Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
CRITICAL
CVE-2026-61997 - Unauthenticated PHP Object Injection in Legal Stone <= 1.2.11 versions.
NEAR-REAL-TIME
CVE-2026-61997 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
HIGH
CVE-2026-61996 - Subscriber SQL Injection in MLS On The Fly <= 1.8.1.5 versions.
NEAR-REAL-TIME
CVE-2026-61996 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
HIGH
CVE-2026-61995 - Unauthenticated Cross Site Scripting (XSS) in YouTube Showcase <= 4.1.0 versions.
NEAR-REAL-TIME
CVE-2026-61995 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
HIGH
CVE-2026-61993 - Unauthenticated Cross Site Scripting (XSS) in Blockonomics 3.11.0 versions.
NEAR-REAL-TIME
CVE-2026-61993 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
CRITICAL
CVE-2026-61992 - Unauthenticated PHP Object Injection in GEO my WordPress <= 4.5.5.3 versions.
NEAR-REAL-TIME
CVE-2026-61992 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
wordpress
Source ↗
CRITICAL
CVE-2026-61991 - Unauthenticated Remote Code Execution (RCE) in AjaxLoadMore Cache <= 3.1.1 versions.
NEAR-REAL-TIME
CVE-2026-61991 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
HIGH
CVE-2026-61989 - Unauthenticated Cross Site Scripting (XSS) in Easy Property Listings <= 3.5.25 versions.
NEAR-REAL-TIME
CVE-2026-61989 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
HIGH
CVE-2026-61988 - Unauthenticated Cross Site Scripting (XSS) in Auction Nudge – Your eBay on Your Site <= 8.4.0 versions.
NEAR-REAL-TIME
CVE-2026-61988 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
HIGH
CVE-2026-54866 - Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button Elementor Plugin <= 1.2.8 versions.
NEAR-REAL-TIME
CVE-2026-54866 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
MEDIUM
CVE-2026-54865 - Subscriber Cross Site Scripting (XSS) in Podamibe Custom User Gravatar <= 1.0.8 versions.
NEAR-REAL-TIME
CVE-2026-54865 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
HIGH
CVE-2026-54864 - Unauthenticated Cross Site Scripting (XSS) in Post Video Players <= 1.165 versions.
NEAR-REAL-TIME
CVE-2026-54864 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
CRITICAL
CVE-2026-54860 - Unauthenticated PHP Object Injection in Ozisti <= 1.1.10 versions.
NEAR-REAL-TIME
CVE-2026-54860 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
CRITICAL
CVE-2026-54859 - Unauthenticated PHP Object Injection in Preservation <= 1.15 versions.
NEAR-REAL-TIME
CVE-2026-54859 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
CRITICAL
CVE-2026-54858 - Unauthenticated PHP Object Injection in Printy <= 1.13.0 versions.
NEAR-REAL-TIME
CVE-2026-54858 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
CRITICAL
CVE-2026-54857 - Unauthenticated PHP Object Injection in Quirky <= 1.23 versions.
NEAR-REAL-TIME
CVE-2026-54857 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
CRITICAL
CVE-2026-54856 - Unauthenticated PHP Object Injection in RexCoin <= 1.2.6 versions.
NEAR-REAL-TIME
CVE-2026-54856 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
MEDIUM
CVE-2026-48200 - Insertion of Sensitive Information Into Sent Data vulnerability in Barn2 Plugins Document Library Lite document-library-
NEAR-REAL-TIME
CVE-2026-48200 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
HIGH
CVE-2026-42701 - Shop manager PHP Object Injection in YayMail <= 4.4.6 versions.
NEAR-REAL-TIME
CVE-2026-42701 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
MEDIUM
CVE-2026-42694 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Themeum Kirki kirki allow
NEAR-REAL-TIME
CVE-2026-42694 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
HIGH
CVE-2026-42692 - Unauthenticated Cross Site Scripting (XSS) in WP Crowdfunding <= 2.2.2 versions.
NEAR-REAL-TIME
CVE-2026-42692 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗