The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-120201: dromara Jpom: Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to…9.8 Critical9.3 Critical1%Oct 31, 2026
CVE-2026-102212: Opengear: Heap-based buffer overflow in Opengear IM72XX, CM71XX, and ACM70XX firmware versions 4.8.0 through 5.5.2 on console…N/A8.4 High0%Oct 31, 2026
CVE-2026-78192: Initialization of a Resource with an Insecure DefaultN/AN/A0%Oct 31, 2026
CVE-2026-78191: Regular Expression without AnchorsN/AN/A0%Oct 31, 2026
CVE-2026-78190: Cross-site Scripting (XSS)N/AN/A0%Oct 31, 2026
CVE-2026-78189: Path TraversalN/AN/A0%Oct 31, 2026
CVE-2026-78188: Sensitive Cookie with Improper SameSite AttributeN/AN/A0%Oct 31, 2026
CVE-2026-15272: Shamalli Web 2.0 Directory plugin for WordPress: The Web 2.0 Directory plugin for WordPress is vulnerable to time-based SQL Injection via the 'w2dc_level_filter'…6.5 MediumN/A0%Oct 31, 2026
CVE-2026-96554: Boss Media BuddyBoss Platform: The BuddyBoss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Group Name in all versions…6.4 MediumN/A0%Oct 31, 2026
CVE-2026-120194: Red Hat: A flaw was found in json-glib7.5 HighN/A0%Oct 31, 2026
CVE-2026-120114: qriouslad Debug Log Manager – Conveniently Monitor and Inspect Errors: The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is vulnerable to Stored Cross-Site…7.2 HighN/A0%Oct 31, 2026
CVE-2026-118599: GNOME Epiphany: A file overwrite vulnerability exists in Epiphany when installing WebExtension packages from .xpi files5.5 MediumN/A0%Oct 31, 2026
CVE-2026-118598: GNOME Epiphany: A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user…6.5 MediumN/A0%Oct 31, 2026
CVE-2026-116752: paoltaia GeoDirectory – WP Business Directory Plugin and Classified Listings Directory: The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to…6.4 MediumN/A0%Oct 31, 2026
CVE-2026-109231: vendidero Germanized for WooCommerce: The Germanized for WooCommerce plugin for WordPress is vulnerable to Unauthorized Access of Private Data via Activation…4.3 MediumN/A0%Oct 31, 2026
CVE-2026-109197: wpdirectorykit WP Directory Kit: The WP Directory Kit plugin for WordPress is vulnerable to generic SQL Injection via the 'idfield' parameter in all…7.5 HighN/A0%Oct 31, 2026
CVE-2026-107711: wppool FlexStock – Product Stock Sync with Google Sheets for WooCommerce: The FlexStock – Product Stock Sync with Google Sheets for WooCommerce plugin for WordPress is vulnerable to Stored…6.4 MediumN/A0%Oct 31, 2026
CVE-2026-104926: ThemeHigh WooCommerce Extra Product Options Pro: The WooCommerce Extra Product Options Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the…6.1 MediumN/A0%Oct 31, 2026
CVE-2026-100151: kstover: The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress is…6.1 MediumN/A0%Oct 31, 2026
CVE-2026-76010: smub: The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code…8.8 HighN/A1%Oct 31, 2026
CVE-2026-120075: melapress WP Activity Log: The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and…7.2 HighN/A0%Oct 31, 2026
CVE-2026-119160: shapedplugin: The Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News plugin for WordPress is…6.4 MediumN/A0%Oct 31, 2026
CVE-2026-117681: A flaw was found in konflux-ci8.0 HighN/A0%Oct 31, 2026
CVE-2026-110530: radgeek FeedWordPress: The FeedWordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including,…7.2 HighN/A0%Oct 31, 2026
CVE-2026-109367: smub: The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) plugin…5.3 MediumN/A0%Oct 31, 2026
326-350 of 422529
‹›