Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-40126 |
|
Cross-Site Scripting (XSS) in CVE-2026-40126 (CVE-2026-40126)
cross-site scripting in CVE-2026-40126 (CVE-2026-40126). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-74800 |
|
Cross-Site Scripting (XSS) in CVE-2026-74800 (CVE-2026-74800)
cross-site scripting in CVE-2026-74800 (CVE-2026-74800). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19995 |
|
Cross-Site Scripting (XSS) in CVE-2026-19995 (CVE-2026-19995)
cross-site scripting in CVE-2026-19995 (CVE-2026-19995). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19998 |
|
Cross-Site Scripting (XSS) in CVE-2026-19998 (CVE-2026-19998)
cross-site scripting in CVE-2026-19998 (CVE-2026-19998). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-71368 |
|
Cross-Site Scripting (XSS) in jvn (CVE-2026-71368)
cross-site scripting in jvn (CVE-2026-71368). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19988 |
|
Vulnerability in CVE-2026-19988 (CVE-2026-19988)
vulnerability in CVE-2026-19988 (CVE-2026-19988). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10734 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-10734)
cross-site scripting in wordpress (CVE-2026-10734). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13424 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13424)
cross-site scripting in wordpress (CVE-2026-13424). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2357 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-2357)
cross-site scripting in wordpress (CVE-2026-2357). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18402 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-18402)
cross-site scripting in wordpress (CVE-2026-18402). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19712 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-19712)
cross-site scripting in wordpress (CVE-2026-19712). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15726 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15726)
cross-site scripting in wordpress (CVE-2026-15726). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15604 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15604)
cross-site scripting in wordpress (CVE-2026-15604). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15790 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15790)
cross-site scripting in wordpress (CVE-2026-15790). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16758 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16758)
cross-site scripting in wordpress (CVE-2026-16758). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16775 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16775)
cross-site scripting in wordpress (CVE-2026-16775). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15066 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15066)
cross-site scripting in wordpress (CVE-2026-15066). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15009 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15009)
cross-site scripting in wordpress (CVE-2026-15009). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15002 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15002)
cross-site scripting in wordpress (CVE-2026-15002). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12477 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-12477)
cross-site scripting in wordpress (CVE-2026-12477). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11780 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-11780)
cross-site scripting in wordpress (CVE-2026-11780). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2487 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-2487)
cross-site scripting in wordpress (CVE-2026-2487). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19922 |
|
Cross-Site Scripting (XSS) in CVE-2026-19922 (CVE-2026-19922)
cross-site scripting in CVE-2026-19922 (CVE-2026-19922). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73053 |
|
Cross-Site Scripting (XSS) in CVE-2026-73053 (CVE-2026-73053)
cross-site scripting in CVE-2026-73053 (CVE-2026-73053). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73044 |
|
Cross-Site Scripting (XSS) in CVE-2026-73044 (CVE-2026-73044)
cross-site scripting in CVE-2026-73044 (CVE-2026-73044). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73050 |
|
Cross-Site Scripting (XSS) in CVE-2026-73050 (CVE-2026-73050)
cross-site scripting in CVE-2026-73050 (CVE-2026-73050). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19916 |
|
Cross-Site Scripting (XSS) in CVE-2026-19916 (CVE-2026-19916)
cross-site scripting in CVE-2026-19916 (CVE-2026-19916). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19904 |
|
Cross-Site Scripting (XSS) in CVE-2026-19904 (CVE-2026-19904)
cross-site scripting in CVE-2026-19904 (CVE-2026-19904). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17090 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-17090)
cross-site scripting in wordpress (CVE-2026-17090). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16145 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16145)
cross-site scripting in wordpress (CVE-2026-16145). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15948 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15948)
cross-site scripting in wordpress (CVE-2026-15948). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13360 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13360)
cross-site scripting in wordpress (CVE-2026-13360). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14433 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14433)
cross-site scripting in wordpress (CVE-2026-14433). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17209 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2026-17209)
cross-site scripting in ibm (CVE-2026-17209). Data can be tampered with by attackers.
|
| CVE-2026-63361 |
|
Cross-Site Scripting (XSS) in CVE-2026-63361 (CVE-2026-63361)
cross-site scripting in CVE-2026-63361 (CVE-2026-63361). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53472 |
|
Cross-Site Scripting (XSS) in CVE-2026-53472 (CVE-2026-53472)
cross-site scripting in CVE-2026-53472 (CVE-2026-53472). Confidential information can be exposed externally. Exploitable via ``AgentStatusUpdate.CredentialUrl``.
|
| CVE-2026-72832 |
|
Cross-Site Scripting (XSS) in CVE-2026-72832 (CVE-2026-72832)
cross-site scripting in CVE-2026-72832 (CVE-2026-72832). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.13` or later.
|
| CVE-2026-72821 |
|
Cross-Site Scripting (XSS) in CVE-2026-72821 (CVE-2026-72821)
cross-site scripting in CVE-2026-72821 (CVE-2026-72821). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19794 |
|
The WP-Stats plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up...
The WP-Stats plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up...
|
| CVE-2026-18109 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-18109)
cross-site scripting in wordpress (CVE-2026-18109). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56858 |
|
Cross-Site Scripting (XSS) in CVE-2026-56858 (CVE-2026-56858)
cross-site scripting in CVE-2026-56858 (CVE-2026-56858). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18741 |
|
Cross-Site Scripting (XSS) in CVE-2026-18741 (CVE-2026-18741)
cross-site scripting in CVE-2026-18741 (CVE-2026-18741). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73531 |
|
Cross-Site Scripting (XSS) in django (CVE-2026-73531)
cross-site scripting in django (CVE-2026-73531). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73038 |
|
Cross-Site Scripting (XSS) in CVE-2026-73038 (CVE-2026-73038)
cross-site scripting in CVE-2026-73038 (CVE-2026-73038). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73037 |
|
Cross-Site Scripting (XSS) in CVE-2026-73037 (CVE-2026-73037)
cross-site scripting in CVE-2026-73037 (CVE-2026-73037). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34491 |
|
Cross-Site Scripting (XSS) in cisa (CVE-2026-34491)
cross-site scripting in cisa (CVE-2026-34491). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73572 |
|
Cross-Site Scripting (XSS) in synacor (CVE-2026-73572)
cross-site scripting in synacor (CVE-2026-73572). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19744 |
|
Cross-Site Scripting (XSS) in CVE-2026-19744 (CVE-2026-19744)
cross-site scripting in CVE-2026-19744 (CVE-2026-19744). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-28154 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-28154)
cross-site scripting in wordpress (CVE-2026-28154). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73357 |
|
Donor Cross Site Scripting (XSS) in GiveWP < 4.16.6 versions.
Donor Cross Site Scripting (XSS) in GiveWP < 4.16.6 versions.
|