The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-119620: 37954679 cak-filemanagement-system: A vulnerability was determined in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a0492977.3 High5.5 MediumN/AOct 30, 2026
CVE-2026-119619: 37954679 cak-filemanagement-system: A vulnerability was found in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a0492977.3 High5.5 MediumN/AOct 30, 2026
CVE-2026-119176: codepeople CP Multi View Events Calendar: The CP Multi View Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Subject'…6.4 MediumN/AN/AOct 30, 2026
CVE-2026-119113: paoltaia GeoDirectory – WP Business Directory Plugin and Classified Listings Directory: The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to…6.4 MediumN/AN/AOct 30, 2026
CVE-2026-119086: FreeRTOS FreeRTOS-Kernel: Missing queue-set type validation in the queue-set selection system call in FreeRTOS-Kernel before V11.3.3 on…6.5 Medium8.2 HighN/AOct 30, 2026
CVE-2026-118697: JetBrains: In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the jetbrainsd daemon…9.0 CriticalN/AN/AOct 30, 2026
CVE-2026-118696: JetBrains: In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and…8.0 HighN/AN/AOct 30, 2026
CVE-2026-118635: paoltaia GeoDirectory – WP Business Directory Plugin and Classified Listings Directory: The The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is…6.5 MediumN/AN/AOct 30, 2026
CVE-2026-118205: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets: The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to…7.4 HighN/AN/AOct 30, 2026
CVE-2026-116552: likebtn Like Button Rating ♥ LikeBtn: The Like Button Rating ♥ LikeBtn plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…4.7 MediumN/AN/AOct 30, 2026
CVE-2026-115869: themifyme Themify Builder: The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'variations' repeater…6.4 MediumN/AN/AOct 30, 2026
CVE-2026-115820: ahmadmj Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin: The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to…6.5 MediumN/AN/AOct 30, 2026
CVE-2026-115346: ThemeFusion Avada | Website Builder For WordPress & WooCommerce: The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Arbitrary File Upload in…8.1 HighN/AN/AOct 30, 2026
CVE-2026-112365: wpdevteam: The easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution plugin for WordPress is…7.2 HighN/AN/AOct 30, 2026
CVE-2026-110533: foliovision FV Flowplayer Video Player: The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…6.4 MediumN/AN/AOct 30, 2026
CVE-2026-110305: hwk-fr Advanced Custom Fields: Extended: The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Sensitive Information Exposure in all…7.5 HighN/AN/AOct 30, 2026
CVE-2026-110001: foliovision FV Flowplayer Video Player: The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment…5.4 MediumN/AN/AOct 30, 2026
CVE-2026-109984: foliovision FV Flowplayer Video Player: The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment'…5.4 MediumN/AN/AOct 30, 2026
CVE-2026-109592: wordpressdotorg: The OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPress is vulnerable to…4.3 MediumN/AN/AOct 30, 2026
CVE-2026-107630: saadiqbal Email Templates Customizer and Designer for WordPress and WooCommerce: The Email Templates Customizer and Designer for WordPress and WooCommerce plugin for WordPress is vulnerable to…7.5 HighN/AN/AOct 30, 2026
CVE-2026-105894: akbilisim Ak Framework: The Ak Framework plugin for WordPress, included in the Newsy - Viral News & Magazine WordPress Theme, is vulnerable to…8.8 HighN/AN/AOct 30, 2026
CVE-2026-104744: Independent Analytics Independent Analytics Pro: The Independent Analytics Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'utm_campaign'…7.2 HighN/AN/AOct 30, 2026
CVE-2026-104739: rabilal JS Help Desk – AI-Powered Support & Ticketing System: The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion…4.9 MediumN/AN/AOct 30, 2026
CVE-2026-102918: davidanderson Redux Framework: The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and…6.4 MediumN/AN/AOct 30, 2026
CVE-2026-102905: spacetime Ad Inserter – Ad Manager & AdSense Ads: The The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to arbitrary shortcode execution in…6.5 MediumN/AN/AOct 30, 2026
201-225 of 418318