Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-74992 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-74992)
cross-site scripting in wordpress (CVE-2026-74992). Successful exploitation can lead to full system takeover.
|
| CVE-2026-76367 |
|
Cross-Site Scripting (XSS) in splunk (CVE-2026-76367)
cross-site scripting in splunk (CVE-2026-76367). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76325 |
|
Cross-Site Scripting (XSS) in splunk (CVE-2026-76325)
cross-site scripting in splunk (CVE-2026-76325). Confidential information can be exposed externally.
|
| CVE-2026-76324 |
|
Cross-Site Scripting (XSS) in splunk (CVE-2026-76324)
cross-site scripting in splunk (CVE-2026-76324). Confidential information can be exposed externally.
|
| CVE-2026-76252 |
|
Cross-Site Scripting (XSS) in splunk (CVE-2026-76252)
cross-site scripting in splunk (CVE-2026-76252). Confidential information can be exposed externally.
|
| CVE-2026-67189 |
|
Cross-Site Scripting (XSS) in CVE-2026-67189 (CVE-2026-67189)
cross-site scripting in CVE-2026-67189 (CVE-2026-67189). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55085 |
|
Cross-Site Scripting (XSS) in CVE-2026-55085 (CVE-2026-55085)
cross-site scripting in CVE-2026-55085 (CVE-2026-55085). Confidential information can be exposed externally.
|
| CVE-2026-64851 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-64851)
cross-site scripting in wordpress (CVE-2026-64851). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18430 |
|
Cross-Site Scripting (XSS) in CVE-2026-18430 (CVE-2026-18430)
cross-site scripting in CVE-2026-18430 (CVE-2026-18430). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20232 |
|
Vulnerability in cisco (CVE-2026-20232)
vulnerability in cisco (CVE-2026-20232). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75955 |
|
Cross-Site Scripting (XSS) in CVE-2026-75955 (CVE-2026-75955)
cross-site scripting in CVE-2026-75955 (CVE-2026-75955). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54793 |
|
Cross-Site Scripting (XSS) in dell (CVE-2026-54793)
cross-site scripting in dell (CVE-2026-54793). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40507 |
|
Cross-Site Scripting (XSS) in CVE-2026-40507 (CVE-2026-40507)
cross-site scripting in CVE-2026-40507 (CVE-2026-40507). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40508 |
|
Cross-Site Scripting (XSS) in CVE-2026-40508 (CVE-2026-40508)
cross-site scripting in CVE-2026-40508 (CVE-2026-40508). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18756 |
|
Cross-Site Scripting (XSS) in CVE-2026-18756 (CVE-2026-18756)
cross-site scripting in CVE-2026-18756 (CVE-2026-18756). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18526 |
|
Cross-Site Scripting (XSS) in CVE-2026-18526 (CVE-2026-18526)
cross-site scripting in CVE-2026-18526 (CVE-2026-18526). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75920 |
|
Vulnerability in CVE-2026-75920 (CVE-2026-75920)
vulnerability in CVE-2026-75920 (CVE-2026-75920). Confidential information can be exposed externally.
|
| CVE-2026-75916 |
|
Cross-Site Scripting (XSS) in CVE-2026-75916 (CVE-2026-75916)
cross-site scripting in CVE-2026-75916 (CVE-2026-75916). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75917 |
|
Cross-Site Scripting (XSS) in CVE-2026-75917 (CVE-2026-75917)
cross-site scripting in CVE-2026-75917 (CVE-2026-75917). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73354 |
|
Unauthenticated Cross Site Scripting (XSS) in SimplyRETS Real Estate IDX <= 3.2.8 versions.
Unauthenticated Cross Site Scripting (XSS) in SimplyRETS Real Estate IDX <= 3.2.8 versions.
|
| CVE-2026-73182 |
|
Unauthenticated Cross Site Scripting (XSS) in BBQ Pro <= 3.9 versions.
Unauthenticated Cross Site Scripting (XSS) in BBQ Pro <= 3.9 versions.
|
| CVE-2026-73184 |
|
Unauthenticated Cross Site Scripting (XSS) in Global Gallery <= 11.1.2 versions.
Unauthenticated Cross Site Scripting (XSS) in Global Gallery <= 11.1.2 versions.
|
| CVE-2026-66596 |
|
Unauthenticated Cross Site Scripting (XSS) in Newsletter <= 9.3.3 versions.
Unauthenticated Cross Site Scripting (XSS) in Newsletter <= 9.3.3 versions.
|
| CVE-2026-61986 |
|
Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.5 versions.
Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.5 versions.
|
| CVE-2026-75981 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-75981)
cross-site scripting in wordpress (CVE-2026-75981). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15780 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15780)
cross-site scripting in wordpress (CVE-2026-15780). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15446 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15446)
cross-site scripting in wordpress (CVE-2026-15446). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19055 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-19055)
cross-site scripting in wordpress (CVE-2026-19055). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19056 |
|
Cross-Site Scripting (XSS) in c (CVE-2026-19056)
cross-site scripting in c (CVE-2026-19056). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18202 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-18202)
cross-site scripting in wordpress (CVE-2026-18202). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16570 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16570)
cross-site scripting in wordpress (CVE-2026-16570). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16617 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16617)
cross-site scripting in wordpress (CVE-2026-16617). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66358 |
|
Cross-Site Scripting (XSS) in jvn (CVE-2026-66358)
cross-site scripting in jvn (CVE-2026-66358). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15421 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15421)
cross-site scripting in wordpress (CVE-2026-15421). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66591 |
|
Cross-Site Scripting (XSS) in CVE-2026-66591 (CVE-2026-66591)
cross-site scripting in CVE-2026-66591 (CVE-2026-66591). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27365 |
|
Cross-Site Scripting (XSS) in CVE-2026-27365 (CVE-2026-27365)
cross-site scripting in CVE-2026-27365 (CVE-2026-27365). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66603 |
|
Cross-Site Scripting (XSS) in CVE-2026-66603 (CVE-2026-66603)
cross-site scripting in CVE-2026-66603 (CVE-2026-66603). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-21580 |
|
Cross-Site Scripting (XSS) in privilege-escalation (CVE-2026-21580)
cross-site scripting in privilege-escalation (CVE-2026-21580). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41921 |
|
Cross-Site Scripting (XSS) in CVE-2026-41921 (CVE-2026-41921)
cross-site scripting in CVE-2026-41921 (CVE-2026-41921). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-9211 |
|
Cross-Site Scripting (XSS) in CVE-2025-9211 (CVE-2025-9211)
cross-site scripting in CVE-2025-9211 (CVE-2025-9211). Confidential information can be exposed externally.
|
| CVE-2026-52609 |
|
Cross-Site Scripting (XSS) in CVE-2026-52609 (CVE-2026-52609)
cross-site scripting in CVE-2026-52609 (CVE-2026-52609). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73336 |
|
Cross-Site Scripting (XSS) in CVE-2026-73336 (CVE-2026-73336)
cross-site scripting in CVE-2026-73336 (CVE-2026-73336). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-52606 |
|
Cross-Site Scripting (XSS) in CVE-2026-52606 (CVE-2026-52606)
cross-site scripting in CVE-2026-52606 (CVE-2026-52606). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-30250 |
|
Cross-Site Scripting (XSS) in CVE-2026-30250 (CVE-2026-30250)
cross-site scripting in CVE-2026-30250 (CVE-2026-30250). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55839 |
|
Cross-Site Scripting (XSS) in io.kestra:kestra (CVE-2026-55839)
cross-site scripting in io.kestra:kestra (CVE-2026-55839). Confidential information can be exposed externally. Exploitable via ``onclick``. Mitigation: upgrade to `1.3.24` or later.
|
| CVE-2026-73382 |
|
Unauthenticated Cross Site Scripting (XSS) in Site Reviews <= 8.2.0 versions.
Unauthenticated Cross Site Scripting (XSS) in Site Reviews <= 8.2.0 versions.
|
| CVE-2026-73393 |
|
Unauthenticated Cross Site Scripting (XSS) in Subscribe2 <= 10.46 versions.
Unauthenticated Cross Site Scripting (XSS) in Subscribe2 <= 10.46 versions.
|
| CVE-2026-73342 |
|
Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions.
Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions.
|
| CVE-2026-73358 |
|
Unauthenticated Cross Site Scripting (XSS) in Affiliates Manager <= 2.9.53 versions.
Unauthenticated Cross Site Scripting (XSS) in Affiliates Manager <= 2.9.53 versions.
|
| CVE-2026-73338 |
|
Unauthenticated Cross Site Scripting (XSS) in Autopay <= 5.0.0 versions.
Unauthenticated Cross Site Scripting (XSS) in Autopay <= 5.0.0 versions.
|