Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
π GNA-1 (CIRCL)
Select from 82 available sources using the dropdown above.
Bitnami VulnDB is not individually searchable yet β the search will cover the sources available on the search page.
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-zookeeper-2026-24308 | Apache ZooKeeper: Sensitive information disclosure in client configuration handling | 2026-03-10T08:52:17.946Z | 2026-09-08T08:34:36.952Z |
| bit-zookeeper-2026-24281 | Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager | 2026-03-10T08:52:16.699Z | 2026-09-08T08:34:36.952Z |
| bit-zookeeper-2025-58457 | Apache ZooKeeper: Insufficient Permission Check in AdminServer Snapshot/Restore Commands | 2025-09-26T08:51:26.070Z | 2026-09-08T08:34:36.952Z |
| bit-zookeeper-2024-51504 | Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server | 2024-11-09T07:22:22.387Z | 2026-09-08T08:34:36.952Z |
| bit-zookeeper-2024-23944 | Apache ZooKeeper: Information disclosure in persistent watcher handling | 2024-03-31T18:32:55.925Z | 2026-09-08T08:34:36.952Z |
| bit-zookeeper-2023-44981 | Apache ZooKeeper: Authorization bypass in SASL Quorum Peer Authentication | 2024-03-06T11:08:55.784Z | 2026-09-08T08:34:36.952Z |
| bit-zookeeper-2021-21295 | Possible request smuggling in HTTP/2 due missing validation | 2024-03-06T11:09:05.590Z | 2026-09-08T08:34:36.952Z |
| bit-wordpress-2026-63030 | WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution | 2026-07-27T05:55:54.872Z | 2026-09-08T08:34:36.952Z |
| bit-wordpress-2026-60137 | WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query | 2026-07-27T05:55:53.343Z | 2026-09-08T08:34:36.952Z |
| bit-wordpress-2024-4439 | 2024-05-14T07:38:44.185Z | 2026-09-08T08:34:36.952Z | |
| bit-wordpress-2024-31211 | Remote Code Execution in `WP_HTML_Token` | 2024-04-06T18:33:49.785Z | 2026-09-08T08:34:36.952Z |
| bit-wordpress-2024-31210 | PHP file upload bypass via Plugin installer | 2024-04-06T18:33:59.181Z | 2026-09-08T08:34:36.952Z |
| bit-wordpress-2023-5561 | WordPress < 6.3.2 - Unauthenticated Post Author Email Disclosure | 2024-03-06T11:08:48.764Z | 2026-09-08T08:34:36.952Z |
| bit-wordpress-2023-39999 | WordPress < 6.3.2 is vulnerable to Broken Access Control | 2024-03-06T11:08:58.803Z | 2026-09-08T08:34:36.952Z |
| bit-wordpress-2023-38000 | Auth. Stored Cross-Site Scripting (XSS) vulnerability in WordPress core and Gutenberg plugin via Navigation Links Block | 2024-03-06T11:09:07.064Z | 2026-09-08T08:34:36.952Z |
| bit-wordpress-2023-2745 | WordPress Core < 6.2.1 - Directory Traversal | 2024-03-06T11:09:15.187Z | 2026-09-08T08:34:36.952Z |
| bit-wordpress-2023-22622 | 2024-03-06T11:09:23.680Z | 2026-09-08T08:34:36.952Z | |
| bit-wordpress-2022-4973 | WordPress Core < 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via use of the_meta(); function | 2024-10-18T07:22:50.306Z | 2026-09-08T08:34:36.952Z |
| bit-wordpress-2022-43504 | 2024-03-06T11:09:32.259Z | 2026-09-08T08:34:36.952Z | |
| bit-wordpress-2022-43500 | 2024-03-06T11:09:40.879Z | 2026-09-08T08:34:36.952Z | |
| bit-wordpress-2022-43497 | 2024-03-06T11:09:47.006Z | 2026-09-08T08:34:36.952Z | |
| bit-wordpress-2022-3590 | WP <= 6.1.1 - Unauthenticated Blind SSRF via DNS Rebinding | 2024-03-06T11:09:54.469Z | 2026-09-08T08:34:36.952Z |
| bit-wordpress-2022-21664 | SQL injection in WordPress | 2024-03-06T11:10:00.809Z | 2026-09-08T08:34:36.952Z |
| bit-wordpress-2022-21663 | Authenticated Object Injection in Multisites in WordPress | 2024-03-06T11:10:06.883Z | 2026-09-08T08:34:36.952Z |
| bit-wordpress-2022-21662 | Stored XSS in WordPress | 2024-03-06T11:10:13.268Z | 2026-09-08T08:34:36.952Z |
| bit-wordpress-2022-21661 | SQL injection in WordPress | 2024-03-06T11:10:19.099Z | 2026-09-08T08:34:36.952Z |
| bit-wordpress-2021-44223 | 2024-03-06T11:10:25.977Z | 2026-09-08T08:34:36.952Z | |
| bit-wordpress-2021-39201 | Authenticated cross-site scripting (XSS) in WordPress editor | 2024-03-06T11:10:34.378Z | 2026-09-08T08:34:36.952Z |
| bit-wordpress-2021-39200 | Information Disclosure in wp_die() via JSONP in wordpress | 2024-03-06T11:10:40.070Z | 2026-09-08T08:34:36.952Z |
| bit-wordpress-2021-29450 | WordPress Authenticated disclosure of password-protected posts and pages | 2024-03-06T11:10:45.267Z | 2026-09-08T08:34:36.952Z |