Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
CRITICAL
CVE-2026-112866 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFactory Product
NEAR-REAL-TIME
CVE-2026-112866 · NIST NVD - National Vulnerability Database · published 2026-10-24T08:16
Source ↗
HIGH
CVE-2026-112844 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arraytics WP Event
NEAR-REAL-TIME
CVE-2026-112844 · NIST NVD - National Vulnerability Database · published 2026-10-24T08:16
Source ↗
CRITICAL
CVE-2026-111402 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Software
NEAR-REAL-TIME
CVE-2026-111402 · NIST NVD - National Vulnerability Database · published 2026-10-24T08:16
Source ↗
MEDIUM
CVE-2026-110892 - Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Acces
NEAR-REAL-TIME
CVE-2026-110892 · NIST NVD - National Vulnerability Database · published 2026-10-24T08:16
Source ↗
MEDIUM
CVE-2026-115803 - A flaw has been found in Scada-LTS 2.8.0. Affected by this vulnerability is the function HttpServletRequest.getParameter
NEAR-REAL-TIME
CVE-2026-115803 · NIST NVD - National Vulnerability Database · published 2026-10-24T07:16
sap
Source ↗
MEDIUM
CVE-2026-115802 - A weakness has been identified in InternScience InternAgent 1.5.0. This affects the function train of the file tasks/Aut
NEAR-REAL-TIME
CVE-2026-115802 · NIST NVD - National Vulnerability Database · published 2026-10-24T07:16
Source ↗
MEDIUM
CVE-2026-108013 - BigFix Platform uses Mozilla CA certificate bundle (PEM). Versions of the bundle dated before 2026/10/20 still trust cer
NEAR-REAL-TIME
CVE-2026-108013 · NIST NVD - National Vulnerability Database · published 2026-10-24T07:16
Source ↗
MEDIUM
CVE-2026-97353 - The News Kit Addons For Elementor WordPress plugin through 1.4.7 does not perform capability or ownership checks before
NEAR-REAL-TIME
CVE-2026-97353 · NIST NVD - National Vulnerability Database · published 2026-10-24T06:16
wordpress
Source ↗
MEDIUM
CVE-2026-97352 - The News Kit Addons For Elementor WordPress plugin before 1.4.9 does not perform a capability check on one of its AJAX a
NEAR-REAL-TIME
CVE-2026-97352 · NIST NVD - National Vulnerability Database · published 2026-10-24T06:16
wordpress
Source ↗
MEDIUM
CVE-2026-87835 - The Front End Users WordPress plugin through 3.2.35 does not restrict which account attributes a visitor may set when re
NEAR-REAL-TIME
CVE-2026-87835 · NIST NVD - National Vulnerability Database · published 2026-10-24T06:16
wordpress
Source ↗
MEDIUM
CVE-2026-114429 - The WPVR WordPress plugin before 9.0.3 does not properly sanitise and escape some of its tour hotspot content before st
NEAR-REAL-TIME
CVE-2026-114429 · NIST NVD - National Vulnerability Database · published 2026-10-24T06:16
wordpress
Source ↗
LOW
CVE-2026-113674 - The GeoDirectory WordPress plugin before 2.8.194 does not correctly verify ownership of listings submitted by logged-ou
NEAR-REAL-TIME
CVE-2026-113674 · NIST NVD - National Vulnerability Database · published 2026-10-24T06:16
wordpress
Source ↗
HIGH
CVE-2026-113673 - The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it
NEAR-REAL-TIME
CVE-2026-113673 · NIST NVD - National Vulnerability Database · published 2026-10-24T06:16
wordpress
Source ↗
MEDIUM
CVE-2026-113493 - The GeoDirectory WordPress plugin before 2.8.194 does not sanitise and escape some of its map shortcode attributes befo
NEAR-REAL-TIME
CVE-2026-113493 · NIST NVD - National Vulnerability Database · published 2026-10-24T06:16
wordpress
Source ↗
MEDIUM
CVE-2026-113492 - The GeoDirectory WordPress plugin before 2.8.194 does not perform status, ownership or password checks when loading lis
NEAR-REAL-TIME
CVE-2026-113492 · NIST NVD - National Vulnerability Database · published 2026-10-24T06:16
wordpress
Source ↗
MEDIUM
CVE-2026-113491 - The GeoDirectory WordPress plugin before 2.8.194 does not validate a user-supplied image URL before using it as a local
NEAR-REAL-TIME
CVE-2026-113491 · NIST NVD - National Vulnerability Database · published 2026-10-24T06:16
wordpress
Source ↗
MEDIUM
CVE-2026-113490 - The GeoDirectory WordPress plugin before 2.8.194 does not perform any status or ownership check when rendering a listin
NEAR-REAL-TIME
CVE-2026-113490 · NIST NVD - National Vulnerability Database · published 2026-10-24T06:16
wordpress
Source ↗
MEDIUM
CVE-2026-113489 - The GeoDirectory WordPress plugin before 2.8.194 does not verify that a referenced attachment belongs to the listing be
NEAR-REAL-TIME
CVE-2026-113489 · NIST NVD - National Vulnerability Database · published 2026-10-24T06:16
wordpress
Source ↗
HIGH
CVE-2026-112207 - The Download Monitor WordPress plugin before 5.3.4 does not properly validate that a clicked link belongs to the site be
NEAR-REAL-TIME
CVE-2026-112207 · NIST NVD - National Vulnerability Database · published 2026-10-24T06:16
wordpress
Source ↗
CRITICAL
CVE-2026-110956 - The asVereinbase WordPress plugin before 1.1.8 does not require a valid password or a genuine second factor before auth
NEAR-REAL-TIME
CVE-2026-110956 · NIST NVD - National Vulnerability Database · published 2026-10-24T06:16
wordpress
Source ↗