Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-62004 CVE-2026-62004 - Unauthenticated PHP Object Injection in Motorix <= 1.11 versions. CRITICAL 9.8 Unknown 1 Details
CVE-2026-62003 CVE-2026-62003 - Unauthenticated PHP Object Injection in Mission <= 1.22 versions. CRITICAL 9.8 Unknown 1 Details
CVE-2026-62002 CVE-2026-62002 - Unauthenticated PHP Object Injection in Meals & Wheels <= 1.1.13 versions. CRITICAL 9.8 Unknown 1 Details
CVE-2026-62001 CVE-2026-62001 - Unauthenticated PHP Object Injection in Marcell <= 1.2.14 versions. CRITICAL 9.8 Unknown 1 Details
CVE-2026-61998 CVE-2026-61998 - Unauthenticated PHP Object Injection in Le Truffe <= 1.1.7 versions. CRITICAL 9.8 Unknown 1 Details
CVE-2026-61997 CVE-2026-61997 - Unauthenticated PHP Object Injection in Legal Stone <= 1.2.11 versions. CRITICAL 9.8 Unknown 1 Details
CVE-2026-61996 CVE-2026-61996 - Subscriber SQL Injection in MLS On The Fly <= 1.8.1.5 versions. HIGH 8.5 Unknown 1 Details
CVE-2026-61995 CVE-2026-61995 - Unauthenticated Cross Site Scripting (XSS) in YouTube Showcase <= 4.1.0 versions. HIGH 7.1 Unknown 1 Details
CVE-2026-61993 CVE-2026-61993 - Unauthenticated Cross Site Scripting (XSS) in Blockonomics 3.11.0 versions. HIGH 7.1 Unknown 1 Details
CVE-2026-61992 CVE-2026-61992 - Unauthenticated PHP Object Injection in GEO my WordPress <= 4.5.5.3 versions. CRITICAL 9.8 wordpress Unknown 1 Details
CVE-2026-61991 CVE-2026-61991 - Unauthenticated Remote Code Execution (RCE) in AjaxLoadMore Cache <= 3.1.1 versions. CRITICAL 10.0 Unknown 1 Details
CVE-2026-61989 CVE-2026-61989 - Unauthenticated Cross Site Scripting (XSS) in Easy Property Listings <= 3.5.25 versions. HIGH 7.1 Unknown 1 Details
CVE-2026-61988 CVE-2026-61988 - Unauthenticated Cross Site Scripting (XSS) in Auction Nudge – Your eBay on Your Site <= 8.4.0 versions. HIGH 7.1 Unknown 1 Details
CVE-2026-54866 CVE-2026-54866 - Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button Elementor Plugin <= 1.2.8 versions. HIGH 7.1 Unknown 1 Details
CVE-2026-54865 CVE-2026-54865 - Subscriber Cross Site Scripting (XSS) in Podamibe Custom User Gravatar <= 1.0.8 versions. MEDIUM 6.5 Unknown 1 Details
CVE-2026-54864 CVE-2026-54864 - Unauthenticated Cross Site Scripting (XSS) in Post Video Players <= 1.165 versions. HIGH 7.1 Unknown 1 Details
CVE-2026-54860 CVE-2026-54860 - Unauthenticated PHP Object Injection in Ozisti <= 1.1.10 versions. CRITICAL 9.8 Unknown 1 Details
CVE-2026-54859 CVE-2026-54859 - Unauthenticated PHP Object Injection in Preservation <= 1.15 versions. CRITICAL 9.8 Unknown 1 Details
CVE-2026-54858 CVE-2026-54858 - Unauthenticated PHP Object Injection in Printy <= 1.13.0 versions. CRITICAL 9.8 Unknown 1 Details
CVE-2026-54857 CVE-2026-54857 - Unauthenticated PHP Object Injection in Quirky <= 1.23 versions. CRITICAL 9.8 Unknown 1 Details