Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-52708 CVE-2026-52708 - Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured MEDIUM 4.3 Unknown 1 Details
CVE-2026-48884 CVE-2026-48884 - Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured MEDIUM 5.3 Unknown 1 Details
CVE-2026-42691 CVE-2026-42691 - Authorization Bypass Through User-Controlled Key vulnerability in EventPrime EventPrime eventprime-event-calendar-manage MEDIUM 5.4 Unknown 1 Details
CVE-2026-39742 CVE-2026-39742 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / Stell MEDIUM 6.5 Unknown 1 Details
CVE-2026-39737 CVE-2026-39737 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElem MEDIUM 6.5 Unknown 1 Details
CVE-2026-27063 CVE-2026-27063 - Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) convertkit allows Exploiting Incorrectly Configured MEDIUM 5.3 Unknown 1 Details
CVE-2026-27062 CVE-2026-27062 - Cross-Site Request Forgery (CSRF) vulnerability in WPFunnels Team WPFunnels wpfunnels allows Cross Site Request Forgery. MEDIUM 4.3 Unknown 1 Details
CVE-2026-25450 CVE-2026-25450 - Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Conf MEDIUM 5.3 Unknown 1 Details
CVE-2026-25448 CVE-2026-25448 - Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control Securit MEDIUM 4.3 Unknown 1 Details
CVE-2026-118097 CVE-2026-118097 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Flash & H MEDIUM 6.5 Unknown 1 Details
CVE-2026-118095 CVE-2026-118095 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Medi MEDIUM 6.5 Unknown 1 Details
CVE-2026-118092 CVE-2026-118092 - Missing Authorization vulnerability in StylemixThemes MasterStudy LMS masterstudy-lms-learning-management-system allows MEDIUM 4.3 Unknown 1 Details
CVE-2026-118091 CVE-2026-118091 - Missing Authorization vulnerability in WPFunnels Team WPFunnels wpfunnels allows Exploiting Incorrectly Configured Acces MEDIUM 5.3 Unknown 1 Details
CVE-2026-118088 CVE-2026-118088 - Missing Authorization vulnerability in WPFunnels Team WPFunnels wpfunnels allows Exploiting Incorrectly Configured Acces MEDIUM 5.3 Unknown 1 Details
CVE-2026-116856 CVE-2026-116856 - Missing Authorization vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce flexible MEDIUM 5.3 Unknown 1 Details
CVE-2026-116850 CVE-2026-116850 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs Happy Addon MEDIUM 6.5 Unknown 1 Details
CVE-2026-116849 CVE-2026-116849 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins StreamCas MEDIUM 6.5 Unknown 1 Details
CVE-2026-116846 CVE-2026-116846 - Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Con MEDIUM 5.3 Unknown 1 Details
CVE-2026-116406 CVE-2026-116406 - Missing Authorization vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly Conf MEDIUM 4.3 Unknown 1 Details
CVE-2026-116387 CVE-2026-116387 - Missing Authorization vulnerability in Brainstorm Force SureForms sureforms allows Exploiting Incorrectly Configured Acc MEDIUM 5.3 Unknown 1 Details