The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-121874: Unknown Post Duplicator: The Post Duplicator WordPress plugin before 3.0.18 does not restrict settings saves to its own options, allowing a site…7.2 HighN/A0%Nov 9, 2026
CVE-2026-121759: Unknown Fusion Page Builder: The Fusion Page Builder WordPress plugin before 1.7.1 does not check that the user owns the content it moves to the…4.9 MediumN/A0%Nov 9, 2026
CVE-2026-120409: Unknown All-in-One Video Gallery: The All-in-One Video Gallery WordPress plugin before 5.1.1 does not check whether a video is password protected before…5.3 MediumN/A0%Nov 9, 2026
CVE-2026-118202: Unknown Limit Login Attempts Security: The Limit Login Attempts Security WordPress plugin before 3.4.1 does not confirm that its two-factor authentication…7.5 HighN/A0%Nov 9, 2026
CVE-2026-118201: Unknown Limit Login Attempts Security: The Limit Login Attempts Security WordPress plugin before 3.4.1 does not enforce its two-factor authentication on every…7.5 HighN/A0%Nov 9, 2026
CVE-2026-115256: Unknown Mail Debug for WooCommerce: The Mail Debug for WooCommerce WordPress plugin through 1.3.0 does not perform any capability, authentication, or nonce…7.5 HighN/A0%Nov 9, 2026
CVE-2026-115237: Unknown Grand Job: The Grand Job WordPress plugin through 1.2.1 does not correctly verify the password reset code before updating a user's…9.8 CriticalN/A0%Nov 9, 2026
CVE-2026-115213: Unknown EASY-JS-WPAPI Client HANDLE for the WordPress REST-API: The EASY-JS-WPAPI Client HANDLE for the WordPress REST-API WordPress plugin through 2.0 does not prevent the…9.8 CriticalN/A0%Nov 9, 2026
CVE-2026-115212: Unknown mView 豆瓣电影: The mView 豆瓣电影 WordPress plugin through 1.0.3 does not validate the type, name, or source of a remotely fetched file,…8.8 HighN/A0%Nov 9, 2026
CVE-2026-115204: Unknown AZEXO Store Locator: The AZEXO Store Locator WordPress plugin through 1.4 does not perform capability or nonce checks on its AJAX actions…8.8 HighN/A0%Nov 9, 2026
CVE-2026-124571: SourceCodester Simple CRUD using PHP and FPDF: A flaw has been found in SourceCodester Simple CRUD using PHP and FPDF 1.06.3 Medium2.1 Low0%Nov 9, 2026
CVE-2026-124570: SourceCodester Online Leave Management System: A vulnerability was detected in SourceCodester Online Leave Management System 1.02.4 Low1.9 Low0%Nov 9, 2026
CVE-2026-124569: fushengqian fuintCatering: A vulnerability was found in fushengqian fuintCatering up to 6d054f5788ac8645eb491f79242bb8a625efc1335.4 Medium5.3 Medium0%Nov 9, 2026
CVE-2026-124568: fushengqian fuintCatering: A vulnerability has been found in fushengqian fuintCatering up to 6d054f5788ac8645eb491f79242bb8a625efc1334.3 Medium5.3 Medium0%Nov 9, 2026
CVE-2026-124567: fushengqian fuint: A flaw has been found in fushengqian fuint up to 36cc31b08d77facc94e8959afa02224891b4fe5f4.3 Medium5.3 Medium0%Nov 9, 2026
CVE-2026-124566: fushengqian fuint: A vulnerability was detected in fushengqian fuint up to 36cc31b08d77facc94e8959afa02224891b4fe5f4.3 Medium5.3 Medium0%Nov 9, 2026
CVE-2026-124565: fushengqian fuint: A security vulnerability has been detected in fushengqian fuint up to 36cc31b08d77facc94e8959afa02224891b4fe5f4.3 Medium5.3 Medium0%Nov 9, 2026
CVE-2026-113364: NEC Corporation WebSAM WinShare: Buffer Overflow in the data receiving process in NEC Corporation WebSAM WinShare Ver 7.5.0 and earlier, Ver 7.6.0 and…N/A9.3 Critical1%Nov 9, 2026
CVE-2026-113363: NEC Corporation WebSAM WinShare: Improper Input Validation in the network communication processing in NEC Corporation WebSAM WinShare Ver 7.2.0 through…N/A9.3 Critical1%Nov 9, 2026
CVE-2026-124610: Rejected reason: 依 VUL-2026-008441 判定為主N/AN/AN/ANov 9, 2026
CVE-2026-124564: D-Link DIR-878: A weakness has been identified in D-Link DIR-878 1.20B055.3 Medium5.5 Medium1%Nov 9, 2026
CVE-2026-124563: D-Link DIR-878: A security flaw has been discovered in D-Link DIR-878 1.20B057.5 High7.7 High1%Nov 9, 2026
CVE-2026-124562: D-Link DIR-878: A vulnerability was identified in D-Link DIR-878 1.20B057.5 High7.7 High1%Nov 9, 2026
CVE-2026-124561: D-Link DIR-878: A vulnerability was determined in D-Link DIR-878 1.20B057.5 High7.7 High1%Nov 9, 2026
CVE-2026-113362: NEC Corporation WebSAM WinShare: Improper Access Control in the program installation folder in NEC Corporation WebSAM Winshare Ver 7.5.0 and earlier…N/A8.5 High0%Nov 9, 2026
351-375 of 427771
‹›