Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-119134 CVE-2026-119134 - wasmtime: Wasmtime: Denial of Service via unbounded memory growth in resource handle tables MEDIUM 6.2 Red Hat Unknown 2 sources Details
CVE-2026-119133 CVE-2026-119133 - wasmtime: wasmtime: Undefined behavior via misaligned VMContext layout LOW 2.6 Red Hat Unknown 2 sources Details
CVE-2026-119132 CVE-2026-119132 - wasmtime: wasmtime: Denial of Service via overlapping string transcoding in fused adapters MEDIUM 4.8 Red Hat Unknown 2 sources Details
CVE-2026-119124 CVE-2026-119124 - ImageMagick: ImageMagick: Denial of service via heap-based buffer overflow in -morph option LOW 3.3 Red Hat Unknown 2 sources Details
CVE-2026-119123 CVE-2026-119123 - ImageMagick: ImageMagick: Denial of Service via stack overflow in TIFF decoder LOW 3.7 Red Hat Unknown 2 sources Details
CVE-2026-97073 CVE-2026-97073 - Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Secu MEDIUM 5.3 Unknown 1 Details
CVE-2026-80069 CVE-2026-80069 - MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability that allows any authen MEDIUM 4.3 wordpress Unknown 1 Details
CVE-2026-80067 CVE-2026-80067 - MasterStudy LMS plugin for WordPress before 3.7.50 contains a path traversal vulnerability that allows authenticated Sub MEDIUM 5.4 wordpress Unknown 1 Details
CVE-2026-54871 CVE-2026-54871 - Missing Authorization vulnerability in Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder all MEDIUM 5.3 Unknown 1 Details
CVE-2026-54853 CVE-2026-54853 - Missing Authorization vulnerability in Cozmoslabs Profile Builder profile-builder allows Exploiting Incorrectly Configur MEDIUM 5.3 Unknown 1 Details
CVE-2026-54852 CVE-2026-54852 - Missing Authorization vulnerability in miniOrange Page Restriction WordPress (WP) page-and-post-restriction allows Explo MEDIUM 5.3 wordpress Unknown 1 Details
CVE-2026-52708 CVE-2026-52708 - Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured MEDIUM 4.3 Unknown 1 Details
CVE-2026-48884 CVE-2026-48884 - Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured MEDIUM 5.3 Unknown 1 Details
CVE-2026-42691 CVE-2026-42691 - Authorization Bypass Through User-Controlled Key vulnerability in EventPrime EventPrime eventprime-event-calendar-manage MEDIUM 5.4 Unknown 1 Details
CVE-2026-39742 CVE-2026-39742 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / Stell MEDIUM 6.5 Unknown 1 Details
CVE-2026-39737 CVE-2026-39737 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElem MEDIUM 6.5 Unknown 1 Details
CVE-2026-27063 CVE-2026-27063 - Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) convertkit allows Exploiting Incorrectly Configured MEDIUM 5.3 Unknown 1 Details
CVE-2026-27062 CVE-2026-27062 - Cross-Site Request Forgery (CSRF) vulnerability in WPFunnels Team WPFunnels wpfunnels allows Cross Site Request Forgery. MEDIUM 4.3 Unknown 1 Details
CVE-2026-25450 CVE-2026-25450 - Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Conf MEDIUM 5.3 Unknown 1 Details
CVE-2026-25448 CVE-2026-25448 - Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control Securit MEDIUM 4.3 Unknown 1 Details