Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
MEDIUM
CVE-2026-115300 - The Contact Form by Supsystic WordPress plugin before 1.11.1 does not validate a CSRF token or request origin on two ad
NEAR-REAL-TIME
CVE-2026-115300 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
wordpress
Source ↗
MEDIUM
CVE-2026-115299 - The Contact Form by Supsystic WordPress plugin before 1.11.1 does not verify a CSRF nonce before saving its mail settin
NEAR-REAL-TIME
CVE-2026-115299 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
wordpress
Source ↗
MEDIUM
CVE-2026-115282 - The Recipe Card Blocks Lite WordPress plugin before 3.6.4 does not perform an authorization check before rendering posts
NEAR-REAL-TIME
CVE-2026-115282 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
wordpress
Source ↗
MEDIUM
CVE-2026-115259 - The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.6.0 does not have proper authorization checks w
NEAR-REAL-TIME
CVE-2026-115259 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
wordpress
Source ↗
CRITICAL
CVE-2026-115245 - The Chat AI with Dispatcher WordPress plugin before 2.4 does not properly validate uploaded files, relying only on a spo
NEAR-REAL-TIME
CVE-2026-115245 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
wordpress
Source ↗
MEDIUM
CVE-2026-114270 - The GeoDirectory WordPress plugin before 2.8.197 does not honour post password protection when rendering a listing, all
NEAR-REAL-TIME
CVE-2026-114270 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
wordpress
Source ↗
CRITICAL
CVE-2026-113617 - The Automated Import Products to Cart WordPress plugin before 1.0.4 does not sanitize a user-supplied file path before u
NEAR-REAL-TIME
CVE-2026-113617 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
wordpress
Source ↗
CRITICAL
CVE-2026-113616 - The LogixFast Auth WordPress plugin before 1.0.4 does not deliver its password-reset one-time code to the resolved accou
NEAR-REAL-TIME
CVE-2026-113616 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
wordpress
Source ↗
HIGH
CVE-2026-111739 - The Two Factor Authentication WordPress plugin before 1.17.0, All-In-One Security (AIOS) WordPress plugin before 5.5.0
NEAR-REAL-TIME
CVE-2026-111739 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
wordpress
Source ↗
MEDIUM
CVE-2026-110983 - The WP Photo Album Plus WordPress plugin before 9.3.04.004 does not verify the origin or a security token for one of its
NEAR-REAL-TIME
CVE-2026-110983 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
wordpress
Source ↗
MEDIUM
CVE-2026-110505 - The Enable SVG, WebP, and ICO Upload WordPress plugin before 1.1.6 does not prevent animation elements in uploaded SVG f
NEAR-REAL-TIME
CVE-2026-110505 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
wordpress
Source ↗
MEDIUM
CVE-2026-110504 - The Enable SVG, WebP, and ICO Upload WordPress plugin before 1.1.6 does not sanitize uploaded SVG files whose content is
NEAR-REAL-TIME
CVE-2026-110504 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
wordpress
Source ↗
MEDIUM
CVE-2026-110030 - The Hide Price Until Login WordPress plugin before 1.1.2 does not restrict a guest-registration handler and does not hon
NEAR-REAL-TIME
CVE-2026-110030 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
wordpress
Source ↗
MEDIUM
CVE-2026-108763 - The Wallet System for WooCommerce WordPress plugin before 2.8.2 does not restrict its KYC document submission handler t
NEAR-REAL-TIME
CVE-2026-108763 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
wordpress
Source ↗
LOW
CVE-2026-108686 - The WP Post Author WordPress plugin before 4.2.0 does not restrict the integration settings it returns to visitors, all
NEAR-REAL-TIME
CVE-2026-108686 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
wordpress
Source ↗
LOW
CVE-2026-108685 - The WP Post Author WordPress plugin before 4.2.0 does not check that the account was created before updating its profil
NEAR-REAL-TIME
CVE-2026-108685 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
wordpress
Source ↗
LOW
CVE-2026-105258 - The Appointment Booking Plugin WordPress plugin before 5.7.6 does not escape several booking-form step content settings
NEAR-REAL-TIME
CVE-2026-105258 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
wordpress
Source ↗
CRITICAL
CVE-2026-103693 - The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an una
NEAR-REAL-TIME
CVE-2026-103693 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
wordpress
Source ↗
LOW
CVE-2024-3586 - The LetterPress WordPress plugin before 2.4.0 does not sanitise and escape some of its settings, which could allow high
NEAR-REAL-TIME
CVE-2024-3586 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
wordpress
Source ↗
HIGH
CVE-2026-96741 - The DSGVO All in one for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Ou
NEAR-REAL-TIME
CVE-2026-96741 · NIST NVD - National Vulnerability Database · published 2026-10-29T04:18
wordpressgoogle
Source ↗