Threat Feed
Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
HIGH
CVE-2026-118083 - Unauthenticated Sensitive Data Exposure in WP Crowdfunding <= 2.2.2 versions.
Source ↗
CVE-2026-118083 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
HIGH
CVE-2026-118082 - Subscriber Privilege Escalation in Buddyboss Platform <= 3.5.0 versions.
Source ↗
CVE-2026-118082 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
HIGH
CVE-2026-118081 - Contributor PHP Object Injection in 10Web Social Photo Feed <= 1.5.6 versions.
Source ↗
CVE-2026-118081 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
HIGH
CVE-2026-118080 - Contributor PHP Object Injection in Social Snap <= 1.5.4 versions.
Source ↗
CVE-2026-118080 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
HIGH
CVE-2026-118079 - Shop manager PHP Object Injection in FV Flowplayer Video Player <= 8.3.4 versions.
Source ↗
CVE-2026-118079 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
HIGH
CVE-2026-118078 - Shop manager PHP Object Injection in Product Catalog Feed by PixelYourSite <= 3.1.4 versions.
Source ↗
CVE-2026-118078 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
HIGH
CVE-2026-118077 - Author PHP Object Injection in Sastra Essential Addons for Elementor <= 1.2.3 versions.
Source ↗
CVE-2026-118077 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
HIGH
CVE-2026-118076 - Contributor PHP Object Injection in Frisbii Pay <= 1.8.19 versions.
Source ↗
CVE-2026-118076 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
HIGH
CVE-2026-118075 - Contributor PHP Object Injection in WP Media folders <= 1.1.10 versions.
Source ↗
CVE-2026-118075 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
HIGH
CVE-2026-118074 - Shop manager PHP Object Injection in Finale Lite <= 2.21.0 versions.
Source ↗
CVE-2026-118074 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
HIGH
CVE-2026-118073 - Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 versions.
Source ↗
CVE-2026-118073 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
HIGH
CVE-2026-116869 - Shop manager PHP Object Injection in myPOS Checkout <= 1.4.5 versions.
Source ↗
CVE-2026-116869 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
HIGH
CVE-2026-116868 - Subscriber PHP Object Injection in BuddyPress Xprofile Custom Field Types <= 1.3.1 versions.
Source ↗
CVE-2026-116868 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
HIGH
CVE-2026-116867 - Contributor PHP Object Injection in Dynamic QR Code – generator <= 1.0.1 versions.
Source ↗
CVE-2026-116867 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
HIGH
CVE-2026-116866 - Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce <= 4.4.0 versions.
Source ↗
CVE-2026-116866 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
HIGH
CVE-2026-116865 - Editor PHP Object Injection in Zippy <= 1.7.0 versions.
Source ↗
CVE-2026-116865 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
HIGH
CVE-2026-116864 - Author PHP Object Injection in WPCargo Track & Trace <= 8.0.5 versions.
Source ↗
CVE-2026-116864 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
MEDIUM
CVE-2026-116848 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH Innovatio
Source ↗
CVE-2026-116848 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
INFORMATIONAL
CVE-2026-115795 - P-Net before 1.0.3 does not check that a complete block header is present in the received data before reading the next b
Source ↗
CVE-2026-115795 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
INFORMATIONAL
CVE-2026-115794 - P-Net before 1.0.3 passes the application alarm callback a data length derived from the variable part length field of a
Source ↗
CVE-2026-115794 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:17