Known vulnerabilities in wagtail

Vendor: Torchbox
Software: wagtail
Software CPE: cpe:2.3:a:torchbox:wagtail:*:*:*:*:*:django:*:*
Total vulnerabilities: 30
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting wagtail wagtail is affected by 30 known vulnerabilities: 7 medium, 23 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144538 - Improper Handling of Insufficient Permissions or Privileges
CWE-280 Medium
No
No
7.0.9, 7.3.4, 7.4.3, 8.0 rc2 21.08.2026 SB2026082149
#VU144529 - Improper Handling of Insufficient Permissions or Privileges
CWE-280 Medium
No
No
7.0.9, 7.3.4, 7.4.3, 8.0 rc2 21.08.2026 SB2026082149
#VU144528 - Improper Handling of Insufficient Permissions or Privileges
CWE-280 Medium
No
No
7.0.9, 7.3.4, 7.4.3, 8.0 rc2 21.08.2026 SB2026082149
#VU144518 - Improper Handling of Insufficient Permissions or Privileges
CWE-280 Medium
No
No
7.0.9, 7.3.4, 7.4.3, 8.0 rc2 21.08.2026 SB2026082149
#VU144517 - Improper Handling of Insufficient Permissions or Privileges
CVE-2026-55468
CWE-280 Medium
No
No
7.0.9, 7.3.4, 7.4.3, 8.0 rc2 21.08.2026 SB2026082149
#VU134577 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-54263
CWE-79 Low
No
No
7.3.3, 7.4.2 16.06.2026 SB2026061602
#VU134576 - Improper Handling of Insufficient Permissions or Privileges
CVE-2026-54262
CWE-280 Low
No
No
7.0.8, 7.3.3, 7.4.2 16.06.2026 SB2026061602
#VU134575 - Improper Handling of Insufficient Permissions or Privileges
CVE-2026-54261
CWE-280 Low
No
No
7.0.8, 7.3.3, 7.4.2 16.06.2026 SB2026061602
#VU134574 - Resource exhaustion
CVE-2026-54260
CWE-400 Low
No
No
7.0.8, 7.3.3, 7.4.2 16.06.2026 SB2026061602
#VU134573 - Improper Handling of Insufficient Permissions or Privileges
CVE-2026-54259
CWE-280 Low
No
No
7.0.8, 7.3.3, 7.4.2 16.06.2026 SB2026061602
#VU130200 - Improper Handling of Insufficient Permissions or Privileges
CVE-2026-44200
CWE-280 Low
No
No
7.0.7, 7.3.2 05.05.2026 SB20260505113
#VU130199 - Improper Handling of Insufficient Permissions or Privileges
CVE-2026-44201
CWE-280 Medium
No
No
7.0.7, 7.3.2 05.05.2026 SB20260505113
#VU130198 - Improper Handling of Insufficient Permissions or Privileges
CVE-2026-44199
CWE-280 Low
No
No
7.0.7, 7.3.2 05.05.2026 SB20260505113
#VU130197 - Improper Handling of Insufficient Permissions or Privileges
CVE-2026-44198
CWE-280 Low
No
No
7.0.7, 7.3.2 05.05.2026 SB20260505113
#VU130196 - Improper Handling of Insufficient Permissions or Privileges
CVE-2026-44197
CWE-280 Low
No
No
7.0.7, 7.3.2 05.05.2026 SB20260505113
#VU130195 - Missing Authorization
CVE-2026-25517
CWE-862 Low
No
No
6.3.6, 7.0.4, 7.1.3, 7.2.2, 7.3 05.05.2026 SB20260505112
#VU123486 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-28222
CWE-79 Low
No
No
6.3.8, 7.0.6, 7.2.3, 7.3.1 04.03.2026 SB2026030410
#VU123485 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-28223
CWE-79 Low
No
No
6.3.8, 7.0.6, 7.2.3, 7.3.1 04.03.2026 SB2026030410
#VU94376 - Inefficient Regular Expression Complexity
CVE-2024-39317
CWE-1333 Medium
No
No
5.2.6, 6.0.6, 6.1.3 16.07.2024 SB2024071643
#VU90114 - Permissions, Privileges, and Access Controls
CVE-2024-35228
CWE-264 Low
No
No
6.0.5, 6.1.2 31.05.2024 SB2024053139


Showing elements 1 - 20 out of 30