The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-118168: Unknown MapPress: The MapPress WordPress plugin before 2.97.15 does not restrict which user's data its front-end map embed handler…N/AN/AN/ANov 1, 2026
CVE-2026-113482: Unknown Media Library Assistant: The Media Library Assistant WordPress plugin before 3.44 does not escape one of its shortcode attributes before…N/AN/AN/ANov 1, 2026
CVE-2026-113481: Unknown Media Library Assistant: The Media Library Assistant WordPress plugin before 3.44 does not check that the requesting user is allowed to view a…N/AN/AN/ANov 1, 2026
CVE-2026-107343: Unknown Kali Forms — Contact Form & Drag-and-Drop Builder: The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.30 does not perform a capability…N/AN/AN/ANov 1, 2026
CVE-2026-107342: Unknown Kali Forms — Contact Form & Drag-and-Drop Builder: The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.30 does not perform a capability…N/AN/AN/ANov 1, 2026
CVE-2026-120197: WAVLINK WL-WN530HG4B: A flaw has been found in WAVLINK WL-WN530HG4B M_V2607249.9 Critical8.6 HighN/ANov 1, 2026
CVE-2026-120196: WAVLINK WN579X3-D: A vulnerability was detected in WAVLINK WN579X3-D V2504029.9 Critical8.6 HighN/ANov 1, 2026
CVE-2026-120195: WAVLINK WL-WN579A3-A: A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d410.0 Critical9.3 CriticalN/ANov 1, 2026
CVE-2026-120198: WAVLINK WL-WN530BE1-A: A vulnerability has been found in WAVLINK WL-WN530BE1-A V25111710.0 Critical10.0 CriticalN/ANov 1, 2026
CVE-2026-120192: n/a Presenton: A security vulnerability has been detected in Presenton up to 0.9.11-beta5.3 Medium5.5 MediumN/ANov 1, 2026
CVE-2026-120252: cgohlke imagecodecs: imagecodecs 2023.1.23 through 2026.10.10 contains a stack-based buffer overflow vulnerability in the lossless JPEG…5.5 Medium6.8 MediumN/ANov 1, 2026
CVE-2026-120251: cgohlke imagecodecs: imagecodecs 2026.3.6 through 2026.10.10 contains an infinite loop vulnerability in ccitt_fax4_decode_size() that allows…5.5 Medium6.8 MediumN/ANov 1, 2026
CVE-2026-120250: marketcalls OpenAlgo: OpenAlgo 1.0.0.29 before 2.0.3.1 contains an improper certificate validation vulnerability in utils/email_utils.py and…5.3 Medium6.0 MediumN/ANov 1, 2026
CVE-2026-120249: Thelia Thelia Back-office Default Twig Template: Thelia Back-office Default Twig Template before 1.1.1 contains a cross-site request forgery vulnerability in the…6.5 Medium6.9 MediumN/ANov 1, 2026
CVE-2026-120248: Thelia: Thelia before 3.1.1 contains a stored cross-site scripting vulnerability that allows authenticated back-office…4.8 Medium4.6 MediumN/ANov 1, 2026
CVE-2026-120247: FFmpeg: FFmpeg 2.3 through 9.0.2 contains a use of uninitialized resource vulnerability in the Huffyuv decoder that allows…5.5 Medium6.8 MediumN/ANov 1, 2026
CVE-2026-120246: FFmpeg: FFmpeg 4.4 through 9.0.2 contains a use of uninitialized variable vulnerability in the CDXL decoder that leaks stack…5.5 Medium6.8 MediumN/ANov 1, 2026
CVE-2026-120245: FFmpeg: FFmpeg 0.10 through 9.0.2 contains a use of uninitialized resource vulnerability in sunrast_decode_frame() that leaks…5.5 Medium6.8 MediumN/ANov 1, 2026
CVE-2026-120244: FFmpeg: FFmpeg 2.1 through 9.0.2 contains a use of uninitialized resource vulnerability in the PCX decoder that allows…5.5 Medium6.8 MediumN/ANov 1, 2026
CVE-2026-120243: FFmpeg: FFmpeg 2.0 through 9.0.2 contains a use of uninitialized variable vulnerability in the Go2Meeting decoder that allows…5.5 Medium6.8 MediumN/ANov 1, 2026
CVE-2026-120191: n/a Presenton: A weakness has been identified in Presenton up to 0.9.11-beta7.3 High5.5 MediumN/ANov 1, 2026
CVE-2026-120190: n/a PostyBirb Plus: A security flaw has been discovered in PostyBirb Plus up to 3.1.753.5 Low2.0 LowN/ANov 1, 2026
CVE-2026-120189: D-Link DIR-505: A vulnerability was identified in D-Link DIR-505 1.10B0210.0 Critical9.3 CriticalN/ANov 1, 2026
CVE-2026-115946: XS::libbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoderN/AN/AN/ANov 1, 2026
CVE-2026-120185: ken678 YznCMS: A security flaw has been discovered in ken678 YznCMS up to 2.2.04.7 Medium5.1 MediumN/AOct 31, 2026
1-25 of 421285
›