The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-123129: Unknown Event Tickets Manager for WooCommerce: The Event Tickets Manager for WooCommerce WordPress plugin before 1.6.0 does not validate the ticket-type price sent to…5.3 MediumN/A0%Nov 9, 2026
CVE-2026-123128: Unknown GemBooking: The GemBooking WordPress plugin before 1.7.1 does not serialise concurrent booking requests per team member, allowing…3.7 LowN/A0%Nov 9, 2026
CVE-2026-123091: Unknown Vigilant: The Vigilant WordPress plugin before 2.11.0 does not enforce its two-factor authentication on login forms other than…7.5 HighN/A0%Nov 9, 2026
CVE-2026-123088: Unknown UniPAY Payment Gateway For WooCommerce: The UniPAY Payment Gateway For WooCommerce WordPress plugin before 2.4 does not perform any authorization check before…5.3 MediumN/A0%Nov 9, 2026
CVE-2026-123064: Unknown: The WP BASE Booking of Appointments, Services and Events WordPress plugin before 6.5.1 does not properly restrict…8.8 HighN/A0%Nov 9, 2026
CVE-2026-121875: Unknown Post Duplicator: The Post Duplicator WordPress plugin before 3.0.18 does not validate the capabilities assigned to roles through its…7.2 HighN/A0%Nov 9, 2026
CVE-2026-121874: Unknown Post Duplicator: The Post Duplicator WordPress plugin before 3.0.18 does not restrict settings saves to its own options, allowing a site…7.2 HighN/A0%Nov 9, 2026
CVE-2026-121759: Unknown Fusion Page Builder: The Fusion Page Builder WordPress plugin before 1.7.1 does not check that the user owns the content it moves to the…4.9 MediumN/A0%Nov 9, 2026
CVE-2026-120409: Unknown All-in-One Video Gallery: The All-in-One Video Gallery WordPress plugin before 5.1.1 does not check whether a video is password protected before…5.3 MediumN/A0%Nov 9, 2026
CVE-2026-118202: Unknown Limit Login Attempts Security: The Limit Login Attempts Security WordPress plugin before 3.4.1 does not confirm that its two-factor authentication…7.5 HighN/A0%Nov 9, 2026
CVE-2026-118201: Unknown Limit Login Attempts Security: The Limit Login Attempts Security WordPress plugin before 3.4.1 does not enforce its two-factor authentication on every…7.5 HighN/A0%Nov 9, 2026
CVE-2026-115256: Unknown Mail Debug for WooCommerce: The Mail Debug for WooCommerce WordPress plugin through 1.3.0 does not perform any capability, authentication, or nonce…7.5 HighN/A0%Nov 9, 2026
CVE-2026-115237: Unknown Grand Job: The Grand Job WordPress plugin through 1.2.1 does not correctly verify the password reset code before updating a user's…9.8 CriticalN/A0%Nov 9, 2026
CVE-2026-115213: Unknown EASY-JS-WPAPI Client HANDLE for the WordPress REST-API: The EASY-JS-WPAPI Client HANDLE for the WordPress REST-API WordPress plugin through 2.0 does not prevent the…9.8 CriticalN/A0%Nov 9, 2026
CVE-2026-115212: Unknown mView 豆瓣电影: The mView 豆瓣电影 WordPress plugin through 1.0.3 does not validate the type, name, or source of a remotely fetched file,…8.8 HighN/A0%Nov 9, 2026
CVE-2026-115204: Unknown AZEXO Store Locator: The AZEXO Store Locator WordPress plugin through 1.4 does not perform capability or nonce checks on its AJAX actions…8.8 HighN/A0%Nov 9, 2026
CVE-2026-124574: chenyme grok2api: A vulnerability was determined in chenyme grok2api up to 3.1.66.3 Medium2.1 Low0%Nov 9, 2026
CVE-2026-124571: SourceCodester Simple CRUD using PHP and FPDF: A flaw has been found in SourceCodester Simple CRUD using PHP and FPDF 1.06.3 Medium2.1 Low0%Nov 9, 2026
CVE-2026-124569: fushengqian fuintCatering: A vulnerability was found in fushengqian fuintCatering up to 6d054f5788ac8645eb491f79242bb8a625efc1335.4 Medium5.3 Medium0%Nov 9, 2026
CVE-2026-124570: SourceCodester Online Leave Management System: A vulnerability was detected in SourceCodester Online Leave Management System 1.02.4 Low1.9 Low0%Nov 9, 2026
CVE-2026-124568: fushengqian fuintCatering: A vulnerability has been found in fushengqian fuintCatering up to 6d054f5788ac8645eb491f79242bb8a625efc1334.3 Medium5.3 Medium0%Nov 9, 2026
CVE-2026-124567: fushengqian fuint: A flaw has been found in fushengqian fuint up to 36cc31b08d77facc94e8959afa02224891b4fe5f4.3 Medium5.3 Medium0%Nov 9, 2026
CVE-2026-124566: fushengqian fuint: A vulnerability was detected in fushengqian fuint up to 36cc31b08d77facc94e8959afa02224891b4fe5f4.3 Medium5.3 Medium0%Nov 9, 2026
CVE-2026-124565: fushengqian fuint: A security vulnerability has been detected in fushengqian fuint up to 36cc31b08d77facc94e8959afa02224891b4fe5f4.3 Medium5.3 Medium0%Nov 9, 2026
CVE-2026-113364: NEC Corporation WebSAM WinShare: Buffer Overflow in the data receiving process in NEC Corporation WebSAM WinShare Ver 7.5.0 and earlier, Ver 7.6.0 and…N/A9.3 Critical1%Nov 9, 2026
426-450 of 427771
‹›