WA
Product
wagtail
16
CVEs
0
On KEV
7.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 13Low 2
Watch
Add wagtail to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-54263 | 7.3 | Jul 1 | Wagtail: Reflected XSS in dynamic image URL generator view Affected: < 7.0.8; >= 7.1.0, < 7.3.3; >= 7.4.0, < 7.4.2 |
| CVE-2026-54261 | 6.5 | Jul 1 | Wagtail: Improper permission handling in image preview Affected: < 7.0.8; >= 7.1.0, < 7.3.3; >= 7.4.0, < 7.4.2 |
| CVE-2026-44200 | 6.5 | May 11 | Wagtail: Improper permission handling when copying pages Affected: < 7.0.7; >= 7.1, < 7.3.2 |
| CVE-2026-44199 | 6.5 | May 11 | Wagtail: Improper permission handling when deleting form submissions Affected: < 7.0.7; >= 7.1, < 7.3.2 |
| CVE-2026-44197 | 6.5 | May 11 | Wagtail: Improper permission handling when comparing revisions Affected: < 7.0.7; >= 7.1, < 7.3.2 |
| CVE-2026-28222 | 6.1 | Mar 5 | Wagtail: Improper escaping of HTML (Cross-site Scripting) on TableBlock class attributes Affected: < 6.3.8; >= 6.4rc1, < 7.0.6; >= 7.1rc1, < 7.2.3; >= 7.3rc1, < 7.3.1 |
| CVE-2026-28223 | 6.1 | Mar 5 | Wagtail: Improper escaping of HTML (Cross-site Scripting) in simple_translation admin interface Affected: < 6.3.8; >= 6.4rc1, < 7.0.6; >= 7.1rc1, < 7.2.3; >= 7.3rc1, < 7.3.1 |
| CVE-2024-35228 | 5.5 | May 30 | Improper Handling of Insufficient Permissions in Wagtail Affected: >= 6.0.0, < 6.0.5; >= 6.1.0, < 6.1.2 |
| CVE-2026-44201 | 5.3 | May 11 | Wagtail: Improper restriction handling on Documents and Images API Affected: < 7.0.7; >= 7.1, < 7.3.2 |
| CVE-2024-39317 | 4.9 | Jul 11 | Wagtail regular expression denial-of-service via search query parsing Affected: >= 2.0, < 5.2.6; >= 6.0, < 6.0.6; >= 6.1, < 6.1.3 |
| CVE-2026-55468 | 4.3 | Aug 24 | Wagtail: Improper restriction handling on Pages admin API Affected: < 7.0.9; >= 7.1, < 7.3.4; >= 7.4, < 7.4.3; >= 8.0rc1, < 8.0rc2 |
| CVE-2026-54262 | 4.3 | Jul 1 | Wagtail: Pages translations can be created without page permissions when using simple_translation Affected: < 7.0.8; >= 7.1.0, < 7.3.3; >= 7.4.0, < 7.4.2 |
| CVE-2026-54259 | 4.3 | Jul 1 | Wagtail: Improper restriction handling on Documents and Images chosen endpoints Affected: < 7.0.8; >= 7.1.0, < 7.3.3; >= 7.4.0, < 7.4.2 |
| CVE-2026-44198 | 4.3 | May 11 | Wagtail: Improper permission handling when viewing page history Affected: < 7.0.7; >= 7.1, < 7.3.2 |
| CVE-2026-54260 | 2.7 | Jul 1 | Wagtail: Denial of service via unbounded filter specs in the image preview Affected: < 7.0.8; >= 7.1.0, < 7.3.3; >= 7.4.0, < 7.4.2 |
| CVE-2026-25517 | 2.7 | Feb 4 | Wagtail has improper permission handling on admin preview endpoints Affected: < 6.3.6; >= 6.4rc1, < 7.0.4; >= 7.1rc1, < 7.1.3; >= 7.2rc1, < 7.2.2; = 7.3rc1 |
Showing 16