Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-62023 CVE-2026-62023 - Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templa MEDIUM 4.3 Unknown 1 Details
CVE-2026-62019 CVE-2026-62019 - Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorrectly Configured Acc MEDIUM 4.3 Unknown 1 Details
CVE-2026-61854 CVE-2026-61854 - VoiceSentinel is a real-time voice moderation system for Minecraft servers. From 2.2.1 until 3.3.1, the optional report HIGH 8.2 Unknown 1 Details
CVE-2026-61840 CVE-2026-61840 - Quest Bot is an opensource Discord Bot. Prior to 1.1.9, the `image to GIF` command uses a request helper that validates INFORMATIONAL - Unknown 1 Details
CVE-2026-54855 CVE-2026-54855 - Unauthenticated Cross Site Scripting (XSS) in Profile Builder <= 4.0.5 versions. HIGH 7.1 Unknown 1 Details
CVE-2026-54854 CVE-2026-54854 - Contributor Privilege Escalation in Profile Builder <= 4.0.5 versions. MEDIUM 6.3 Unknown 1 Details
CVE-2026-54850 CVE-2026-54850 - Subscriber Broken Access Control in Booking and Rental Manager <= 2.8.2 versions. MEDIUM 6.5 Unknown 1 Details
CVE-2026-52710 CVE-2026-52710 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ithemelandco GIFTiT &#821 MEDIUM 5.3 Unknown 1 Details
CVE-2026-48201 CVE-2026-48201 - Unauthenticated Cross Site Scripting (XSS) in Fast Velocity Minify <= 3.5.7 versions. HIGH 7.1 Unknown 1 Details
CVE-2026-46560 CVE-2026-46560 - Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `RADIUS` authentication module op HIGH 7.5 Unknown 1 Details
CVE-2026-39786 CVE-2026-39786 - Unauthenticated Cross Site Scripting (XSS) in BA Book Everything <= 1.8.33 versions. HIGH 7.1 Unknown 1 Details
CVE-2026-39739 CVE-2026-39739 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force U MEDIUM 6.5 Unknown 1 Details
CVE-2026-39738 CVE-2026-39738 - Deserialization of Untrusted Data vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Object Inj CRITICAL 9.8 Unknown 1 Details
CVE-2026-39734 CVE-2026-39734 - Unauthenticated Path Traversal in WP EasyPay <= 4.5.4 versions. HIGH 7.5 Unknown 1 Details
CVE-2026-39732 CVE-2026-39732 - Unauthenticated SQL Injection in Transliterator <= 2.5.13 versions. CRITICAL 9.3 Unknown 1 Details
CVE-2026-28160 CVE-2026-28160 - Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.10 versions. HIGH 7.1 Unknown 1 Details
CVE-2026-27061 CVE-2026-27061 - Subscriber Cross Site Scripting (XSS) in User Registration <= 5.3.0 versions. MEDIUM 6.5 Unknown 1 Details
CVE-2026-120046 CVE-2026-120046 - Nezha 2.0.0 before 2.4.0 contains a NULL pointer dereference vulnerability in ServiceSentinel.loadTodayStats that allows MEDIUM 5.3 Unknown 1 Details
CVE-2026-120007 CVE-2026-120007 - NodeBB 1.18.0 through 4.16.5 contains an authorization bypass vulnerability that allows unauthenticated visitors to act MEDIUM 6.5 Unknown 1 Details
CVE-2026-119842 CVE-2026-119842 - A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle MEDIUM 6.5 Unknown 1 Details