Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules

TitleEitWModules
WordPress Plugin: contact-form-7-honeypot: CVE-2026-120547: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4.4 MediumN/A0%Nov 13, 2026
WordPress Plugin: elex-helpdesk-customer-support-ticket-system: CVE-2026-119077: Deserialization of Untrusted Data9.8 CriticalN/A1%Nov 13, 2026
WordPress Plugin: powerpress: CVE-2026-118587: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5.4 MediumN/A0%Nov 13, 2026
WordPress Plugin: nextgen-gallery: CVE-2026-118191: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')8.1 HighN/A1%Nov 13, 2026
WordPress Plugin: widget-options: CVE-2026-116615: Improper Control of Generation of Code ('Code Injection')8.8 HighN/A1%Nov 13, 2026
WordPress Plugin: wp-product-feed-manager: CVE-2026-116614: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4.9 MediumN/A0%Nov 13, 2026
WordPress Plugin: quiz-master-next: CVE-2026-116509: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')6.5 MediumN/A0%Nov 13, 2026
CVE-2026-116433: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains a Missing Authorization vulnerability4.3 MediumN/A0%Nov 13, 2026
CVE-2026-116418: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains an Incorrect Authorization vulnerability7.5 HighN/A0%Nov 13, 2026
WordPress Plugin: wp-staging: CVE-2026-115871: External Control of File Name or Path2.7 LowN/A0%Nov 13, 2026
CVE-2026-112181: OpenKM OpenKM Community Edition: Vulnerability due to inadequate restriction of references to external XML entities in OpenKM Community EditionN/A8.3 High0%Nov 13, 2026
CVE-2026-103645: qt: An integer overflow vulnerability in the Qt QTextCodec fromUnicode() and toUnicode() functionality of the Qt 5 Core…N/A1.1 Low0%Nov 13, 2026
CVE-2025-71463: secdev scapy: Scapy before 2.7.0 contains an insecure deserialization vulnerability in the load_session function that allows…6.7 Medium5.4 Medium0%Nov 13, 2026
CVE-2025-71462: diced zipline: Zipline before 3.7.12 contains a cross-site scripting vulnerability in the login page that allows attackers to execute…6.1 Medium5.1 Medium0%Nov 13, 2026
CVE-2025-71461: diced zipline: Zipline before 4.0.2 contains a predictable filename vulnerability that allows attackers to infer other users' upload…5.3 Medium6.9 Medium0%Nov 13, 2026
CVE-2025-71460: diced zipline: Zipline before 4.2.1 contains a missing authorization vulnerability in the /api/user/files/transaction endpoint that…4.2 Medium2.3 Low0%Nov 13, 2026
CVE-2025-71459: diced zipline: Zipline through 4.3.2 contains a path traversal vulnerability that allows authenticated uploaders to write files…8.1 High7.2 High0%Nov 13, 2026
CVE-2024-58405: diced zipline: Zipline through 3.7.9 contains an improper authorization vulnerability in the /api/auth/register endpoint, which…8.6 High8.8 High0%Nov 13, 2026
CVE-2024-58404: diced zipline: Zipline versions from 3.4.5 before 3.7.10 contain a path traversal vulnerability in the user data export endpoint via…7.7 High8.3 High1%Nov 13, 2026
CVE-2023-54423: OpenMage magento-lts: OpenMage magento-lts before 20.2.0 contains a stored cross-site scripting vulnerability because the TinyMCE WYSIWYG…7.5 High8.3 High0%Nov 13, 2026
CVE-2026-128824: Red Hat: A flaw was found in Red Hat Quay5.4 MediumN/A0%Nov 13, 2026
CVE-2026-120867: Citrix: Memory overflow in SSL/TLS/DTLS can lead to unpredictable or erroneous behavior or Denial of Service in Citrix…N/A8.7 High0%Nov 13, 2026
CVE-2026-120866: Citrix: Memory overflow / improper handling in BGP dynamic routing can lead to unpredictable or erroneous behavior or Denial of…N/A7.7 High0%Nov 13, 2026
CVE-2026-120865: Citrix: Memory overflow in HTTP/3 (QUIC) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix…N/A8.7 High0%Nov 13, 2026
CVE-2026-120864: Citrix: Memory overflow in ICA proxy can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler…N/A9.3 Critical0%Nov 13, 2026
701-725 of 422380
‹›