wagtail vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-44200Mediumwagtail: Wagtail has improper permission handling when copying pages CVE-2026-44201Mediumwagtail: Wagtail has improper restriction handling on Documents and Images API CVE-2026-44199Mediumwagtail: Wagtail has improper permission handling when deleting form submissions CVE-2026-44198Mediumwagtail: Wagtail has improper permission handling when viewing page history CVE-2026-44197Mediumwagtail: Wagtail has improper permission handling when comparing revisions CVE-2026-28223Mediumwagtail: Wagtail Vulnerable to Cross-site Scripting in simple_translation admin interface CVE-2026-28222Mediumwagtail: Wagtail Vulnerable to Cross-site Scripting in TableBlock class attributes CVE-2026-25517Mediumwagtail: Wagtail has improper permission handling on admin preview endpoints CVE-2024-39317Highwagtail: Wagtail regular expression denial-of-service via search query parsing CVE-2024-35228Mediumwagtail: Improper Handling of Insufficient Permissions in `wagtail.contrib.settings`CVE-2024-32882Lowwagtail: Wagtail has permission check bypass when editing a model with per-field restrictions through…CVE-2023-45809Lowwagtail: Wagtail vulnerable to disclosure of user names via admin bulk action views CVE-2023-28837Mediumwagtail: Wagtail vulnerable to denial-of-service via memory exhaustion when uploading large files CVE-2023-28836Highwagtail: Wagtail vulnerable to stored Cross-site Scripting attack via ModelAdmin views CVE-2022-21683Mediumwagtail: Comment reply notifications sent to incorrect users CVE-2021-32681Mediumwagtail: Cross-site Scripting in wagtail CVE-2021-29434Highwagtail: Improper validation of URLs ('Cross-site Scripting') in Wagtail rich text fields CVE-2020-15118Highwagtail: Cross-Site Scripting in Wagtail CVE-2020-11037Mediumwagtail: Potential Observable Timing Discrepancy in Wagtail CVE-2020-11001Mediumwagtail: Possible XSS attack in Wagtail

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo