The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-110016: Unknown Data Tables Generator by Supsystic: The Data Tables Generator by Supsystic WordPress plugin before 1.15.8 does not perform any authorization or ownership…N/AN/AN/ANov 11, 2026
CVE-2026-109873: Unknown User Registration & Membership: The User Registration & Membership WordPress plugin before 5.3.2 does not enforce its payment-before-login restriction…N/AN/AN/ANov 11, 2026
CVE-2026-109871: Unknown User Registration & Membership: The User Registration & Membership WordPress plugin before 5.3.2 does not verify that a payment has actually been…N/AN/AN/ANov 11, 2026
CVE-2026-109870: Unknown User Registration & Membership: The User Registration & Membership WordPress plugin before 5.3.2 does not verify that a discount coupon applied to a…N/AN/AN/ANov 11, 2026
CVE-2026-106468: Unknown Code Snippets: The Code Snippets WordPress plugin before 4.1.0 does not verify network-level capabilities before honouring a…N/AN/AN/ANov 11, 2026
CVE-2026-104718: Unknown Elementor Website Builder: The Elementor Website Builder WordPress plugin before 4.3.6 does not validate or escape an element identifier before…N/AN/AN/ANov 11, 2026
CVE-2025-15714: Unknown Live Composer: The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its Button module settings before…N/AN/AN/ANov 11, 2026
CVE-2025-15713: Unknown Live Composer: The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its page-builder module settings…N/AN/AN/ANov 11, 2026
CVE-2025-15712: Unknown Live Composer: The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its staff member settings before…N/AN/AN/ANov 11, 2026
CVE-2025-15711: Unknown Live Composer: The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its module settings before…N/AN/AN/ANov 11, 2026
CVE-2026-88813: Unknown YITH WooCommerce Gift Cards: The YITH WooCommerce Gift Cards WordPress plugin through 4.39.0 does not reconcile the value of a gift card it issues…N/AN/AN/ANov 11, 2026
CVE-2026-123705: Unknown Security For WooCommerce: The Security For WooCommerce WordPress plugin through 1.0.16 does not restrict access to one of its REST API routes,…N/AN/AN/ANov 11, 2026
CVE-2026-123704: Unknown Security For WooCommerce: The Security For WooCommerce WordPress plugin through 1.0.16 does not restrict access to one of its REST API routes,…N/AN/AN/ANov 11, 2026
CVE-2026-123703: Unknown Security For WooCommerce: The Security For WooCommerce WordPress plugin through 1.0.16 does not check that the requester is authorised before…N/AN/AN/ANov 11, 2026
CVE-2026-123702: Unknown Security For WooCommerce: The Security For WooCommerce WordPress plugin through 1.0.16 does not check that the requester is authorised before…N/AN/AN/ANov 11, 2026
CVE-2026-123701: Unknown Security For WooCommerce: The Security For WooCommerce WordPress plugin through 1.0.16 does not have proper authorization checks when resetting…N/AN/AN/ANov 11, 2026
CVE-2026-123700: Unknown Security For WooCommerce: The Security For WooCommerce WordPress plugin through 1.0.16 does not check that the requester is authorised before…N/AN/AN/ANov 11, 2026
CVE-2026-123699: Unknown Security For WooCommerce: The Security For WooCommerce WordPress plugin through 1.0.16 does not check that the requester is authorised before…N/AN/AN/ANov 11, 2026
CVE-2026-123698: Unknown Security For WooCommerce: The Security For WooCommerce WordPress plugin through 1.0.16 does not restrict access to one of its REST API routes,…N/AN/AN/ANov 11, 2026
CVE-2026-123697: Unknown Security For WooCommerce: The Security For WooCommerce WordPress plugin through 1.0.16 does not restrict who can request a user's current…N/AN/AN/ANov 11, 2026
CVE-2026-123696: Unknown Security For WooCommerce: The Security For WooCommerce WordPress plugin through 1.0.16 does not check that the requester is authorised before…N/AN/AN/ANov 11, 2026
CVE-2026-123695: Unknown Security For WooCommerce: The Security For WooCommerce WordPress plugin through 1.0.16 does not restrict access to several of its REST API…N/AN/AN/ANov 11, 2026
CVE-2026-123667: Unknown Photo Engine (Media Organizer & Lightroom): The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.6.2 does not sanitise and escape keyword names…N/AN/AN/ANov 11, 2026
CVE-2026-123666: Unknown Photo Engine (Media Organizer & Lightroom): The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.6.2 does not check that a user may delete the…N/AN/AN/ANov 11, 2026
CVE-2026-123661: Unknown ProfilePress: The ProfilePress WordPress plugin before 4.17.4 does not check that a membership plan is still active when checkout is…N/AN/AN/ANov 11, 2026
76-100 of 511254