Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-119258: Unknown Swipe: The Swipe WordPress plugin through 1.4 does not properly authenticate a login request before issuing a WordPress…N/AN/A0%Nov 14, 2026
CVE-2026-118183: Unknown Duplicate Post: The Duplicate Post WordPress plugin before 1.5.8 does not check whether a user may publish posts when duplicating one,…N/AN/A0%Nov 14, 2026
CVE-2026-118182: Unknown Duplicate Post: The Duplicate Post WordPress plugin before 1.5.8 does not check that a user duplicating a post is allowed to edit it,…N/AN/A0%Nov 14, 2026
CVE-2026-118181: Unknown Duplicate Post: The Duplicate Post WordPress plugin before 1.5.8 does not perform a capability check when saving its global settings,…N/AN/A0%Nov 14, 2026
CVE-2026-117490: Unknown Flatsome: The Flatsome WordPress theme before 3.20.13 does not enforce the acting user's publish and post-type restrictions on an…N/AN/A0%Nov 14, 2026
CVE-2026-117487: Unknown Flatsome: The Flatsome WordPress theme before 3.20.13 does not perform a capability or nonce check on an AJAX action available to…N/AN/A0%Nov 14, 2026
CVE-2026-116528: Unknown Chargely Free Subscriptions For Woocommernce: The Chargely Free Subscriptions For Woocommernce WordPress plugin through 1.0 does not perform any authorization check…N/AN/A0%Nov 14, 2026
CVE-2026-111034: Unknown: The Countdown, Coming Soon, Maintenance WordPress plugin through 3.0.8 does not check that the user is allowed to…N/AN/A0%Nov 14, 2026
CVE-2026-111033: Unknown: The Countdown, Coming Soon, Maintenance WordPress plugin through 3.0.8 does not perform authorization or nonce checks…N/AN/A0%Nov 14, 2026
CVE-2026-105984: Unknown Email Marketing 4Dem: The Email Marketing 4Dem WordPress plugin through 2.0.5 does not perform authorization or capability checks on several…N/AN/A0%Nov 14, 2026
CVE-2026-105983: Unknown Email Marketing 4Dem: The Email Marketing 4Dem WordPress plugin through 2.0.5 does not perform authorization or capability checks on several…N/AN/A0%Nov 14, 2026
CVE-2026-126173: AutomatorWP AutomatorWP Webhooks: The AutomatorWP Pro plugin for WordPress' webhook addon is vulnerable to authorization bypass in all versions up to,…9.8 CriticalN/A1%Nov 14, 2026
CVE-2026-124969: optimole Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization: The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is…7.1 HighN/A0%Nov 14, 2026
CVE-2026-71531: PrestaShop: PrestaShop before 8.2.9 and 9.2.1 contains an authorization flaw in the Webservice API that allows an attacker holding…8.1 High8.6 High0%Nov 13, 2026
CVE-2026-71519: PrestaShop: PrestaShop before 8.2.9 and 9.2.1 contains a broken access control vulnerability that allows an authenticated…8.1 High8.6 High0%Nov 13, 2026
CVE-2026-129180: projectworlds Visitor Management System: A flaw has been found in projectworlds Visitor Management System 1.07.3 High5.5 Medium0%Nov 13, 2026
CVE-2026-129173: Stirling-Tools Stirling-PDF: A security flaw has been discovered in Stirling-Tools Stirling-PDF up to 3.3.05.3 Medium6.9 Medium0%Nov 13, 2026
CVE-2026-128134: nltk: NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research…7.8 HighN/A0%Nov 13, 2026
CVE-2026-9870: IBM Cyber Fraud: IBM Cyber Fraud 1.0.0 through 1.1.0 is vulnerable to cross-site scripting6.1 MediumN/A0%Nov 13, 2026
CVE-2026-9821: IBM Cyber Fraud: IBM Cyber Fraud 1.0.0 through 1.1.0 could allow an unauthorized user to inject data into log messages due to improper…5.3 MediumN/A0%Nov 13, 2026
CVE-2026-9661: Poste Italiane Postecert FIRMAOK!: Poste Italiane Postecert FIRMAOK! 1.6.29 on Windows contains a local privilege escalation vulnerability caused by an…7.0 High7.3 High0%Nov 13, 2026
CVE-2026-97683: IBM Cyber Fraud: IBM Cyber Fraud 1.0.0 through 1.1.0 could allow a local attacker to bypass security restrictions due to a missing or…2.5 LowN/A0%Nov 13, 2026
CVE-2026-94407: IBM ContextForge MCP Gateway: IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 is potentially vulnerable to denial of service due to uncontrolled…6.5 MediumN/A0%Nov 13, 2026
CVE-2026-91869: IBM Security QRadar EDR: IBM Security QRadar EDR 3.12 through 3.12.26 could allow a remote authenticated attacker to bypass security…8.1 HighN/A0%Nov 13, 2026
CVE-2026-91868: IBM Security QRadar EDR: IBM Security QRadar EDR 3.12 through 3.12.26 could allow a remote authenticated attacker to obtain sensitive…6.5 MediumN/A0%Nov 13, 2026
51-75 of 561732