CVE Tools
Track your stack

Wagtail

30 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Wagtail, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Wagtail CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Wagtail CVEs per month
MonthCVEs
2024-110
2024-120
2025-010
2025-020
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-021
2026-032
2026-040
2026-055
2026-060
2026-075
2026-085
2026-090
2026-100

Severity

How the 30 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • High14%
  • Medium2181%
  • Low415%

Latest CVEs

The 15 most recently published vulnerabilities affecting Wagtail.

  1. CVE-2026-55468Wagtail: Improper restriction handling on Pages admin API4.3
  2. GHSA-jm5p-837g-rv8gWagtail: Improper restriction handling on Page translation API endpoint—
  3. GHSA-x5cx-w6p2-mxf2Wagtail: Improper permission handling when copying snippets—
  4. GHSA-c2xx-cjmh-9q8fWagtail: Improper restriction handling on descendant collections in Documents and Images API—
  5. GHSA-92hv-j533-69wcWagtail: Identification of documents by SHA1 hash—
  6. CVE-2026-54263Wagtail: Reflected XSS in dynamic image URL generator view7.3
  7. CVE-2026-54262Wagtail: Pages translations can be created without page permissions when using simple_translation4.3
  8. CVE-2026-54261Wagtail: Improper permission handling in image preview6.5
  9. CVE-2026-54259Wagtail: Improper restriction handling on Documents and Images chosen endpoints4.3
  10. CVE-2026-54260Wagtail: Denial of service via unbounded filter specs in the image preview4.3
  11. CVE-2026-44201Wagtail: Improper restriction handling on Documents and Images API5.3
  12. CVE-2026-44200Wagtail: Improper permission handling when copying pages6.5
  13. CVE-2026-44199Wagtail: Improper permission handling when deleting form submissions6.5
  14. CVE-2026-44198Wagtail: Improper permission handling when viewing page history4.3
  15. CVE-2026-44197Wagtail: Improper permission handling when comparing revisions6.5

Product grouping is registry-driven, with AI assist and human review. How it works