Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
HIGH
CVE-2026-33923 - A signature verification vulnerability was discovered in the update installation functionality due to inconsistent valid
NEAR-REAL-TIME
CVE-2026-33923 · NIST NVD - National Vulnerability Database · published 2026-10-29T11:17
Source ↗
MEDIUM
CVE-2026-118989 - WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 contains a server-side request forgery vulnerability
NEAR-REAL-TIME
CVE-2026-118989 · NIST NVD - National Vulnerability Database · published 2026-10-29T11:17
Source ↗
MEDIUM
CVE-2026-118984 - OmniRoute 3.8.0 before 3.8.52 contains an unverified password change vulnerability that allows holders of manage- or adm
NEAR-REAL-TIME
CVE-2026-118984 · NIST NVD - National Vulnerability Database · published 2026-10-29T11:17
Source ↗
HIGH
CVE-2026-116409 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Swings Upsell O
NEAR-REAL-TIME
CVE-2026-116409 · NIST NVD - National Vulnerability Database · published 2026-10-29T11:17
Source ↗
HIGH
CVE-2026-115967 - Weak Authentication vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Authentication
NEAR-REAL-TIME
CVE-2026-115967 · NIST NVD - National Vulnerability Database · published 2026-10-29T11:17
Source ↗
HIGH
CVE-2026-115965 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BuddyPress BuddyPr
NEAR-REAL-TIME
CVE-2026-115965 · NIST NVD - National Vulnerability Database · published 2026-10-29T11:17
Source ↗
CRITICAL
CVE-2026-115964 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Mot
NEAR-REAL-TIME
CVE-2026-115964 · NIST NVD - National Vulnerability Database · published 2026-10-29T11:17
Source ↗
HIGH
CVE-2026-115963 - Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration all
NEAR-REAL-TIME
CVE-2026-115963 · NIST NVD - National Vulnerability Database · published 2026-10-29T11:17
Source ↗
MEDIUM
CVE-2026-115962 - Authentication Bypass by Spoofing vulnerability in myCred myCred mycred allows Identity Spoofing.This issue affects myCr
NEAR-REAL-TIME
CVE-2026-115962 · NIST NVD - National Vulnerability Database · published 2026-10-29T11:17
Source ↗
INFORMATIONAL
CVE-2026-115942 - A misconfigured wildcard TLS certificate causes a stack read overflow. This issue does not affect any wildcard certif
NEAR-REAL-TIME
CVE-2026-115942 · NIST NVD - National Vulnerability Database · published 2026-10-29T11:17
apache
Source ↗
HIGH
CVE-2026-115611 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net Table
NEAR-REAL-TIME
CVE-2026-115611 · NIST NVD - National Vulnerability Database · published 2026-10-29T11:17
Source ↗
HIGH
CVE-2026-115599 - Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access C
NEAR-REAL-TIME
CVE-2026-115599 · NIST NVD - National Vulnerability Database · published 2026-10-29T11:17
Source ↗
HIGH
CVE-2026-115592 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OceanWP OceanWP oc
NEAR-REAL-TIME
CVE-2026-115592 · NIST NVD - National Vulnerability Database · published 2026-10-29T11:17
Source ↗
INFORMATIONAL
CVE-2026-114230 - When dispatching SASL frames to authenticate the peer, Proton will also dispatch AMQP frames if they claim to be SASL fr
NEAR-REAL-TIME
CVE-2026-114230 · NIST NVD - National Vulnerability Database · published 2026-10-29T11:17
apache
Source ↗
HIGH
CVE-2026-114193 - Missing Authorization vulnerability in Eyal Fitoussi GEO my WordPress geo-my-wp allows Exploiting Incorrectly Configured
NEAR-REAL-TIME
CVE-2026-114193 · NIST NVD - National Vulnerability Database · published 2026-10-29T11:17
wordpress
Source ↗
HIGH
CVE-2026-112827 - Missing Authorization vulnerability in VillaTheme HANDMADE – Dropshipping for Etsy and WooCommerce handmade-dropshipping
NEAR-REAL-TIME
CVE-2026-112827 · NIST NVD - National Vulnerability Database · published 2026-10-29T11:17
Source ↗
INFORMATIONAL
CVE-2026-105042 - A message body that is deeply nested and decoded by pn_message_body() could overflow the stack and cause a crash. Thi
NEAR-REAL-TIME
CVE-2026-105042 · NIST NVD - National Vulnerability Database · published 2026-10-29T11:17
apache
Source ↗
INFORMATIONAL
CVE-2026-105031 - When using the OpenSSL TLS implementation, both the pn_ssl_domain_set_trusted_ca_db() & pn_tls_config_set_trusted_certs(
NEAR-REAL-TIME
CVE-2026-105031 · NIST NVD - National Vulnerability Database · published 2026-10-29T11:17
apache
Source ↗
MEDIUM
CVE-2026-91153 - The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin for WordPress is vulne
NEAR-REAL-TIME
CVE-2026-91153 · NIST NVD - National Vulnerability Database · published 2026-10-29T10:17
wordpressaws
Source ↗
MEDIUM
CVE-2026-91152 - The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin for WordPress is vulne
NEAR-REAL-TIME
CVE-2026-91152 · NIST NVD - National Vulnerability Database · published 2026-10-29T10:17
wordpress
Source ↗