Known vulnerabilities in wagtail

Vendor: Torchbox
Software: wagtail
Software CPE: cpe:2.3:a:torchbox:wagtail:*:*:*:*:*:django:*:*
Total vulnerabilities: 35
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting wagtail wagtail is affected by 35 known vulnerabilities: 8 medium, 27 low Critical High Medium Low

Vulnerabilities (35)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144538 - Improper Handling of Insufficient Permissions or Privileges
CWE-280 Medium
No
No
7.0.9, 7.3.4, 7.4.3, 8.0 rc2 21.08.2026 SB2026082149
#VU144529 - Improper Handling of Insufficient Permissions or Privileges
CWE-280 Medium
No
No
7.0.9, 7.3.4, 7.4.3, 8.0 rc2 21.08.2026 SB2026082149
#VU144528 - Improper Handling of Insufficient Permissions or Privileges
CWE-280 Medium
No
No
7.0.9, 7.3.4, 7.4.3, 8.0 rc2 21.08.2026 SB2026082149
#VU144518 - Improper Handling of Insufficient Permissions or Privileges
CWE-280 Medium
No
No
7.0.9, 7.3.4, 7.4.3, 8.0 rc2 21.08.2026 SB2026082149
#VU144517 - Improper Handling of Insufficient Permissions or Privileges
CVE-2026-55468
CWE-280 Medium
No
No
7.0.9, 7.3.4, 7.4.3, 8.0 rc2 21.08.2026 SB2026082149
#VU134577 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-54263
CWE-79 Low
No
No
7.3.3, 7.4.2 16.06.2026 SB2026061602
#VU134576 - Improper Handling of Insufficient Permissions or Privileges
CVE-2026-54262
CWE-280 Low
No
No
7.0.8, 7.3.3, 7.4.2 16.06.2026 SB2026061602
#VU134575 - Improper Handling of Insufficient Permissions or Privileges
CVE-2026-54261
CWE-280 Low
No
No
7.0.8, 7.3.3, 7.4.2 16.06.2026 SB2026061602
#VU134574 - Resource exhaustion
CVE-2026-54260
CWE-400 Low
No
No
7.0.8, 7.3.3, 7.4.2 16.06.2026 SB2026061602
#VU134573 - Improper Handling of Insufficient Permissions or Privileges
CVE-2026-54259
CWE-280 Low
No
No
7.0.8, 7.3.3, 7.4.2 16.06.2026 SB2026061602
#VU130200 - Improper Handling of Insufficient Permissions or Privileges
CVE-2026-44200
CWE-280 Low
No
No
7.0.7, 7.3.2 05.05.2026 SB20260505113
#VU130199 - Improper Handling of Insufficient Permissions or Privileges
CVE-2026-44201
CWE-280 Medium
No
No
7.0.7, 7.3.2 05.05.2026 SB20260505113
#VU130198 - Improper Handling of Insufficient Permissions or Privileges
CVE-2026-44199
CWE-280 Low
No
No
7.0.7, 7.3.2 05.05.2026 SB20260505113
#VU130197 - Improper Handling of Insufficient Permissions or Privileges
CVE-2026-44198
CWE-280 Low
No
No
7.0.7, 7.3.2 05.05.2026 SB20260505113
#VU130196 - Improper Handling of Insufficient Permissions or Privileges
CVE-2026-44197
CWE-280 Low
No
No
7.0.7, 7.3.2 05.05.2026 SB20260505113
#VU130195 - Missing Authorization
CVE-2026-25517
CWE-862 Low
No
No
6.3.6, 7.0.4, 7.1.3, 7.2.2, 7.3 05.05.2026 SB20260505112
#VU123486 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-28222
CWE-79 Low
No
No
6.3.8, 7.0.6, 7.2.3, 7.3.1 04.03.2026 SB2026030410
#VU123485 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-28223
CWE-79 Low
No
No
6.3.8, 7.0.6, 7.2.3, 7.3.1 04.03.2026 SB2026030410
#VU130193 - Improper Access Control
CVE-2022-21683
CWE-284 Low
No
No
2.15.2 18.01.2022 SB2022011860
#VU130194 - Information Exposure Through Timing Discrepancy
CVE-2020-11037
CWE-208 Low
No
No
2.7.3, 2.8.2, 2.9 04.05.2020 SB2020050450


Showing elements 1 - 20 out of 35