Radar sectionsDatabase
Check my site

CWE-200Vulnerability type

WordPress Information Exposure vulnerabilities (page 7)

Debug logs, backups and exports left reachable without authentication.

Severity
Signals
Software

41,172 results

WordPress Information Exposure vulnerabilities (page 7)
SeverityVulnerabilityCVEInstallsPublished
Medium6.4Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-120364—
Medium5.3Missing AuthorizationCVE-2026-119523—
Medium4.3Missing AuthorizationCVE-2026-119525—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
WP Customer Area≤8.4.3Update to 8.4.4
CVE-2026-120365—
Medium5.3Missing AuthorizationCVE-2026-119508—
Medium4.3Cross-Site Request ForgeryCVE-2026-121783—
Medium6.4Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-119501—
Medium6.4Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-119500—
Medium4.3Missing AuthorizationCVE-2026-119486—
Medium5.3Missing AuthorizationCVE-2026-120842—
Medium4.3Missing AuthorizationCVE-2026-120840—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Spectra Legacy – Gutenberg Blocks≤2.20.4Update to 2.20.5
CVE-2026-119520—
Medium6.4Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-119493—
Medium6.1Reflected Cross-Site ScriptingCVE-2026-121782—
Medium6.4Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2026-120838—
High7.2Unauthenticated Stored Cross-Site ScriptingCVE-2026-119483—
Medium6.4Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2026-119497—
High7.2Unauthenticated Stored Cross-Site Scripting
Welcart e-Commerce≤2.12.6Update to 2.12.7
CVE-2026-119505—
High7.2Unauthenticated Stored Cross-Site ScriptingCVE-2026-123463—
Medium6.4Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2026-66675—
Medium6.3Authenticated (Technician+) Privilege EscalationCVE-2026-119514—
High7.2Unauthenticated Stored Cross-Site Scripting
FV Flowplayer Video Player≤7.5.56.7212Update to 7.5.57.7212
CVE-2026-121764—
High7.2Unauthenticated Stored Cross-Site Scripting
ACF Frontend Admin by DynamiApps≤3.30.1Update to 3.30.2
CVE-2026-119504—
Medium5.3Unauthenticated Information ExposureCVE-2026-123465—
High7.2Unauthenticated Stored Cross-Site ScriptingCVE-2026-121780—
Medium6.1Reflected Cross-Site Scripting
WP Inventory Manager≤2.5.9Update to 2.5.10
CVE-2026-111403—
Medium5.3Missing AuthorizationCVE-2026-121760—
Medium5.3Unauthenticated Information ExposureCVE-2026-119465—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
The Events Calendar≤6.18.3Update to 6.18.3.1
CVE-2026-123464—
Medium4.3Missing AuthorizationCVE-2026-122668—

Search VulnCrest Radar

Are you sure?