Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2022-50970 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2022-50970)
cross-site scripting in wordpress (CVE-2022-50970). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-50955 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2022-50955)
vulnerability in wordpress (CVE-2022-50955). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-50956 |
|
Path Traversal in wordpress (CVE-2022-50956)
path traversal in wordpress (CVE-2022-50956). Confidential information can be exposed externally.
|
| CVE-2022-50958 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2022-50958)
cross-site scripting in wordpress (CVE-2022-50958). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-50959 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2022-50959)
cross-site scripting in wordpress (CVE-2022-50959). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-50960 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2022-50960)
cross-site scripting in wordpress (CVE-2022-50960). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-50961 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2022-50961)
cross-site scripting in wordpress (CVE-2022-50961). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-50945 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2022-50945)
cross-site scripting in wordpress (CVE-2022-50945). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-50946 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2022-50946)
cross-site scripting in wordpress (CVE-2022-50946). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-50947 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2022-50947)
cross-site scripting in wordpress (CVE-2022-50947). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-50949 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2022-50949)
cross-site scripting in wordpress (CVE-2022-50949). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-50954 |
|
Vulnerability in wordpress (CVE-2022-50954)
vulnerability in wordpress (CVE-2022-50954). Confidential information can be exposed externally.
|
| CVE-2021-47948 |
|
Vulnerability in wordpress (CVE-2021-47948)
vulnerability in wordpress (CVE-2021-47948). Risk of unauthorized operations or information disclosure.
|
| CVE-2021-47951 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2021-47951)
cross-site scripting in wordpress (CVE-2021-47951). Risk of unauthorized operations or information disclosure.
|
| CVE-2021-47940 |
|
Vulnerability in wordpress (CVE-2021-47940)
vulnerability in wordpress (CVE-2021-47940). Successful exploitation can lead to full system takeover.
|
| CVE-2021-47941 |
|
SQL Injection in wordpress (CVE-2021-47941)
SQL injection in wordpress (CVE-2021-47941). Confidential information can be exposed externally.
|
| CVE-2021-47932 |
|
Vulnerability in wordpress (CVE-2021-47932)
vulnerability in wordpress (CVE-2021-47932). Successful exploitation can lead to full system takeover.
|
| CVE-2021-47933 |
|
Vulnerability in wordpress (CVE-2021-47933)
vulnerability in wordpress (CVE-2021-47933). Successful exploitation can lead to full system takeover.
|
| CVE-2021-47927 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2021-47927)
cross-site scripting in wordpress (CVE-2021-47927). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8198 |
|
Information Disclosure in wordpress (CVE-2026-8198)
vulnerability in wordpress (CVE-2026-8198). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`.
|
| CVE-2026-7652 |
|
Vulnerability in wordpress (CVE-2026-7652)
vulnerability in wordpress (CVE-2026-7652). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7475 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-7475)
cross-site scripting in wordpress (CVE-2026-7475). Risk of unauthorized operations or information disclosure. Exploitable via ``sky_script_content``.
|
| CVE-2026-7650 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-7650)
cross-site scripting in wordpress (CVE-2026-7650). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5341 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-5341)
cross-site scripting in wordpress (CVE-2026-5341). Risk of unauthorized operations or information disclosure. Exploitable via ``strava_nmr_connect``.
|
| CVE-2026-7330 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-7330)
cross-site scripting in wordpress (CVE-2026-7330). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5127 |
|
Unsafe Deserialization in wordpress (CVE-2026-5127)
vulnerability in wordpress (CVE-2026-5127). Successful exploitation can lead to full system takeover.
|
| CVE-2026-4935 |
|
SQL Injection in wordpress (CVE-2026-4935)
SQL injection in wordpress (CVE-2026-4935). Confidential information can be exposed externally.
|
| CVE-2026-5753 |
|
Vulnerability in wordpress (CVE-2026-5753)
vulnerability in wordpress (CVE-2026-5753). Confidential information can be exposed externally.
|
| CVE-2026-3208 |
|
Vulnerability in wordpress (CVE-2026-3208)
vulnerability in wordpress (CVE-2026-3208). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-25863 |
|
Vulnerability in wordpress (CVE-2026-25863)
vulnerability in wordpress (CVE-2026-25863). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41471 |
|
Vulnerability in wordpress (CVE-2026-41471)
vulnerability in wordpress (CVE-2026-41471). Confidential information can be exposed externally.
|
| CVE-2026-32834 |
|
Vulnerability in wordpress (CVE-2026-32834)
vulnerability in wordpress (CVE-2026-32834). Confidential information can be exposed externally.
|
| CVE-2026-6229 |
|
SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-6229)
SSRF in wordpress (CVE-2026-6229). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41940 KEV |
|
[KEV] Vulnerability in Webpros cpanel-whm-and-wp2-wordpress-squared (CVE-2026-41940)
vulnerability in Webpros cpanel-whm-and-wp2-wordpress-squared (CVE-2026-41940). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-5428 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-5428)
cross-site scripting in wordpress (CVE-2026-5428). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5488 |
|
Vulnerability in wordpress (CVE-2026-5488)
vulnerability in wordpress (CVE-2026-5488). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6235 |
|
Vulnerability in wordpress (CVE-2026-6235)
vulnerability in wordpress (CVE-2026-6235). Successful exploitation can lead to full system takeover.
|
| CVE-2024-7083 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2024-7083)
cross-site scripting in wordpress (CVE-2024-7083). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5718 |
|
Unrestricted File Upload in wordpress (CVE-2026-5718)
vulnerability in wordpress (CVE-2026-5718). Successful exploitation can lead to full system takeover.
|
| CVE-2026-3885 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-3885)
cross-site scripting in wordpress (CVE-2026-3885). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-15565 |
|
Vulnerability in wordpress (CVE-2025-15565)
vulnerability in wordpress (CVE-2025-15565). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4429 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-4429)
cross-site scripting in wordpress (CVE-2026-4429). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5357 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-5357)
cross-site scripting in wordpress (CVE-2026-5357). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4124 |
|
Vulnerability in wordpress (CVE-2026-4124)
vulnerability in wordpress (CVE-2026-4124). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3574 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-3574)
cross-site scripting in wordpress (CVE-2026-3574). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3568 |
|
Vulnerability in wordpress (CVE-2026-3568)
vulnerability in wordpress (CVE-2026-3568). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4326 |
|
The Vertex Addons for Elementor plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.6.4. This is due to improper authorization enforcement in the activate...
The Vertex Addons for Elementor plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.6.4. This is due to improper authorization enforcement in the activate_required_plugins() function. Specifically, the current_user_can('install_plugins') capability check...
|
| CVE-2026-5711 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-5711)
cross-site scripting in wordpress (CVE-2026-5711). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5436 |
|
Path Traversal in wordpress (CVE-2026-5436)
path traversal in wordpress (CVE-2026-5436). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5451 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-5451)
cross-site scripting in wordpress (CVE-2026-5451). Risk of unauthorized operations or information disclosure.
|