Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
HIGH
CVE-2026-116049 - A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected b
NEAR-REAL-TIME
CVE-2026-116049 · NIST NVD - National Vulnerability Database · published 2026-10-25T09:16
Source ↗
HIGH
CVE-2026-116048 - A vulnerability was detected in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Aff
NEAR-REAL-TIME
CVE-2026-116048 · NIST NVD - National Vulnerability Database · published 2026-10-25T08:16
Source ↗
MEDIUM
CVE-2026-116047 - A vulnerability has been found in Privoce Vocechat up to 0.9.121. This issue affects some unknown processing of the file
NEAR-REAL-TIME
CVE-2026-116047 · NIST NVD - National Vulnerability Database · published 2026-10-25T08:16
Source ↗
MEDIUM
CVE-2026-116046 - A flaw has been found in eventcatalog sdk up to 2.29.0. This vulnerability affects the function getCustomDoc/writeCustom
NEAR-REAL-TIME
CVE-2026-116046 · NIST NVD - National Vulnerability Database · published 2026-10-25T07:16
Source ↗
MEDIUM
CVE-2026-116045 - A vulnerability was detected in 1999AZZAR designer-mcp up to 2.1.0. This affects the function get_reference of the file
NEAR-REAL-TIME
CVE-2026-116045 · NIST NVD - National Vulnerability Database · published 2026-10-25T07:16
Source ↗
LOW
CVE-2026-114148 ASP.NET Core Elevation of Privilege Vulnerability
NEAR-REAL-TIME
CVE-2026-114148 · Microsoft Security Response Center - Update Guide · published 2026-10-25T07:00
Source ↗
MEDIUM
CVE-2026-94295 - The Chikkili- Google Pay India for Woocommerce WordPress plugin through 1.0.6 does not verify that a payment notificatio
NEAR-REAL-TIME
CVE-2026-94295 · NIST NVD - National Vulnerability Database · published 2026-10-25T06:16
wordpressgoogle
Source ↗
MEDIUM
CVE-2026-116044 - A security vulnerability has been detected in prasathmani TinyFileManager up to 2.6. Affected by this issue is some unkn
NEAR-REAL-TIME
CVE-2026-116044 · NIST NVD - National Vulnerability Database · published 2026-10-25T06:16
Source ↗
HIGH
CVE-2026-115251 - The Duplicator WordPress plugin before 5.0.0 does not restrict its one-click upgrade routine to users allowed to instal
NEAR-REAL-TIME
CVE-2026-115251 · NIST NVD - National Vulnerability Database · published 2026-10-25T06:16
wordpress
Source ↗
CRITICAL
CVE-2026-115214 - The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.1 does not verify that the user-identity and role HTTP reque
NEAR-REAL-TIME
CVE-2026-115214 · NIST NVD - National Vulnerability Database · published 2026-10-25T06:16
wordpress
Source ↗
LOW
CVE-2026-115183 - The Qi Addons For Elementor WordPress plugin before 1.11.2 does not properly sanitise a widget's heading text after deco
NEAR-REAL-TIME
CVE-2026-115183 · NIST NVD - National Vulnerability Database · published 2026-10-25T06:16
wordpress
Source ↗
LOW
CVE-2026-114743 - The InstaWP Connect WordPress plugin before 0.1.4.2 does not perform a capability check on its InstaWP Connect WordPre
NEAR-REAL-TIME
CVE-2026-114743 · NIST NVD - National Vulnerability Database · published 2026-10-25T06:16
wordpress
Source ↗
LOW
CVE-2026-114742 - The WPVR WordPress plugin before 9.0.3 does not perform object-level ownership checks when updating virtual tours, allo
NEAR-REAL-TIME
CVE-2026-114742 · NIST NVD - National Vulnerability Database · published 2026-10-25T06:16
wordpress
Source ↗
LOW
CVE-2026-114741 - The WPVR WordPress plugin before 9.0.3 does not perform object-level authorization checks when reading and updating vir
NEAR-REAL-TIME
CVE-2026-114741 · NIST NVD - National Vulnerability Database · published 2026-10-25T06:16
wordpress
Source ↗
MEDIUM
CVE-2026-114740 - The WPVR WordPress plugin before 9.1.3 does not correctly check user capabilities when creating a tour through its setu
NEAR-REAL-TIME
CVE-2026-114740 · NIST NVD - National Vulnerability Database · published 2026-10-25T06:16
wordpress
Source ↗
LOW
CVE-2026-111981 - The GiveWP WordPress plugin before 4.19.0.1 does not perform a capability check when handling donor address changes, al
NEAR-REAL-TIME
CVE-2026-111981 · NIST NVD - National Vulnerability Database · published 2026-10-25T06:16
wordpress
Source ↗
MEDIUM
CVE-2026-111980 - The GiveWP WordPress plugin before 4.19.0.1 does not correctly determine which page a page-capability request applies t
NEAR-REAL-TIME
CVE-2026-111980 · NIST NVD - National Vulnerability Database · published 2026-10-25T06:16
wordpress
Source ↗
MEDIUM
CVE-2026-111979 - The GiveWP WordPress plugin before 4.19.0.1 does not properly sanitise and escape one of its donation form template set
NEAR-REAL-TIME
CVE-2026-111979 · NIST NVD - National Vulnerability Database · published 2026-10-25T06:16
wordpress
Source ↗
MEDIUM
CVE-2026-111978 - The GiveWP WordPress plugin before 4.19.0.1 does not properly validate a user-supplied filename before reading it from
NEAR-REAL-TIME
CVE-2026-111978 · NIST NVD - National Vulnerability Database · published 2026-10-25T06:16
wordpress
Source ↗
MEDIUM
CVE-2026-111976 - The GiveWP WordPress plugin before 4.19.0.1 does not perform any status or capability check when rendering a donation f
NEAR-REAL-TIME
CVE-2026-111976 · NIST NVD - National Vulnerability Database · published 2026-10-25T06:16
wordpress
Source ↗