The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-110590: klarnaplugin Klarna for WooCommerce: The Klarna for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and…7.5 HighN/AN/AOct 16, 2026
CVE-2026-109990: gijo Flying Scripts: Delay JavaScript to Improve Site Speed & Performance: The Flying Scripts: Delay JavaScript to Improve Site Speed & Performance plugin for WordPress is vulnerable to Stored…7.2 HighN/AN/AOct 16, 2026
CVE-2026-111210: A vulnerability was determined in bitcoinj up to 0.177.3 High5.5 MediumN/AOct 16, 2026
CVE-2026-111354: Authorization Bypass Through User-Controlled Key3.1 Low2.3 LowN/AOct 15, 2026
CVE-2026-111284: Cross-site Scripting (XSS)5.4 Medium5.1 MediumN/AOct 15, 2026
CVE-2026-97370: Junrar is an open source Java RAR archive library7.5 HighN/AN/AOct 15, 2026
CVE-2026-63430: ammonia is a Rust library for repairing and securing untrusted HTMLN/A6.3 MediumN/AOct 15, 2026
CVE-2026-57183: Scoold is a Q&A and a knowledge sharing platform for teams6.1 MediumN/AN/AOct 15, 2026
CVE-2026-55842: Scoold is a Q&A and a knowledge sharing platform for teams5.4 MediumN/AN/AOct 15, 2026
CVE-2026-55840: Scoold is a Q&A and a knowledge sharing platform for teams5.4 MediumN/AN/AOct 15, 2026
CVE-2026-55240: Improper Neutralization of Special Elements Used in a Template Engine9.1 CriticalN/AN/AOct 15, 2026
CVE-2026-110878: Cross-site Scripting (XSS)5.4 Medium5.1 MediumN/AOct 15, 2026
CVE-2026-106707: Cross-site Scripting (XSS)5.4 MediumN/AN/AOct 15, 2026
CVE-2026-103936: libp2p is a JavaScript implementation of the libp2p networking stack7.5 HighN/AN/AOct 15, 2026
CVE-2026-102740: UNIX Symbolic Link Following5.8 MediumN/AN/AOct 15, 2026
CVE-2026-57568: Lychee is a free, open-source photo-management toolN/A5.7 MediumN/AOct 15, 2026
CVE-2026-97666: Use of Externally-Controlled Input to Select Classes or CodeN/A6.9 MediumN/AOct 15, 2026
CVE-2026-59994: EspoCRM is an open source customer relationship management application4.3 MediumN/AN/AOct 15, 2026
CVE-2026-53575: EspoCRM is an open source customer relationship management application2.7 LowN/AN/AOct 15, 2026
CVE-2026-106153: Cross-site Scripting (XSS)5.4 MediumN/AN/AOct 15, 2026
CVE-2026-106151: Improper Neutralization of Script-Related HTML Tags5.4 MediumN/AN/AOct 15, 2026
CVE-2026-106150: Cross-site Scripting (XSS)5.4 MediumN/AN/AOct 15, 2026
CVE-2026-106149: Improper Neutralization of Script-Related HTML Tags5.4 MediumN/AN/AOct 15, 2026
CVE-2026-106163: Improper Neutralization of Script-Related HTML Tags6.5 MediumN/AN/AOct 15, 2026
CVE-2026-106162: Improper Neutralization of Script-Related HTML Tags4.7 MediumN/AN/AOct 15, 2026
1-25 of 16381
›