The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
WordPress Plugin: forminator: CVE-2026-111579: Improper Privilege Management8.1 HighN/AN/ANov 11, 2026
CVE-2026-110949: Unknown Download Manager: The Download Manager WordPress plugin before 3.3.73, Download Manager WordPress plugin before 7.6.2 does not verify a…3.7 LowN/AN/ANov 11, 2026
CVE-2026-110948: Unknown Download Manager: The Download Manager WordPress plugin before 3.3.73, Download Manager WordPress plugin before 7.6.2 does not verify…3.7 LowN/AN/ANov 11, 2026
WordPress Plugin: data-tables-generator-by-supsystic: CVE-2026-110016: Authorization Bypass Through User-Controlled Key5.3 MediumN/AN/ANov 11, 2026
CVE-2026-109873: Unknown User Registration & Membership: The User Registration & Membership WordPress plugin before 5.3.2 does not enforce its payment-before-login restriction…5.3 MediumN/AN/ANov 11, 2026
CVE-2026-109871: Unknown User Registration & Membership: The User Registration & Membership WordPress plugin before 5.3.2 does not verify that a payment has actually been…4.3 MediumN/AN/ANov 11, 2026
CVE-2026-109870: Unknown User Registration & Membership: The User Registration & Membership WordPress plugin before 5.3.2 does not verify that a discount coupon applied to a…8.1 HighN/AN/ANov 11, 2026
WordPress Plugin: code-snippets: CVE-2026-106468: Missing Authorization3.8 LowN/AN/ANov 11, 2026
WordPress Plugin: elementor: CVE-2026-104718: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6.8 MediumN/AN/ANov 11, 2026
CVE-2025-15714: Unknown Live Composer: The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its Button module settings before…3.5 LowN/AN/ANov 11, 2026
CVE-2025-15713: Unknown Live Composer: The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its page-builder module settings…3.5 LowN/AN/ANov 11, 2026
CVE-2025-15712: Unknown Live Composer: The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its staff member settings before…3.5 LowN/AN/ANov 11, 2026
CVE-2025-15711: Unknown Live Composer: The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its module settings before…3.5 LowN/AN/ANov 11, 2026
CVE-2026-97054: Undefined Security WeaknessN/AN/AN/ANov 11, 2026
CVE-2026-97043: Undefined Security WeaknessN/AN/AN/ANov 11, 2026
CVE-2026-97042: Undefined Security WeaknessN/AN/AN/ANov 11, 2026
CVE-2026-97041: Undefined Security WeaknessN/AN/AN/ANov 11, 2026
CVE-2026-97040: Undefined Security WeaknessN/AN/AN/ANov 11, 2026
CVE-2026-97039: Undefined Security WeaknessN/AN/AN/ANov 11, 2026
CVE-2026-97038: Undefined Security WeaknessN/AN/AN/ANov 11, 2026
CVE-2026-97037: Undefined Security WeaknessN/AN/AN/ANov 11, 2026
CVE-2026-97036: Undefined Security WeaknessN/AN/AN/ANov 11, 2026
CVE-2026-97035: Undefined Security WeaknessN/AN/AN/ANov 11, 2026
CVE-2026-97034: Undefined Security WeaknessN/AN/AN/ANov 11, 2026
CVE-2026-97033: Undefined Security WeaknessN/AN/AN/ANov 11, 2026
1076-1100 of 425740