Security Operations
Threat Intelligence
๐Ÿ”Ž
โ“

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-103039 CVE-2026-103039 - The Gravity Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.2 CRITICAL 9.8 wordpress Unknown 1 Details
CVE-2026-118147 CVE-2026-118147 Visual Studio Spoofing Vulnerability HIGH - Unknown 2 sources Details
CVE-2026-69446 CVE-2026-69446 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability MEDIUM - microsoft Unknown 2 sources Details
CVE-2026-119087 CVE-2026-119087 - The Content Egg โ€“ Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to authorization bypa MEDIUM 4.3 wordpress Unknown 1 Details
CVE-2026-119059 CVE-2026-119059 - The Content Egg plugin for WordPress is vulnerable to unauthorized modification of data due to a missing per-post capabi MEDIUM 4.3 wordpress Unknown 1 Details
CVE-2026-118698 CVE-2026-118698 - The JoomSport โ€“ for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to generic SQL Inj MEDIUM 6.5 wordpress Unknown 1 Details
CVE-2026-118634 CVE-2026-118634 - The Events Made Easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width' parameter in all MEDIUM 6.4 wordpress Unknown 1 Details
CVE-2026-118500 CVE-2026-118500 - The Cool FormKit Lite โ€“ Advanced Form Builder for Elementor plugin for WordPress is vulnerable to Stored DOM-Based Cross MEDIUM 6.4 wordpress Unknown 1 Details
CVE-2026-118194 CVE-2026-118194 - The Page and Post Restriction plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and inc MEDIUM 6.5 wordpress Unknown 1 Details
CVE-2026-118165 CVE-2026-118165 - The Firelight Lightbox WordPress plugin before 2.3.23 does not escape the URL of links it opens in its Classic lightbox MEDIUM 6.8 wordpress Unknown 1 Details
CVE-2026-118101 CVE-2026-118101 - The BuddyForms WordPress plugin before 2.10.1 does not verify that a user editing an existing entry is the author of the MEDIUM 5.3 wordpress Unknown 1 Details
CVE-2026-118100 CVE-2026-118100 - The BuddyForms WordPress plugin before 2.10.3 does not check that the requester is allowed to manage a form before expor MEDIUM 5.3 wordpress Unknown 1 Details
CVE-2026-118072 CVE-2026-118072 - The Fraud Prevention For WooCommerce and EDD WordPress plugin before 2.3.6 does not check that a user is allowed to mana MEDIUM 5.4 wordpress Unknown 1 Details
CVE-2026-118071 CVE-2026-118071 - The Joinchat WordPress plugin before 6.4.2 does not escape the message of its button block before outputting it in an H MEDIUM 6.8 wordpress Unknown 1 Details
CVE-2026-117572 CVE-2026-117572 - The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 8.8 does not sanitize and escape a parameter befor MEDIUM 4.1 wordpress Unknown 1 Details
CVE-2026-117571 CVE-2026-117571 - The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 8.8 does not sanitize and escape tracking data der HIGH 8.8 wordpress Unknown 1 Details
CVE-2026-115277 CVE-2026-115277 - The User Frontend WordPress plugin before 4.3.14 does not sanitise and escape some user-supplied values before reflecti MEDIUM 4.7 wordpress Unknown 1 Details
CVE-2026-114444 CVE-2026-114444 - The Security Plugin, Firewall & Malware Scanner with Auto Removal WordPress plugin before 2.191 does not restrict its Fi MEDIUM 4.4 wordpress Unknown 1 Details
CVE-2026-114443 CVE-2026-114443 - The Security Plugin, Firewall & Malware Scanner with Auto Removal WordPress plugin before 2.191 does not verify the acco HIGH 7.5 wordpress Unknown 1 Details
CVE-2026-114422 CVE-2026-114422 - The Enable Media Replace WordPress plugin before 4.2.3 does not restrict the classes allowed when deserializing stored m HIGH 7.5 wordpress Unknown 1 Details