14280 |
|
Vulnerability in wordpress (CVE-2026-14280)
vulnerability in wordpress (CVE-2026-14280). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75982 |
|
Vulnerability in wordpress (CVE-2026-75982)
vulnerability in wordpress (CVE-2026-75982). Data can be tampered with by attackers.
|
| CVE-2025-9878 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2025-9878)
cross-site scripting in wordpress (CVE-2025-9878). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10627 |
|
Vulnerability in wordpress (CVE-2026-10627)
vulnerability in wordpress (CVE-2026-10627). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75019 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-75019)
cross-site scripting in wordpress (CVE-2026-75019). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75574 |
|
The Grav Email plugin (getgrav/grav-plugin-email) before 4.2.2 renders page-editor-controlled...
The Grav Email plugin (getgrav/grav-plugin-email) before 4.2.2 renders page-editor-controlled...
|
| CVE-2026-56707 |
|
Grav Flex Objects plugin versions 1.4.0 through 1.4.7 contain an authorization bypass...
Grav Flex Objects plugin versions 1.4.0 through 1.4.7 contain an authorization bypass...
|
| CVE-2026-19801 |
|
Vulnerability in wordpress (CVE-2026-19801)
vulnerability in wordpress (CVE-2026-19801). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10630 |
|
Vulnerability in wordpress (CVE-2026-10630)
vulnerability in wordpress (CVE-2026-10630). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15023 |
|
SQL Injection in wordpress (CVE-2026-15023)
SQL injection in wordpress (CVE-2026-15023). Confidential information can be exposed externally.
|
| CVE-2026-32560 |
|
Vulnerability in wordpress (CVE-2026-32560)
vulnerability in wordpress (CVE-2026-32560). Successful exploitation can lead to full system takeover.
|
| CVE-2026-32563 |
|
Unsafe Deserialization in wordpress (CVE-2026-32563)
vulnerability in wordpress (CVE-2026-32563). Successful exploitation can lead to full system takeover.
|
| CVE-2026-28153 |
|
Vulnerability in wordpress (CVE-2026-28153)
vulnerability in wordpress (CVE-2026-28153). Confidential information can be exposed externally.
|
| CVE-2026-32558 |
|
Vulnerability in wordpress (CVE-2026-32558)
vulnerability in wordpress (CVE-2026-32558). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16249 |
|
Vulnerability in wordpress (CVE-2026-16249)
vulnerability in wordpress (CVE-2026-16249). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13598 |
|
Privilege Escalation in wordpress (CVE-2026-13598)
vulnerability in wordpress (CVE-2026-13598). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14853 |
|
Vulnerability in wordpress (CVE-2026-14853)
vulnerability in wordpress (CVE-2026-14853). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77003 |
|
Privilege Escalation in wordpress (CVE-2026-77003)
vulnerability in wordpress (CVE-2026-77003). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18027 |
|
Path Traversal in wordpress (CVE-2026-18027)
path traversal in wordpress (CVE-2026-18027). Confidential information can be exposed externally.
|
| CVE-2026-16149 |
|
Privilege Escalation in wordpress (CVE-2026-16149)
vulnerability in wordpress (CVE-2026-16149). Successful exploitation can lead to full system takeover.
|
| CVE-2026-0551 |
|
Unsafe Deserialization in wordpress (CVE-2026-0551)
vulnerability in wordpress (CVE-2026-0551). Successful exploitation can lead to full system takeover.
|
| CVE-2026-4703 |
|
Unsafe Deserialization in wordpress (CVE-2026-4703)
vulnerability in wordpress (CVE-2026-4703). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5093 |
|
Vulnerability in wordpress (CVE-2026-5093)
vulnerability in wordpress (CVE-2026-5093). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4561 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-4561)
cross-site scripting in wordpress (CVE-2026-4561). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4559 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-4559)
cross-site scripting in wordpress (CVE-2026-4559). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2996 |
|
Vulnerability in wordpress (CVE-2026-2996)
vulnerability in wordpress (CVE-2026-2996). Data can be tampered with by attackers.
|
| CVE-2026-4244 |
|
Vulnerability in wordpress (CVE-2026-4244)
vulnerability in wordpress (CVE-2026-4244). Risk of unauthorized operations or information disclosure. Exploitable via ``edit_others_posts``.
|
| CVE-2026-4245 |
|
Authorization Flaw in wordpress (CVE-2026-4245)
vulnerability in wordpress (CVE-2026-4245). Risk of unauthorized operations or information disclosure. Exploitable via ``duplicate_posts``.
|
| CVE-2026-3424 |
|
Code Injection in wordpress (CVE-2026-3424)
code injection in wordpress (CVE-2026-3424). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78003 |
|
SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-78003)
SSRF in wordpress (CVE-2026-78003). Successful exploitation can lead to full system takeover.
|
| CVE-2026-77000 |
|
Authentication Bypass in wordpress (CVE-2026-77000)
authentication bypass in wordpress (CVE-2026-77000). Successful exploitation can lead to full system takeover.
|
| CVE-2026-77001 |
|
Authentication Bypass in wordpress (CVE-2026-77001)
authentication bypass in wordpress (CVE-2026-77001). Successful exploitation can lead to full system takeover.
|
| CVE-2026-77002 |
|
Authentication Bypass in wordpress (CVE-2026-77002)
authentication bypass in wordpress (CVE-2026-77002). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19222 |
|
Privilege Escalation in wordpress (CVE-2026-19222)
vulnerability in wordpress (CVE-2026-19222). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19221 |
|
Code Injection in wordpress (CVE-2026-19221)
code injection in wordpress (CVE-2026-19221). Successful exploitation can lead to full system takeover.
|
| CVE-2026-76793 |
|
Authentication Bypass in wordpress (CVE-2026-76793)
authentication bypass in wordpress (CVE-2026-76793). Successful exploitation can lead to full system takeover.
|
| CVE-2026-76789 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-76789)
cross-site scripting in wordpress (CVE-2026-76789). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18052 |
|
Authentication Bypass in wordpress (CVE-2026-18052)
authentication bypass in wordpress (CVE-2026-18052). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16738 |
|
Vulnerability in wordpress (CVE-2026-16738)
vulnerability in wordpress (CVE-2026-16738). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19093 |
|
Vulnerability in wordpress (CVE-2026-19093)
vulnerability in wordpress (CVE-2026-19093). Confidential information can be exposed externally.
|
| CVE-2026-16612 |
|
Information Disclosure in wordpress (CVE-2026-16612)
vulnerability in wordpress (CVE-2026-16612). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16260 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16260)
cross-site scripting in wordpress (CVE-2026-16260). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14187 |
|
Vulnerability in wordpress (CVE-2026-14187)
vulnerability in wordpress (CVE-2026-14187). Risk of unauthorized operations or information disclosure.
|