WA
Vendor
wagtail
17
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-55468 | WA wagtail wagtail | 4.3 | Aug 24 | Wagtail: Improper restriction handling on Pages admin API |
| CVE-2026-54263 | WA wagtail wagtail | 7.3 | Jul 1 | Wagtail: Reflected XSS in dynamic image URL generator view |
| CVE-2026-54262 | WA wagtail wagtail | 4.3 | Jul 1 | Wagtail: Pages translations can be created without page permissions when using simple_translation |
| CVE-2026-54261 | WA wagtail wagtail | 6.5 | Jul 1 | Wagtail: Improper permission handling in image preview |
| CVE-2026-54259 | WA wagtail wagtail | 4.3 | Jul 1 | Wagtail: Improper restriction handling on Documents and Images chosen endpoints |
| CVE-2026-54260 | WA wagtail wagtail | 2.7 | Jul 1 | Wagtail: Denial of service via unbounded filter specs in the image preview |
| CVE-2026-44201 | WA wagtail wagtail | 5.3 | May 11 | Wagtail: Improper restriction handling on Documents and Images API |
| CVE-2026-44200 | WA wagtail wagtail | 6.5 | May 11 | Wagtail: Improper permission handling when copying pages |
| CVE-2026-44199 | WA wagtail wagtail | 6.5 | May 11 | Wagtail: Improper permission handling when deleting form submissions |
| CVE-2026-44198 | WA wagtail wagtail | 4.3 | May 11 | Wagtail: Improper permission handling when viewing page history |
| CVE-2026-44197 | WA wagtail wagtail | 6.5 | May 11 | Wagtail: Improper permission handling when comparing revisions |
| CVE-2026-28222 | WA wagtail wagtail | 6.1 | Mar 5 | Wagtail: Improper escaping of HTML (Cross-site Scripting) on TableBlock class attributes |
| CVE-2026-28223 | WA wagtail wagtail | 6.1 | Mar 5 | Wagtail: Improper escaping of HTML (Cross-site Scripting) in simple_translation admin interface |
| CVE-2026-25517 | WA wagtail wagtail | 2.7 | Feb 4 | Wagtail has improper permission handling on admin preview endpoints |
| CVE-2024-39317 | WA wagtail wagtail | 4.9 | Jul 11 | Wagtail regular expression denial-of-service via search query parsing |
| CVE-2024-35228 | WA wagtail wagtail | 5.5 | May 30 | Improper Handling of Insufficient Permissions in Wagtail |
| CVE-2024-32882 | WA wagtail wagtail | 2.7 | May 2 | Permission check bypass when editing a model with per-field restrictions in wagtail |