The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2016-20103: Cherry Team Cherry Plugin: Cherry Plugin for WordPress before 1.2.7 contains a path traversal vulnerability that allows unauthenticated attackers…7.5 High8.7 High0%Oct 20, 2026
CVE-2016-20102: JavaMelody: JavaMelody before 1.60.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers…6.1 Medium5.1 Medium0%Oct 20, 2026
CVE-2016-20101: Pedro Marcelo Issuu Panel: Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated…8.1 High9.2 Critical0%Oct 20, 2026
CVE-2015-20128: FooSun DotNetCMS: FooSun DotNetCMS 1.0 and 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to…8.2 High8.8 High0%Oct 20, 2026
CVE-2015-20125: Aspose Aspose PDF Exporter: Aspose PDF Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated…7.5 High8.7 High0%Oct 20, 2026
CVE-2015-20124: Aspose Aspose Importer & Exporter: Aspose Importer & Exporter plugin for WordPress before 3.0 contains a path traversal vulnerability that allows…7.5 High8.7 High0%Oct 20, 2026
CVE-2015-20123: Aspose Aspose Doc Exporter: Aspose Doc Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated…7.5 High8.7 High0%Oct 20, 2026
CVE-2014-125133: imithemes NativeChurch: NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated…7.5 High8.7 High1%Oct 20, 2026
CVE-2014-125132: Jason Newman Blogroll Fun: Blogroll Fun plugin for WordPress before 0.8.5 contains a reflected cross-site scripting vulnerability that allows…6.1 Medium5.1 Medium0%Oct 20, 2026
CVE-2014-125131: DedeCMS: DedeCMS 5.6 and 5.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to…6.1 Medium5.1 Medium0%Oct 20, 2026
CVE-2012-20005: Łukasz Więcek SocialFit: SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows…6.1 Medium5.1 Medium0%Oct 20, 2026
CVE-2012-20003: Web Updates KMU Custom Tables: Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows…6.1 Medium5.1 Medium0%Oct 20, 2026
CVE-2012-20002: James Charlesworth TinyMCE Thumbnail Gallery: TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path traversal vulnerability that allows…7.5 High8.7 High0%Oct 20, 2026
CVE-2026-113727: openchoreo: OpenChoreo is a developer platform for Kubernetes7.4 HighN/A0%Oct 20, 2026
Google Chrome Vulnerability: CVE-2026-113331N/AN/A0%Oct 20, 2026
Google Chrome Vulnerability: CVE-2026-112994N/AN/A0%Oct 20, 2026
Google Chrome Vulnerability: CVE-2026-113169N/AN/A0%Oct 20, 2026
Google Chrome Vulnerability: CVE-2026-113116N/AN/A0%Oct 20, 2026
Google Chrome Vulnerability: CVE-2026-113186N/AN/A0%Oct 20, 2026
Google Chrome Vulnerability: CVE-2026-113023N/AN/A0%Oct 20, 2026
Google Chrome Vulnerability: CVE-2026-113300N/AN/A0%Oct 20, 2026
Google Chrome Vulnerability: CVE-2026-113056N/AN/A0%Oct 20, 2026
Google Chrome Vulnerability: CVE-2026-113089N/AN/A0%Oct 20, 2026
Google Chrome Vulnerability: CVE-2026-113235N/AN/A0%Oct 20, 2026
Google Chrome Vulnerability: CVE-2026-113342N/AN/A0%Oct 20, 2026
2876-2900 of 545063
‹›