Skip to content
OpenAdvisories

Category

Web / CMS

26,622 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-60137 Exploited Public exploit

    WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query

    WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query, which could allow SQL Injection when a plugin or theme passes untrusted input to the parameter.

    WordPress WordPress wordpress wordpress Web / CMS Debian Ubuntu
    KEV Jul 21, 2026
  • Medium 5.3
    CVE-2023-23752 Exploited Public exploit EPSS 100%

    [20230201] - Core - Improper access check in webservice endpoints

    An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints.

    Joomla! Project Joomla! CMS Web / CMS
    KEV Jan 8, 2024
  • Medium 5.3
    CVE-2021-26086 Exploited Public exploit EPSS 100%

    Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path t…

    Atlassian Jira Server Jira Data Center Web / CMS
    KEV Nov 12, 2024
  • Medium 5.3
    CVE-2021-26085 Exploited · Ransomware Public exploit EPSS 100%

    Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authoriz…

    Atlassian Confluence Server Confluence Data Center Web / CMS
    KEV Mar 28, 2022