Security Operations
Threat Intelligence
๐Ÿ”Ž
โ“

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-116563 CVE-2026-116563 - The Photo Gallery, Sliders, Proofing and Themes โ€“ NextGEN Gallery plugin for WordPress is vulnerable to Stored DOM-Based MEDIUM 5.4 wordpress Unknown 1 Details
CVE-2026-116520 CVE-2026-116520 - The PPWP โ€“ Password Protect Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment / s HIGH 7.2 wordpress Unknown 1 Details
CVE-2026-110808 CVE-2026-110808 - The Essential Addons for Elementor WordPress plugin before 6.8.8 does not correctly restrict who may set the role assig MEDIUM 4.2 wordpress Unknown 1 Details
CVE-2026-110042 CVE-2026-110042 - The Payment Forms for Paystack WordPress plugin before 4.0.6 does not properly restrict access to a page that displays i MEDIUM 4.9 wordpress Unknown 1 Details
CVE-2026-109997 CVE-2026-109997 - The Ninja Forms โ€“ Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress is v HIGH 7.2 wordpress Unknown 1 Details
CVE-2026-109234 CVE-2026-109234 - The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_content (bbPress reply HIGH 7.2 wordpress Unknown 1 Details
CVE-2026-101326 CVE-2026-101326 - The The Ninja Forms โ€“ Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress MEDIUM 5.4 wordpress Unknown 1 Details
CVE-2026-100155 CVE-2026-100155 - The The Ninja Forms โ€“ Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress MEDIUM 6.5 wordpress Unknown 1 Details
CVE-2026-119977 CVE-2026-119977 - wordpress: WordPress: Arbitrary code execution via predictable upgrade staging paths CRITICAL 8.1 Red Hatwordpress WordPress Core KEV EXPLOITED 4 sources Details
CVE-2026-116755 CVE-2026-116755 - Improper Neutralization of Special Elements used in a Command ('Command Injection') in the Orchestrator component of Sof HIGH 7.4 Unknown 1 Details
CVE-2026-110176 CVE-2026-110176 - The File Force Download module for Drupal 7 implements hook_file_download() to add a Content-Disposition header when a f INFORMATIONAL - Unknown 1 Details
CVE-2026-77152 CVE-2026-77152 - Improper Authorization vulnerability in Drupal Field Collection for Drupal 7 allows a user with the "edit field collecti INFORMATIONAL - Unknown 1 Details
CVE-2026-117656 CVE-2026-117656 - Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the Sign in with Apple strategy in pow-auth A INFORMATIONAL - apple Unknown 1 Details
CVE-2026-63410 CVE-2026-63410 - secp256k1-native is a native C secp256k1 implementation for Ruby. In affected native builds, native constant-time scalar MEDIUM 5.9 Unknown 1 Details
CVE-2026-63402 CVE-2026-63402 - i18next is an internationalization framework for JavaScript. Prior to version 26.3.4, `deepExtend` in `src/utils.js` che MEDIUM 5.9 aws Unknown 1 Details
CVE-2026-63401 CVE-2026-63401 - Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, `addAccessibleQueuesForUser` and `removeAc INFORMATIONAL - Unknown 1 Details
CVE-2026-63400 CVE-2026-63400 - Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, `resetPasswordForToken` updates the passwo INFORMATIONAL - Unknown 1 Details
CVE-2026-63399 CVE-2026-63399 - Coop is an open source review and moderation tool from ROOST. Prior to 1.0.0, the `GraphQL` `Mutation.createOrg` operati INFORMATIONAL - Unknown 1 Details
CVE-2026-63398 CVE-2026-63398 - Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, the SAML strategy's verify callback resolv INFORMATIONAL - Unknown 1 Details
CVE-2026-63396 CVE-2026-63396 - Coop is an open source review and moderation tool from ROOST. Prior to 1.0.0, an unauthenticated actor can query `Query. INFORMATIONAL - Unknown 1 Details