Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-62122 CVE-2026-62122 - Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Contr MEDIUM 5.3 Unknown 1 Details
CVE-2026-62121 CVE-2026-62121 - Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in MEDIUM 6.5 Unknown 1 Details
CVE-2026-62057 CVE-2026-62057 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Fahim Reza Divi Contact F MEDIUM 5.3 Unknown 1 Details
CVE-2026-62056 CVE-2026-62056 - Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured MEDIUM 5.3 Unknown 1 Details
CVE-2026-62047 CVE-2026-62047 - Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly MEDIUM 4.3 Unknown 1 Details
CVE-2026-62023 CVE-2026-62023 - Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templa MEDIUM 4.3 Unknown 1 Details
CVE-2026-62019 CVE-2026-62019 - Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorrectly Configured Acc MEDIUM 4.3 Unknown 1 Details
CVE-2026-61854 CVE-2026-61854 - VoiceSentinel is a real-time voice moderation system for Minecraft servers. From 2.2.1 until 3.3.1, the optional report HIGH 8.2 Unknown 1 Details
CVE-2026-61840 CVE-2026-61840 - Quest Bot is an opensource Discord Bot. Prior to 1.1.9, the `image to GIF` command uses a request helper that validates INFORMATIONAL - Unknown 1 Details
CVE-2026-54855 CVE-2026-54855 - Unauthenticated Cross Site Scripting (XSS) in Profile Builder <= 4.0.5 versions. HIGH 7.1 Unknown 1 Details
CVE-2026-54854 CVE-2026-54854 - Contributor Privilege Escalation in Profile Builder <= 4.0.5 versions. MEDIUM 6.3 Unknown 1 Details
CVE-2026-54850 CVE-2026-54850 - Subscriber Broken Access Control in Booking and Rental Manager <= 2.8.2 versions. MEDIUM 6.5 Unknown 1 Details
CVE-2026-52710 CVE-2026-52710 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ithemelandco GIFTiT &#821 MEDIUM 5.3 Unknown 1 Details
CVE-2026-48201 CVE-2026-48201 - Unauthenticated Cross Site Scripting (XSS) in Fast Velocity Minify <= 3.5.7 versions. HIGH 7.1 Unknown 1 Details
CVE-2026-46560 CVE-2026-46560 - Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `RADIUS` authentication module op HIGH 7.5 Unknown 1 Details
CVE-2026-39786 CVE-2026-39786 - Unauthenticated Cross Site Scripting (XSS) in BA Book Everything <= 1.8.33 versions. HIGH 7.1 Unknown 1 Details
CVE-2026-39739 CVE-2026-39739 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force U MEDIUM 6.5 Unknown 1 Details
CVE-2026-39738 CVE-2026-39738 - Deserialization of Untrusted Data vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Object Inj CRITICAL 9.8 Unknown 1 Details
CVE-2026-39734 CVE-2026-39734 - Unauthenticated Path Traversal in WP EasyPay <= 4.5.4 versions. HIGH 7.5 Unknown 1 Details
CVE-2026-39732 CVE-2026-39732 - Unauthenticated SQL Injection in Transliterator <= 2.5.13 versions. CRITICAL 9.3 Unknown 1 Details