Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
HIGH
CVE-2026-96669 - The Food Store – Online Food Delivery & Pickup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'se
NEAR-REAL-TIME
CVE-2026-96669 · NIST NVD - National Vulnerability Database · published 2026-10-29T04:18
wordpress
Source ↗
HIGH
CVE-2026-96666 - The Schema App Structured Data plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via
NEAR-REAL-TIME
CVE-2026-96666 · NIST NVD - National Vulnerability Database · published 2026-10-29T04:18
wordpress
Source ↗
HIGH
CVE-2026-96228 - SSL Wireless SMS Notification for WordPress is vulnerable to Authentication Bypass in all versions up to, and including,
NEAR-REAL-TIME
CVE-2026-96228 · NIST NVD - National Vulnerability Database · published 2026-10-29T04:18
wordpress
Source ↗
HIGH
CVE-2026-93904 - The Social Web Suite – Social Media Auto Post, Social Media Auto Publish plugin for WordPress is vulnerable to generic S
NEAR-REAL-TIME
CVE-2026-93904 · NIST NVD - National Vulnerability Database · published 2026-10-29T04:18
wordpress
Source ↗
HIGH
CVE-2026-93855 - The SendPress Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the 'subscriberid' paramete
NEAR-REAL-TIME
CVE-2026-93855 · NIST NVD - National Vulnerability Database · published 2026-10-29T04:18
wordpress
Source ↗
HIGH
CVE-2026-93757 - The Wild Apricot Login plugin for WordPress is vulnerable to Authentication Bypass via SSO Email-Collision Account Bindi
NEAR-REAL-TIME
CVE-2026-93757 · NIST NVD - National Vulnerability Database · published 2026-10-29T04:18
wordpress
Source ↗
MEDIUM
CVE-2026-42949 - A authorization bypass vulnerability exists in the /api/runscript functionality of FUXA (version(s): 1.3.2-2809). A spec
NEAR-REAL-TIME
CVE-2026-42949 · NIST NVD - National Vulnerability Database · published 2026-10-29T04:18
Source ↗
CRITICAL
CVE-2026-42922 - A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809). A specially
NEAR-REAL-TIME
CVE-2026-42922 · NIST NVD - National Vulnerability Database · published 2026-10-29T04:18
Source ↗
MEDIUM
CVE-2026-40063 - A information disclosure vulnerability exists in the /nodered/fuxa/scripts functionality of FUXA (version(s): 1.3.2-2809
NEAR-REAL-TIME
CVE-2026-40063 · NIST NVD - National Vulnerability Database · published 2026-10-29T04:18
Source ↗
INFORMATIONAL
CVE-2026-118426 - In affected versions of Octopus Server with the LDAP authentication provider enabled, any authenticated user could call
NEAR-REAL-TIME
CVE-2026-118426 · NIST NVD - National Vulnerability Database · published 2026-10-29T04:18
Source ↗
CRITICAL
CVE-2026-109516 - The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeo
NEAR-REAL-TIME
CVE-2026-109516 · NIST NVD - National Vulnerability Database · published 2026-10-29T04:18
wordpress
Source ↗
INFORMATIONAL
CVE-2026-66092 - In openEQUELLA before 2026.2, the pre-login notice is stored as HTML and rendered on the legacy logon page without encod
NEAR-REAL-TIME
CVE-2026-66092 · NIST NVD - National Vulnerability Database · published 2026-10-29T02:16
Source ↗
INFORMATIONAL
CVE-2026-66091 - In openEQUELLA before 2026.1, the GET /api/userquery/userinfobackup endpoint performs no authentication or authorisation
NEAR-REAL-TIME
CVE-2026-66091 · NIST NVD - National Vulnerability Database · published 2026-10-29T02:16
Source ↗
INFORMATIONAL
CVE-2026-66090 - In openEQUELLA before 2026.1, the XML parser used for item metadata does not disable external entity resolution. A user
NEAR-REAL-TIME
CVE-2026-66090 · NIST NVD - National Vulnerability Database · published 2026-10-29T02:16
Source ↗
INFORMATIONAL
CVE-2026-66089 - In openEQUELLA before 2026.1, the SOAP API parses XML supplied in the stopEdit operation with a parser that resolves ext
NEAR-REAL-TIME
CVE-2026-66089 · NIST NVD - National Vulnerability Database · published 2026-10-29T02:16
Source ↗
INFORMATIONAL
CVE-2026-66088 - In openEQUELLA before 2026.1, the system.execute() function available to the scripting engine runs supplied operating sy
NEAR-REAL-TIME
CVE-2026-66088 · NIST NVD - National Vulnerability Database · published 2026-10-29T02:16
Source ↗
INFORMATIONAL
CVE-2026-16889 - In openEQUELLA before 2026.1, the pre-login notice image upload endpoint (PUT /api/preloginnotice/image/{name}) does not
NEAR-REAL-TIME
CVE-2026-16889 · NIST NVD - National Vulnerability Database · published 2026-10-29T02:16
Source ↗
MEDIUM
CVE-2026-114173 - The Ortto plugin for WordPress before 1.0.25 did not filter the WooCommerce product data it embedded in public storefron
NEAR-REAL-TIME
CVE-2026-114173 · NIST NVD - National Vulnerability Database · published 2026-10-29T02:16
wordpress
Source ↗
MEDIUM
CVE-2026-113409 - The Ortto plugin for WordPress before 1.0.25 did not escape stored settings on its admin settings page, leading to store
NEAR-REAL-TIME
CVE-2026-113409 · NIST NVD - National Vulnerability Database · published 2026-10-29T02:16
wordpress
Source ↗
HIGH
CVE-2026-113387 - The Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests, relying only on a secre
NEAR-REAL-TIME
CVE-2026-113387 · NIST NVD - National Vulnerability Database · published 2026-10-29T02:16
wordpress
Source ↗