Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-118090 CVE-2026-118090 - Subscriber PHP Object Injection in MasterStudy LMS <= 3.7.55 versions. HIGH 8.8 Unknown 1 Details
CVE-2026-118089 CVE-2026-118089 - Shop manager PHP Object Injection in Product Feed Manager <= 7.14.1 versions. HIGH 7.2 Unknown 1 Details
CVE-2026-118086 CVE-2026-118086 - Subscriber Privilege Escalation in WP BASE Booking <= 6.5.2 versions. HIGH 8.8 Unknown 1 Details
CVE-2026-116862 CVE-2026-116862 - Unauthenticated Broken Access Control in WP REST Cache <= 2026.3.1 versions. HIGH 7.5 Unknown 1 Details
CVE-2026-116861 CVE-2026-116861 - Unauthenticated Sensitive Data Exposure in Flexible Chat <= 1.1.0 versions. HIGH 7.5 Unknown 1 Details
CVE-2026-116854 CVE-2026-116854 - Subscriber Cross Site Scripting (XSS) in WP Customer Area <= 8.4.0 versions. MEDIUM 6.5 Unknown 1 Details
CVE-2026-116853 CVE-2026-116853 - Unauthenticated Broken Access Control in GiveWP <= 4.19.0.1 versions. MEDIUM 6.5 Unknown 1 Details
CVE-2026-116852 CVE-2026-116852 - Author Remote Code Execution (RCE) in Widget Options <= 4.2.5 versions. CRITICAL 9.1 Unknown 1 Details
CVE-2026-116851 CVE-2026-116851 - Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.6.5 versions. HIGH 7.1 Unknown 1 Details
CVE-2026-116847 CVE-2026-116847 - Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.6 versions. HIGH 7.1 Unknown 1 Details
CVE-2026-116410 CVE-2026-116410 - Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS <= 3.4.3 versions. MEDIUM 6.5 Unknown 1 Details
CVE-2026-116405 CVE-2026-116405 - Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.9 versions. HIGH 7.1 Unknown 1 Details
CVE-2026-116401 CVE-2026-116401 - Unauthenticated Broken Access Control in HUSKY <= 1.4.6 versions. HIGH 7.5 Unknown 1 Details
CVE-2026-116386 CVE-2026-116386 - Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.2 versions. CRITICAL 9.8 Unknown 1 Details
CVE-2026-115947 CVE-2026-115947 - Unauthenticated Sensitive Data Exposure in HUSKY <= 1.4.6 versions. MEDIUM 6.5 Unknown 1 Details
CVE-2026-115604 CVE-2026-115604 - Subscriber Arbitrary File Deletion in SureDash <= 1.12.3 versions. MEDIUM 5.0 Unknown 1 Details
CVE-2026-114711 CVE-2026-114711 - Subscriber Cross Site Scripting (XSS) in MultiVendorX <= 5.0.20 versions. MEDIUM 6.5 Unknown 1 Details
CVE-2026-109213 CVE-2026-109213 - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-113499. Reason: This candidate is a INFORMATIONAL - Unknown 1 Details
CVE-2026-107868 CVE-2026-107868 - Unauthenticated Bypass Vulnerability in YITH WooCommerce Product Add-Ons <= 4.34.0 versions. MEDIUM 5.3 Unknown 1 Details
CVE-2026-105077 CVE-2026-105077 - Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.19 versions. HIGH 7.1 Unknown 1 Details