Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
HIGH
CVE-2026-115251 - The Duplicator WordPress plugin before 5.0.0 does not restrict its one-click upgrade routine to users allowed to instal
NEAR-REAL-TIME
CVE-2026-115251 · NIST NVD - National Vulnerability Database · published 2026-10-25T06:16
wordpress
Source ↗
CRITICAL
CVE-2026-115214 - The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.1 does not verify that the user-identity and role HTTP reque
NEAR-REAL-TIME
CVE-2026-115214 · NIST NVD - National Vulnerability Database · published 2026-10-25T06:16
wordpress
Source ↗
LOW
CVE-2026-115183 - The Qi Addons For Elementor WordPress plugin before 1.11.2 does not properly sanitise a widget's heading text after deco
NEAR-REAL-TIME
CVE-2026-115183 · NIST NVD - National Vulnerability Database · published 2026-10-25T06:16
wordpress
Source ↗
LOW
CVE-2026-114743 - The InstaWP Connect WordPress plugin before 0.1.4.2 does not perform a capability check on its InstaWP Connect WordPre
NEAR-REAL-TIME
CVE-2026-114743 · NIST NVD - National Vulnerability Database · published 2026-10-25T06:16
wordpress
Source ↗
LOW
CVE-2026-114742 - The WPVR WordPress plugin before 9.0.3 does not perform object-level ownership checks when updating virtual tours, allo
NEAR-REAL-TIME
CVE-2026-114742 · NIST NVD - National Vulnerability Database · published 2026-10-25T06:16
wordpress
Source ↗
LOW
CVE-2026-114741 - The WPVR WordPress plugin before 9.0.3 does not perform object-level authorization checks when reading and updating vir
NEAR-REAL-TIME
CVE-2026-114741 · NIST NVD - National Vulnerability Database · published 2026-10-25T06:16
wordpress
Source ↗
MEDIUM
CVE-2026-114740 - The WPVR WordPress plugin before 9.1.3 does not correctly check user capabilities when creating a tour through its setu
NEAR-REAL-TIME
CVE-2026-114740 · NIST NVD - National Vulnerability Database · published 2026-10-25T06:16
wordpress
Source ↗
LOW
CVE-2026-111981 - The GiveWP WordPress plugin before 4.19.0.1 does not perform a capability check when handling donor address changes, al
NEAR-REAL-TIME
CVE-2026-111981 · NIST NVD - National Vulnerability Database · published 2026-10-25T06:16
wordpress
Source ↗
MEDIUM
CVE-2026-111980 - The GiveWP WordPress plugin before 4.19.0.1 does not correctly determine which page a page-capability request applies t
NEAR-REAL-TIME
CVE-2026-111980 · NIST NVD - National Vulnerability Database · published 2026-10-25T06:16
wordpress
Source ↗
MEDIUM
CVE-2026-111979 - The GiveWP WordPress plugin before 4.19.0.1 does not properly sanitise and escape one of its donation form template set
NEAR-REAL-TIME
CVE-2026-111979 · NIST NVD - National Vulnerability Database · published 2026-10-25T06:16
wordpress
Source ↗
MEDIUM
CVE-2026-111978 - The GiveWP WordPress plugin before 4.19.0.1 does not properly validate a user-supplied filename before reading it from
NEAR-REAL-TIME
CVE-2026-111978 · NIST NVD - National Vulnerability Database · published 2026-10-25T06:16
wordpress
Source ↗
MEDIUM
CVE-2026-111976 - The GiveWP WordPress plugin before 4.19.0.1 does not perform any status or capability check when rendering a donation f
NEAR-REAL-TIME
CVE-2026-111976 · NIST NVD - National Vulnerability Database · published 2026-10-25T06:16
wordpress
Source ↗
MEDIUM
CVE-2026-110285 - The WP Stripe Checkout WordPress plugin before 1.2.2.62 does not verify the Stripe webhook signature when no signing sec
NEAR-REAL-TIME
CVE-2026-110285 · NIST NVD - National Vulnerability Database · published 2026-10-25T06:16
wordpress
Source ↗
LOW
CVE-2025-15705 - The Contact Form by Supsystic WordPress plugin before 1.8.0 does not sanitise and escape a form name, allowing users wi
NEAR-REAL-TIME
CVE-2025-15705 · NIST NVD - National Vulnerability Database · published 2026-10-25T06:16
wordpress
Source ↗
LOW
CVE-2026-116007 - A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The impacted element is the function SmsCodeS
NEAR-REAL-TIME
CVE-2026-116007 · NIST NVD - National Vulnerability Database · published 2026-10-25T04:17
Source ↗
HIGH
CVE-2026-116006 - A vulnerability was detected in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The affected element is an unknown fun
NEAR-REAL-TIME
CVE-2026-116006 · NIST NVD - National Vulnerability Database · published 2026-10-25T04:17
Source ↗
LOW
CVE-2026-116004 - A security vulnerability has been detected in onyx-dot-app Onyx up to 5.0.0. Impacted is an unknown function of the file
NEAR-REAL-TIME
CVE-2026-116004 · NIST NVD - National Vulnerability Database · published 2026-10-25T03:16
Source ↗
HIGH
CVE-2026-116000 - A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects the function load_file_f
NEAR-REAL-TIME
CVE-2026-116000 · NIST NVD - National Vulnerability Database · published 2026-10-25T03:16
Source ↗
HIGH
CVE-2026-115999 - A vulnerability has been found in mansi-k Restaurant_IMS d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694. Affected is the funct
NEAR-REAL-TIME
CVE-2026-115999 · NIST NVD - National Vulnerability Database · published 2026-10-25T02:16
Source ↗
MEDIUM
CVE-2026-115997 - A flaw has been found in pig-mesh pig up to 4.1.0. This impacts the function orderItem.getColumn of the file pig-common/
NEAR-REAL-TIME
CVE-2026-115997 · NIST NVD - National Vulnerability Database · published 2026-10-25T00:16
Source ↗