The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-107021: n/a: Insecure permissions in the CardProvider content provider component of helloworld1 AnyMemo versionCode 20260730 allows…N/AN/AN/AOct 29, 2026
CVE-2026-107020: n/a: An issue in the activity.LoadLinkLaterActivity component of FeedEx / Handy News Reader versionCode 116 allows attackers…N/AN/AN/AOct 29, 2026
CVE-2026-107019: n/a: Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allows…N/AN/AN/AOct 29, 2026
CVE-2026-107018: n/a: Insecure permissions in Ghost Commander File Manager versionCode 479 allows unauthorized attackers to arbitrarily read…N/AN/AN/AOct 29, 2026
CVE-2026-107017: n/a: Insecure permissions in the ShortcutDispatchActivity component of canvoki versionCode 14 allows unauthorized attackers…N/AN/AN/AOct 29, 2026
CVE-2026-107016: n/a: Insecure permissions in Fossify v1.3.0 allows unauthorized attackers to access and read another user's stored contacts.N/AN/AN/AOct 29, 2026
CVE-2026-107015: n/a: Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in…N/AN/AN/AOct 29, 2026
CVE-2026-107014: n/a: Insecure permissions in Bander Notepad (bander.notepad) versionCode 12 allow unauthorized attackers to write and read…N/AN/AN/AOct 29, 2026
CVE-2026-115605: Brainstorm Force SureDash: Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured…4.3 MediumN/AN/AOct 29, 2026
CVE-2026-118095: David Lingren Media LIbrary Assistant: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-54871: Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder Addons: Missing Authorization vulnerability in Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder…5.3 MediumN/AN/AOct 29, 2026
CVE-2026-25450: ThemeGrill User Registration: Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly…5.3 MediumN/AN/AOct 29, 2026
CVE-2026-116850: weDevs Happy Addons for Elementor: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs Happy…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-114181: Magepeople inc. Taxi Booking Manager for WooCommerce: Missing Authorization vulnerability in Magepeople inc5.3 MediumN/AN/AOct 29, 2026
CVE-2026-118088: WPFunnels Team WPFunnels: Missing Authorization vulnerability in WPFunnels Team WPFunnels wpfunnels allows Exploiting Incorrectly Configured…5.3 MediumN/AN/AOct 29, 2026
CVE-2026-116849: bPlugins StreamCast: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-110881: Brainstorm Force SureDash: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-116856: WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce: Missing Authorization vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce…5.3 MediumN/AN/AOct 29, 2026
CVE-2026-93010: Red Hat: A flaw was found in dnsmasq4.3 MediumN/AN/AOct 29, 2026
CVE-2026-93009: Red Hat: A flaw was found in dnsmasq4.3 MediumN/AN/AOct 29, 2026
CVE-2026-79589: n/a: The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an…N/AN/AN/AOct 29, 2026
CVE-2026-54862: Codection Import and export users and customers: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codection Import…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-48195: bPlugins PDF Poster: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins PDF…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-42707: HivePress HivePress Claim Listings: Missing Authorization vulnerability in HivePress HivePress Claim Listings hivepress-claim-listings allows Exploiting…4.3 MediumN/AN/AOct 29, 2026
CVE-2026-119054: Themeisle Multiple Pages Generator by Themeisle: Multiple Pages Generator by Themeisle before 4.2.5 contains a stored cross-site scripting vulnerability that allows…5.4 Medium5.1 MediumN/AOct 29, 2026
226-250 of 538495