The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2013-20008: Linksys WAG200G: Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the…6.8 Medium7.0 High0%Oct 28, 2026
CVE-2013-20007: Linksys WAG200G: Linksys WAG200G through 1.01.06 contains an OS command injection vulnerability that allows authenticated attackers to…7.2 High8.6 High2%Oct 28, 2026
CVE-2026-107745: tigroumeow: The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to limited media file…4.2 MediumN/A0%Oct 28, 2026
CVE-2026-109209: plugins360: The All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos plugin for WordPress is…6.4 MediumN/A0%Oct 28, 2026
CVE-2026-111314: cservit affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display: The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to Stored…7.2 HighN/A0%Oct 28, 2026
CVE-2026-97019: mohammed_kaludi AMP for WP – Accelerated Mobile Pages: The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…7.2 HighN/A0%Oct 28, 2026
CVE-2026-109974: plugins360: The All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos plugin for WordPress is…6.4 MediumN/A0%Oct 28, 2026
CVE-2026-84999: Pie Register Pie Register Premium: The Pie Register Premium plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and…9.8 CriticalN/A0%Oct 28, 2026
CVE-2026-118272: a2ui-project a2ui: A vulnerability was detected in a2ui-project a2ui up to 0.10.64.3 Medium2.1 Low0%Oct 28, 2026
CVE-2026-118271: a2ui-project a2ui: A security vulnerability has been detected in a2ui-project a2ui up to 0.10.64.3 Medium2.1 Low0%Oct 28, 2026
CVE-2026-106013: artbees Jupiter X Core: The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X Social Login handler…9.8 CriticalN/A1%Oct 28, 2026
CVE-2026-110879: FasterXML jackson-databind: jackson-databind validates the outer class of a class-name type ID but accepts attacker-selected classes inside its…9.8 CriticalN/A1%Oct 28, 2026
CVE-2026-110747: FasterXML jackson-dataformat-protobuf: ProtobufParser._readStringKey() reads the length prefix of a protobuf map entry's string key into an…7.5 HighN/A0%Oct 28, 2026
CVE-2026-118129: jeremyckahn Chitchatter: A vulnerability was found in jeremyckahn Chitchatter up to f82538633813c854a81a8b2112a2f6ba17b39cbc6.3 Medium2.1 Low0%Oct 28, 2026
CVE-2026-104895: FasterXML jackson-dataformat-smile: The asynchronous Smile parser (NonBlockingByteArrayParser) uses a raw-binary length prefix taken from untrusted input…7.5 HighN/A0%Oct 28, 2026
CVE-2026-104016: FasterXML jackson-dataformat-protobuf: ProtobufParser parses length-prefixed protobuf string and bytes fields by checking (_inputPtr + len) <= _inputEnd and…7.5 HighN/A1%Oct 28, 2026
CVE-2026-106971: n/a: An integer overflow in the MessagePack\BufferUnpacker component of rybakit/msgpack versions prior to 0.11.0 allows…N/AN/AN/AOct 28, 2026
CVE-2026-106972: n/a: Uncontrolled recursion in MessagePack\BufferUnpacker::unpack() in rybakit/msgpack versions prior to 0.11.0 allows…N/AN/AN/AOct 28, 2026
CVE-2026-59158: thoda-dev nuxt-ollama: Nuxt Ollama integrates the official Ollama JavaScript library into Nuxt applications7.5 HighN/A1%Oct 27, 2026
CVE-2026-58496: thorvg: Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine4.3 MediumN/A0%Oct 27, 2026
CVE-2026-58257: JeromeDevome GRR: GRR is a resource management and reservation application7.2 HighN/A0%Oct 27, 2026
CVE-2026-58256: JeromeDevome GRR: GRR is a resource management and reservation application9.1 CriticalN/A1%Oct 27, 2026
CVE-2026-58255: jhuckaby Cronicle: Cronicle is a multi-server task scheduler and runner, with a web based front-end UI8.8 HighN/A0%Oct 27, 2026
CVE-2026-58205: JeromeDevome GRR: GRR is a resource management and reservation application8.1 HighN/A0%Oct 27, 2026
CVE-2026-50571: w3c websub: WebSub is a W3C recommendation produced by the Social Web Working Group5.7 MediumN/A0%Oct 27, 2026
1226-1250 of 538495
‹

Refine your search or filters to see more results.