wagtail vulnerabilities

CVEs per yearBy the year they were published

1. 20203
2. 20212
3. 20221
4. 20233
5. 20243
6. 202614

Newest CVEs

• CVE-2026-55468

  Wagtail: Improper restriction handling on Pages admin API

  wagtail · wagtail

  Medium4.3
• CVE-2026-54263

  Wagtail: Reflected XSS in dynamic image URL generator view

  wagtail · wagtail

  High7.3
• CVE-2026-54262

  Wagtail: Pages translations can be created without page permissions when using simple_translation

  wagtail · wagtail

  Medium4.3
• CVE-2026-54261

  Wagtail: Improper permission handling in image preview

  wagtail · wagtail

  Medium6.5
• CVE-2026-54259

  Wagtail: Improper restriction handling on Documents and Images chosen endpoints

  wagtail · wagtail

  Medium4.3
• CVE-2026-54260

  Wagtail: Denial of service via unbounded filter specs in the image preview

  wagtail · wagtail

  Medium4.3
• CVE-2026-44201

  Wagtail: Improper restriction handling on Documents and Images API

  wagtail · wagtail

  Medium5.3
• CVE-2026-44200

  Wagtail: Improper permission handling when copying pages

  wagtail · wagtail

  Medium6.5
• CVE-2026-44199

  Wagtail: Improper permission handling when deleting form submissions

  wagtail · wagtail

  Medium6.5
• CVE-2026-44198

  Wagtail: Improper permission handling when viewing page history

  wagtail · wagtail

  Medium4.3