The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-111445: Wheels: Wheels 4.0.0 through 4.1.2 before 4.2.0 replaces incoming scope conditions with a primary-key condition in findByKey()…8.1 HighN/A0%Oct 16, 2026
CVE-2026-111444: Wheels: Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES…9.8 CriticalN/A0%Oct 16, 2026
CVE-2026-111443: Wheels: Wheels 4.0.6 through 4.1.2 lets an unauthenticated client switch a request into a separate test application context,…6.5 MediumN/A0%Oct 16, 2026
CVE-2026-111442: BackdropCMS Backdrop: Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 does not sufficiently validate uploaded SVG images to…N/A5.3 Medium0%Oct 16, 2026
CVE-2026-109990: gijo Flying Scripts: Delay JavaScript to Improve Site Speed & Performance: The Flying Scripts: Delay JavaScript to Improve Site Speed & Performance plugin for WordPress is vulnerable to Stored…7.2 HighN/A0%Oct 16, 2026
CVE-2026-109207: themeisle: The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress…7.2 HighN/A0%Oct 16, 2026
CVE-2026-107758: extendthemes Colibri Page Builder: The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter…7.2 HighN/A0%Oct 16, 2026
CVE-2026-104769: asadkn: The Debloat – Remove Unused CSS, Optimize JS plugin for WordPress is vulnerable to Directory Traversal in all versions…5.9 MediumN/A1%Oct 16, 2026
CVE-2026-104745: wpcodefactory Customer Email Verification for WooCommerce: The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation via the…8.1 HighN/A1%Oct 16, 2026
CVE-2026-103518: wpmanageninja: The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnerable to generic SQL…4.9 MediumN/A0%Oct 16, 2026
CVE-2026-111389: SQL Injection7.7 High8.3 High0%Oct 16, 2026
CVE-2026-111388: frappe: Frappe Framework before 15.120.0 and 16.x before 16.33.0 does not enforce the per-user restrict_ip allowlist for…5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111387: nezhahq nezha: Nezha from 2.2.5 before 2.3.15 contains an information disclosure vulnerability that allows authenticated users to…6.5 Medium7.1 High0%Oct 16, 2026
CVE-2026-111386: nezhahq nezha: Nezha from 1.7.0 before 2.3.15 contains an information disclosure vulnerability that allows authenticated members to…4.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111385: URL Redirection to Untrusted Site ('Open Redirect')4.8 Medium6.3 Medium0%Oct 16, 2026
CVE-2026-111384: Allocation of Resources Without Limits or Throttling6.5 Medium7.1 High0%Oct 16, 2026
CVE-2026-111383: nezhahq nezha: Nezha from 2.0.13 before 2.3.15 contains a resource exhaustion vulnerability that allows authenticated users to open…6.5 Medium7.1 High0%Oct 16, 2026
CVE-2026-111382: FreeRDP: FreeRDP before 3.32.0 contains a client-side heap out-of-bounds write vulnerability in general_LumaToYUV444 and…8.8 High8.7 High0%Oct 16, 2026
CVE-2026-111381: FreeRDP: FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v2 that allows local…7.3 High7.0 High0%Oct 16, 2026
CVE-2026-111380: Integer Overflow or Wraparound8.8 High8.7 High0%Oct 16, 2026
CVE-2026-111379: FreeRDP: FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v3 that allows local…7.3 High7.0 High0%Oct 16, 2026
CVE-2026-111378: FreeRDP: FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in parse_nla_mode_pdu that…7.5 High8.7 High0%Oct 16, 2026
CVE-2026-111377: FreeRDP: FreeRDP from 2.0.0 before 3.32.0 contains an unbounded reassembly vulnerability in WTSProcessChannelData that fails to…6.5 Medium7.1 High0%Oct 16, 2026
CVE-2026-111376: FreeRDP: FreeRDP from 3.30.0 before 3.32.0 contains a heap out-of-bounds read vulnerability in the Windows client's…5.0 Medium2.3 Low0%Oct 16, 2026
CVE-2026-111375: Out-of-bounds Read4.8 Medium6.3 Medium0%Oct 16, 2026
526-550 of 412906
‹›