Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-110305 CVE-2026-110305 - The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Sensitive Information Exposure in all version HIGH 7.5 wordpress Unknown 1 Details
CVE-2026-110001 CVE-2026-110001 - The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment (short MEDIUM 5.4 wordpress Unknown 1 Details
CVE-2026-109984 CVE-2026-109984 - The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' param MEDIUM 5.4 wordpress Unknown 1 Details
CVE-2026-109592 CVE-2026-109592 - The OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPress is vulnerable to authorizati MEDIUM 4.3 wordpress Unknown 1 Details
CVE-2026-107630 CVE-2026-107630 - The Email Templates Customizer and Designer for WordPress and WooCommerce plugin for WordPress is vulnerable to authoriz HIGH 7.5 wordpress Unknown 1 Details
CVE-2026-105894 CVE-2026-105894 - The Ak Framework plugin for WordPress, included in the Newsy - Viral News & Magazine WordPress Theme, is vulnerable to P HIGH 8.8 wordpress Unknown 1 Details
CVE-2026-104744 CVE-2026-104744 - The Independent Analytics Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'utm_campaign' p HIGH 7.2 wordpress Unknown 1 Details
CVE-2026-104739 CVE-2026-104739 - The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion d MEDIUM 4.9 wordpress Unknown 1 Details
CVE-2026-102918 CVE-2026-102918 - The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and includi MEDIUM 6.4 wordpress Unknown 1 Details
CVE-2026-102905 CVE-2026-102905 - The The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to arbitrary shortcode execution in al MEDIUM 6.5 wordpress Unknown 1 Details
CVE-2025-8574 CVE-2025-8574 - The Database Cleaner plugin for WordPress is vulnerable to arbitrary table deletion in all versions up to, and including HIGH 8.7 wordpress Unknown 1 Details
CVE-2026-84243 CVE-2026-84243 - glibc: glibc: Arbitrary code execution via directory traversal in LANGUAGE environment variable HIGH 7.0 Red Hat Unknown 2 sources Details
CVE-2026-65566 CVE-2026-65566 - Cross-Site Request Forgery (CSRF) vulnerability in Meow Apps AI Engine ai-engine allows Cross Site Request Forgery.This HIGH 8.8 Unknown 1 Details
CVE-2026-62055 CVE-2026-62055 - Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly MEDIUM 4.3 Unknown 1 Details
CVE-2026-61826 CVE-2026-61826 - Bazarr is a companion application to Sonarr and Radarr. Prior to 1.5.7-beta.14, the `api_ns_plex` namespace in `bazarr/a CRITICAL 10.0 Unknown 1 Details
CVE-2026-61806 CVE-2026-61806 - Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version INFORMATIONAL - Unknown 1 Details
CVE-2026-61805 CVE-2026-61805 - Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version INFORMATIONAL - Unknown 1 Details
CVE-2026-61804 CVE-2026-61804 - myTinyWMS is a free, open-source warehouse management system. Prior to version 1.6.4, `Product (Artikel)` and `Category` HIGH 8.1 Unknown 1 Details
CVE-2026-61803 CVE-2026-61803 - Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version INFORMATIONAL - Unknown 1 Details
CVE-2026-61789 CVE-2026-61789 - DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Prior to 0.22.6, read-only SQL INFORMATIONAL - oracle Unknown 1 Details