wagtail

Products

Exploited and recent CVEs

• CVE-2026-55468 Medium 4.3 Wagtail: Improper restriction handling on Pages admin API 0.3%
• CVE-2026-54263 High 7.3 Wagtail: Reflected XSS in dynamic image URL generator view 0.4%
• CVE-2026-54262 Medium 4.3 Wagtail: Pages translations can be created without page permissions when using simple_translation 0.3%
• CVE-2026-54261 Medium 6.5 Wagtail: Improper permission handling in image preview 0.3%
• CVE-2026-54259 Medium 4.3 Wagtail: Improper restriction handling on Documents and Images chosen endpoints 0.3%
• CVE-2026-54260 Medium 4.3 Wagtail: Denial of service via unbounded filter specs in the image preview 0.4%
• CVE-2026-44201 Medium 5.3 Wagtail: Improper restriction handling on Documents and Images API 0.3%
• CVE-2026-44200 Medium 6.5 Wagtail: Improper permission handling when copying pages 0.2%
• CVE-2026-44199 Medium 6.5 Wagtail: Improper permission handling when deleting form submissions 0.2%
• CVE-2026-44198 Medium 4.3 Wagtail: Improper permission handling when viewing page history 0.2%
• CVE-2026-44197 Medium 6.5 Wagtail: Improper permission handling when comparing revisions 0.2%
• CVE-2026-28222 Medium 6.1 Wagtail: Improper escaping of HTML (Cross-site Scripting) on TableBlock class attributes 0.5%
• CVE-2026-28223 Medium 6.1 Wagtail: Improper escaping of HTML (Cross-site Scripting) in simple_translation admin interface 0.5%
• CVE-2026-25517 Medium 5.1 Wagtail has improper permission handling on admin preview endpoints 0.4%
• CVE-2024-39317 Medium 6.5 Wagtail regular expression denial-of-service via search query parsing 0.6%
• CVE-2024-35228 Medium 5.5 Improper Handling of Insufficient Permissions in Wagtail 0.3%
• CVE-2024-32882 Low 2.7 Permission check bypass when editing a model with per-field restrictions in wagtail 0.5%
• CVE-2023-45809 Low 2.7 Disclosure of user names via admin bulk action views in wagtail 0.6%
• CVE-2023-28837 Medium 4.9 Wagtail vulnerable to denial-of-service via memory exhaustion when uploading large files 1.1%
• CVE-2023-28836 Medium 6.4 Wagtail vulnerable to stored Cross-site Scripting attack via ModelAdmin views 0.8%
• CVE-2022-21683 Low 3.5 Comment reply notifications sent to incorrect users in wagtail 1.0%
• CVE-2021-32681 Medium 5.4 Improper escaping of HTML ('Cross-site Scripting') in Wagtail StreamField blocks 1.1%
• CVE-2021-29434 Medium 6.1 Improper validation of URLs ('Cross-site Scripting') in Wagtail rich text fields 0.6%
• CVE-2020-15118 Medium 5.7 Cross-Site Scripting in Wagtail 1.1%
• CVE-2020-11037 Medium 6.1 Potential Observable Timing Discrepancy in Wagtail 0.2%
• CVE-2020-11001 Medium 5.8 Possible XSS attack in Wagtail 1.3%