Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-114422 CVE-2026-114422 - The Enable Media Replace WordPress plugin before 4.2.3 does not restrict the classes allowed when deserializing stored m HIGH 7.5 wordpress Unknown 1 Details
CVE-2026-5461 CVE-2026-5461 - The Forminator Forms plugin for WordPress is vulnerable to Limited File Deletion in all versions up to, and including, 1 MEDIUM 6.5 wordpress Unknown 1 Details
CVE-2026-104368 CVE-2026-104368 - The Export and Import Users and Customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up HIGH 8.8 wordpress Unknown 1 Details
CVE-2026-96389 CVE-2026-96389 - Missing Authorization vulnerability in Drupal Xray Audit allows Forceful Browsing. This issue affects Xray Audit version MEDIUM 6.5 Unknown 1 Details
CVE-2026-118584 CVE-2026-118584 - Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing. This issue affects Field Per INFORMATIONAL - Unknown 1 Details
CVE-2026-118583 CVE-2026-118583 - Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing. This issue affects Field Per INFORMATIONAL - Unknown 1 Details
CVE-2026-118582 CVE-2026-118582 - Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA allows Functionality Bypass. Th INFORMATIONAL - Unknown 1 Details
CVE-2026-118576 CVE-2026-118576 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Stage File INFORMATIONAL - Unknown 1 Details
CVE-2026-118575 CVE-2026-118575 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Signature p INFORMATIONAL - Unknown 1 Details
CVE-2026-118574 CVE-2026-118574 - Incorrect Permission Assignment for Critical Resource vulnerability in Drupal S3 File System allows Exploiting Incorrect INFORMATIONAL - Unknown 1 Details
CVE-2026-118573 CVE-2026-118573 - Missing Authorization vulnerability in Drupal OAuth2 Token Manager allows Forceful Browsing. This issue affects OAuth2 T INFORMATIONAL - Unknown 1 Details
CVE-2026-118572 CVE-2026-118572 - Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OAuth Login - OAuth OIDC SSO allows Aut INFORMATIONAL - Unknown 1 Details
CVE-2026-118571 CVE-2026-118571 - Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting INFORMATIONAL - Unknown 1 Details
CVE-2026-118570 CVE-2026-118570 - Cross-Site Request Forgery (CSRF) vulnerability in Drupal Fasttoggle allows Cross Site Request Forgery. This issue affec INFORMATIONAL - Unknown 1 Details
CVE-2026-118569 CVE-2026-118569 - Incorrect Authorization vulnerability in Drupal Fasttoggle allows Forceful Browsing. This issue affects Fasttoggle versi INFORMATIONAL - Unknown 1 Details
CVE-2026-118568 CVE-2026-118568 - Insecure Storage of Sensitive Information vulnerability in Drupal Content Sync (content-sync.io) allows Retrieve Embedde INFORMATIONAL - Unknown 1 Details
CVE-2026-118567 CVE-2026-118567 - Incorrect Authorization vulnerability in Drupal Bulk Update User Roles allows Forceful Browsing. This issue affects Bulk INFORMATIONAL - Unknown 1 Details
CVE-2026-118565 CVE-2026-118565 - Vulnerability in Drupal GroupEx PRO ( Daxko ) integration. This issue affects GroupEx PRO ( Daxko ) integration versio INFORMATIONAL - Unknown 1 Details
CVE-2026-118564 CVE-2026-118564 - Vulnerability in Drupal PayUmoney for Drupal Commerce. This issue affects PayUmoney for Drupal Commerce versions: *.*. INFORMATIONAL - Unknown 1 Details
CVE-2026-118563 CVE-2026-118563 - Vulnerability in Drupal CacheFlush. This issue affects CacheFlush versions: *.*. INFORMATIONAL - Unknown 1 Details