Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
MEDIUM
CVE-2026-88941 - Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. The vulnerabil
NEAR-REAL-TIME
CVE-2026-88941 · NIST NVD - National Vulnerability Database · published 2026-10-29T10:17
Source ↗
MEDIUM
CVE-2026-118192 - The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to generic SQL Inj
NEAR-REAL-TIME
CVE-2026-118192 · NIST NVD - National Vulnerability Database · published 2026-10-29T10:17
wordpress
Source ↗
INFORMATIONAL
CVE-2026-117611 - Improper certificate validation in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL): the Certificate Authority st
NEAR-REAL-TIME
CVE-2026-117611 · NIST NVD - National Vulnerability Database · published 2026-10-29T10:17
Source ↗
MEDIUM
CVE-2026-116763 - The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all
NEAR-REAL-TIME
CVE-2026-116763 · NIST NVD - National Vulnerability Database · published 2026-10-29T10:17
wordpress
Source ↗
HIGH
CVE-2026-111419 - A sensitive information exposure vulnerability exists on the Foxit official website because JavaScript code contains thi
NEAR-REAL-TIME
CVE-2026-111419 · NIST NVD - National Vulnerability Database · published 2026-10-29T10:17
Source ↗
HIGH
CVE-2026-111418 - A server-side request forgery (SSRF) vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service
NEAR-REAL-TIME
CVE-2026-111418 · NIST NVD - National Vulnerability Database · published 2026-10-29T10:17
Source ↗
HIGH
CVE-2026-111417 - A broken access control vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service due to the u
NEAR-REAL-TIME
CVE-2026-111417 · NIST NVD - National Vulnerability Database · published 2026-10-29T10:17
Source ↗
MEDIUM
CVE-2026-111318 - The HT Mega Addons for Elementor – Elementor Widgets & Template Builder plugin for WordPress is vulnerable to Stored DOM
NEAR-REAL-TIME
CVE-2026-111318 · NIST NVD - National Vulnerability Database · published 2026-10-29T10:17
wordpress
Source ↗
MEDIUM
CVE-2026-110707 - The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is
NEAR-REAL-TIME
CVE-2026-110707 · NIST NVD - National Vulnerability Database · published 2026-10-29T10:17
wordpress
Source ↗
MEDIUM
CVE-2026-109215 - The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bbp_reply_content' parame
NEAR-REAL-TIME
CVE-2026-109215 · NIST NVD - National Vulnerability Database · published 2026-10-29T10:17
wordpress
Source ↗
HIGH
CVE-2026-107743 - The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including,
NEAR-REAL-TIME
CVE-2026-107743 · NIST NVD - National Vulnerability Database · published 2026-10-29T10:17
wordpress
Source ↗
MEDIUM
CVE-2026-107629 - The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scr
NEAR-REAL-TIME
CVE-2026-107629 · NIST NVD - National Vulnerability Database · published 2026-10-29T10:17
wordpress
Source ↗
MEDIUM
CVE-2026-107627 - The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scr
NEAR-REAL-TIME
CVE-2026-107627 · NIST NVD - National Vulnerability Database · published 2026-10-29T10:17
wordpress
Source ↗
MEDIUM
CVE-2026-104727 - The Sequential Order Numbers for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cond
NEAR-REAL-TIME
CVE-2026-104727 · NIST NVD - National Vulnerability Database · published 2026-10-29T10:17
wordpress
Source ↗
MEDIUM
CVE-2026-103875 - The Media Library Assistant plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'search-string'
NEAR-REAL-TIME
CVE-2026-103875 · NIST NVD - National Vulnerability Database · published 2026-10-29T10:17
wordpress
Source ↗
MEDIUM
CVE-2026-103485 - The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'feat
NEAR-REAL-TIME
CVE-2026-103485 · NIST NVD - National Vulnerability Database · published 2026-10-29T10:17
wordpress
Source ↗
MEDIUM
CVE-2026-110133 - ghostscript: Heap buffer overflow in Ghostscript TrueType outliner due to nPointsTotal integer underflow during retry ro
NEAR-REAL-TIME
CVE-2026-110133 · Red Hat - CVE Feed · published 2026-10-29T09:46 · correlated from 2 sources
Red Hat
Source ↗
LOW
CVE-2026-112922 - ghostscript: Out-of-bounds read in ghostscript shade_next_color via integer overflow of indexed color index in mesh shad
NEAR-REAL-TIME
CVE-2026-112922 · Red Hat - CVE Feed · published 2026-10-29T09:40 · correlated from 2 sources
Red Hat
Source ↗
INFORMATIONAL
CVE-2026-7190 - A cross-site scripting (XSS) vulnerability in the ICTBroadcast software, which affects the demo environment. The vulnera
NEAR-REAL-TIME
CVE-2026-7190 · NIST NVD - National Vulnerability Database · published 2026-10-29T09:17
Source ↗
LOW
CVE-2026-115303 - The Contact Form by Supsystic WordPress plugin before 1.11.1 does not strip CR/LF characters or re-validate submitted fi
NEAR-REAL-TIME
CVE-2026-115303 · NIST NVD - National Vulnerability Database · published 2026-10-29T09:17
wordpress
Source ↗