The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-108485: ThemeGrill eStore: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGrill eStore…7.1 HighN/AN/AOct 18, 2026
CVE-2026-107436: WP Chill Strong Testimonials: Deserialization of Untrusted Data vulnerability in WP Chill Strong Testimonials strong-testimonials allows Object…8.8 HighN/AN/AOct 18, 2026
CVE-2026-96534: Unknown: The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before…7.7 HighN/AN/AOct 18, 2026
CVE-2026-87844: Unknown PickPlugins Product Designer for WooCommerce: The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform any capability check…5.3 MediumN/AN/AOct 18, 2026
CVE-2026-111942: hrisikeshpal Blood_Bank_Management_System: A weakness has been identified in hrisikeshpal Blood_Bank_Management_System 1.0.04.3 Medium2.1 LowN/AOct 18, 2026
CVE-2026-111877: dext34-morgan Books4Cash: A vulnerability was determined in dext34-morgan Books4Cash up to a8d3e357db75c07ac5ffbadcbaee2aeb4db3e5714.3 Medium2.1 LowN/AOct 18, 2026
CVE-2026-111041: Unknown AI Engine: The AI Engine WordPress plugin before 3.7.9 does not verify that the user performing certain AI media management…4.9 MediumN/AN/AOct 18, 2026
CVE-2026-110981: Unknown WP Photo Album Plus: The WP Photo Album Plus WordPress plugin before 9.2.11.002 does not properly escape a category navigation value before…7.1 HighN/AN/AOct 18, 2026
CVE-2026-110976: Unknown AI Engine: The AI Engine WordPress plugin before 3.7.9 does not check that the item passed to one of its media actions belongs to…4.9 MediumN/AN/AOct 18, 2026
CVE-2026-110070: Unknown Modern Events Calendar Lite: The Modern Events Calendar Lite WordPress plugin before 7.36.4 does not verify that a user is authorized to edit the…6.5 MediumN/AN/AOct 18, 2026
CVE-2026-110069: Unknown Modern Events Calendar Lite: The Modern Events Calendar Lite WordPress plugin before 7.37.0 does not perform capability, nonce, or ownership checks…4.3 MediumN/AN/AOct 18, 2026
CVE-2026-110035: Unknown Salon Booking System: The Salon Booking System WordPress plugin before 10.31.11 does not restrict one of its REST API endpoints to salon…4.3 MediumN/AN/AOct 18, 2026
CVE-2026-110033: Unknown Salon Booking System: The Salon Booking System WordPress plugin before 10.31.11 does not validate a user-supplied image URL before fetching…6.8 MediumN/AN/AOct 18, 2026
CVE-2026-110032: Unknown Salon Booking System: The Salon Booking System WordPress plugin before 10.31.11 does not restrict which user account its salon staff roles…5.5 MediumN/AN/AOct 18, 2026
CVE-2026-110031: Unknown Salon Booking System: The Salon Booking System WordPress plugin before 10.31.11 does not prevent users holding its custom salon staff role…7.2 HighN/AN/AOct 18, 2026
CVE-2026-110026: Unknown Tasty Recipes Lite: The Tasty Recipes Lite WordPress plugin before 1.2.11 does not correctly check user capabilities when creating,…4.9 MediumN/AN/AOct 18, 2026
CVE-2026-109937: Unknown Otter Blocks: The Otter Blocks WordPress plugin before 3.2.3 does not validate that a user-supplied return URL belongs to the site…5.4 MediumN/AN/AOct 18, 2026
CVE-2026-111876: alexpasmantier television: A vulnerability was found in alexpasmantier television up to 0.15.95.3 Medium1.9 LowN/AOct 18, 2026
CVE-2026-111875: David-Crty Databasement: A vulnerability has been found in David-Crty Databasement up to 1.8.14.7 Medium2.0 LowN/AOct 18, 2026
CVE-2026-111874: n/a OpenCATS: A flaw has been found in OpenCATS 0.10.03.7 Low2.9 LowN/AOct 18, 2026
CVE-2026-111873: itsmeravitejak Online-Examination-System: A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e24497.3 High5.5 MediumN/AOct 18, 2026
CVE-2026-111872: itsmeravitejak Online-Examination-System: A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to…7.3 High5.5 MediumN/AOct 18, 2026
CVE-2026-111871: itsmeravitejak Online-Examination-System: A weakness has been identified in itsmeravitejak Online-Examination-System up to…7.3 High5.5 MediumN/AOct 18, 2026
CVE-2026-111870: itsmeravitejak Online-Examination-System: A security flaw has been discovered in itsmeravitejak Online-Examination-System up to…5.3 Medium5.5 MediumN/AOct 18, 2026
CVE-2026-111869: makeplane plane: A vulnerability was identified in makeplane plane up to 1.4.25.3 Medium5.5 MediumN/AOct 18, 2026
501-525 of 406803
‹›