Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-116559: Unknown A2Reviews: The A2Reviews WordPress plugin through 1.2.3 does not properly verify authorization on several of its API command…N/AN/A0%Nov 15, 2026
CVE-2026-114452: Unknown Membership Plugin: The Membership Plugin WordPress plugin before 4.0.6 does not verify that the membership referenced in a saved-card…N/AN/A0%Nov 15, 2026
CVE-2026-114451: Unknown Membership Plugin: The Membership Plugin WordPress plugin before 4.0.6 does not perform any authorization or CSRF check before running a…N/AN/A0%Nov 15, 2026
CVE-2026-110989: Unknown RegistrationMagic: The RegistrationMagic WordPress plugin before 6.1.0.4 does not verify ownership of the submitted email address before…N/AN/A0%Nov 15, 2026
CVE-2026-110987: Unknown RegistrationMagic: The RegistrationMagic WordPress plugin before 6.1.0.4 does not properly escape a user-supplied value before printing it…N/AN/A0%Nov 15, 2026
CVE-2026-110984: Unknown RegistrationMagic: The RegistrationMagic WordPress plugin before 6.1.0.4 does not sanitise and escape a parameter before using it in a SQL…N/AN/A0%Nov 15, 2026
CVE-2026-110960: Unknown Auth Armor: The Auth Armor WordPress plugin through 1.0.3 does not require authentication on several handlers available to…N/AN/A0%Nov 15, 2026
CVE-2026-103361: Unknown Payment Gateway via Valitor for WooCommerce: The Payment Gateway via Valitor for WooCommerce WordPress plugin before 1.9.41 does not properly validate the…N/AN/A0%Nov 15, 2026
CVE-2026-129358: Linux Foundation Magma: A vulnerability was identified in Linux Foundation Magma up to 1.9.02.4 Low1.9 Low0%Nov 15, 2026
CVE-2026-129357: Linux Foundation Magma: A vulnerability was determined in Linux Foundation Magma up to 1.9.06.3 Medium2.1 Low0%Nov 15, 2026
CVE-2026-129360: Linux Foundation Magma: A weakness has been identified in Linux Foundation Magma up to 1.9.07.3 High6.9 Medium0%Nov 15, 2026
CVE-2026-129359: Linux Foundation Magma: A security flaw has been discovered in Linux Foundation Magma up to 1.9.07.3 High5.5 Medium0%Nov 15, 2026
CVE-2026-129466: izhaorui Zr.Admin.NET: Zr.Admin.NET commit 1845017 through commit eb9228a contains a missing authorization vulnerability in…4.3 Medium5.3 Medium0%Nov 15, 2026
CVE-2026-129465: izhaorui Zr.Admin.NET: Zr.Admin.NET commit af07ffc through commit eb9228a contains an insecure direct object reference vulnerability in…8.8 High8.7 High0%Nov 15, 2026
CVE-2026-129464: izhaorui Zr.Admin.NET: Zr.Admin.NET commit 0ee1ab8 through commit eb9228a contains a path traversal vulnerability that allows any logged-in…8.8 High8.7 High0%Nov 15, 2026
CVE-2026-129455: izhaorui Zr.Admin.NET: Zr.Admin.NET commit e6ceaf4 through commit eb9228a contains an insecure direct object reference vulnerability in…5.4 Medium5.3 Medium0%Nov 15, 2026
CVE-2026-129454: izhaorui Zr.Admin.NET: Zr.Admin.NET commit 85cff6a through commit eb9228a contains an insecure direct object reference vulnerability in GET…6.5 Medium7.1 High0%Nov 15, 2026
CVE-2026-129356: vllm-project vllm: A vulnerability was found in vllm-project vllm 0.30.0/0.31.05.0 Medium1.3 Low0%Nov 15, 2026
CVE-2026-129355: sigoden dufs: A vulnerability has been found in sigoden dufs up to 0.46.06.5 Medium6.9 Medium1%Nov 15, 2026
CVE-2026-129354: D-Link DIR-600L: A flaw has been found in D-Link DIR-600L 2.17b0210.0 Critical9.3 Critical1%Nov 15, 2026
CVE-2026-129353: D-Link DIR-600L: A vulnerability was detected in D-Link DIR-600L 2.17/2.17b0210.0 Critical9.3 Critical2%Nov 15, 2026
CVE-2026-129352: TRENDnet TEW-657BRM: A vulnerability was detected in TRENDnet TEW-657BRM 1.00.19.1 Critical8.5 High1%Nov 14, 2026
CVE-2026-129351: TRENDnet TEW-657BRM: A security vulnerability has been detected in TRENDnet TEW-657BRM 1.00.110.0 Critical9.3 Critical1%Nov 14, 2026
CVE-2026-129456: frrouting: In FRRouting, bgpd accepts a Tunnel Encapsulation attribute (type 23) whose outer TLV length does not match the length…N/A7.7 High0%Nov 14, 2026
CVE-2015-10149: Improper Validation of Syntactic Correctness of InputN/AN/A0%Nov 14, 2026
51-75 of 426686