Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.532 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 210 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Displaying 1 - 25 results out of 17.532

Pentest-Tools.com Vulnerabilities
Name	Detectable with	Detection added	CVSSv3	EPSS Score	EPSS Percentile	Exploitable with Sniper
Red Hat JBoss - Web/JMX Console Access CVE-2010-1428	Network Scanner	Oct 25, 2026	High(7.5)	0.53	0.99	No
Node2Shell - Brotli Decoder Remote Code Execution CVE-2026-111497	Network Scanner	Oct 25, 2026	Critical(9.2)	0.33	0.99	No
Concrete CMS - User Enumeration CVE-2026-18110	Network Scanner	Oct 24, 2026	High(7.5)	0.02	0.76	No
Issabel Framework - Hard-Coded PBX API JWT Key CVE-2026-89026	Network Scanner	Oct 24, 2026	Critical(9.3)	0.03	0.86	No
Theme My Login <= 7.2.1 - Privilege Escalation CVE-2026-89079	Network Scanner	Oct 24, 2026	Critical(9.8)	0.02	0.77	No
WordPress Link Library < 7.9.4 - Cross-Site Scripting CVE-2026-16535	Network Scanner	Oct 24, 2026	Medium(6.1)	0.01	0.44	No
Quotes llama <= 3.1.5 - SQL Injection CVE-2026-56062	Network Scanner	Oct 24, 2026	Critical(9.3)	0.02	0.73	No
Ultimate Addons for Contact Form 7 <= 3.5.50 - Arbitrary File Upload CVE-2026-82901	Network Scanner	Oct 24, 2026	High(8.1)	0.05	0.92	No
Product Input Fields for WooCommerce < 2.0.2 - Arbitrary File Upload to RCE CVE-2026-19089	Network Scanner	Oct 23, 2026	Critical(9.8)	0.04	0.89	No
jotty.page < 1.22.0 - Path Traversal CVE-2026-42564	Network Scanner	Oct 23, 2026	High(8.2)	0.02	0.67	No
Cisco Identity Services Engine - ise-kong API Gateway Authentication Bypass CVE-2026-76460	Network Scanner	Oct 23, 2026	Critical(10)	0.76	1	No
REDCap >= 13.3.0 - Unauthenticated Remote Code Execution via Survey Passthru CVE-2026-90817	Network Scanner	Oct 23, 2026	Critical(9.8)	0.04	0.9	No
SEBLOD for Joomla < 3.30.0/< 4.7.0/< 6.0.1 - Path Traversal CVE-2026-66914	Network Scanner	Oct 23, 2026	Critical(9.2)	0.02	0.75	No
Loom for AWS < 1.6.1 - Unauthenticated Super-Admin Access CVE-2026-103956	Network Scanner	Oct 22, 2026	Critical(10)	0.03	0.85	No
Stirling PDF <= 2.13.1 - H2 Database Import Remote Code Execution CVE-2026-85714	Network Scanner	Oct 22, 2026	Critical(9.1)	0.04	0.89	No
vLLM 0.8.3 - 0.14.0 - Information Disclosure CVE-2026-22778	Network Scanner	Oct 22, 2026	Critical(9.8)	0.19	0.98	No
WordPress OttoKit Plugin <= 1.1.40 - Unauthenticated Privilege Escalation via connection-denied Token CVE-2026-110372	Network Scanner	Oct 22, 2026	Critical(9.8)	0.02	0.72	No
Piotnet Forms Pro <= 2.1.40 - Unauthenticated Arbitrary File Upload RCE CVE-2026-4883	Network Scanner	Oct 22, 2026	Critical(9.8)	0.04	0.88	No
rustypaste < 0.18.1 - Filename Header Path Traversal CVE-2026-90774	Network Scanner	Oct 22, 2026	High(7.5)	0.02	0.72	No
WordPress Database for Contact Form 7, WPforms, Elementor forms < 1.5.3 - Cross-Site Scripting CVE-2026-14870	Network Scanner	Oct 22, 2026	High(7.1)	0.01	0.41	No
WordPress Broken Link Checker < 2.4.12 - Remote Code Execution CVE-2026-18937	Network Scanner	Oct 22, 2026	Critical(9)	0.02	0.81	No
Premium Packages – Sell Digital Products Securely - SQL Injection CVE-2026-12800	Network Scanner	Oct 22, 2026	High(7.5)	0.02	0.76	No
eMudhra - Compromised Intermediate CA Certificate	Network Scanner	Oct 22, 2026	Critical	N/A	N/A	No
Bricksforge WordPress Plugin <=3.1.8.9 - Unauthenticated Arbitrary File Upload CVE-2026-85097	Network Scanner	Oct 22, 2026	Critical(9.8)	0.04	0.89	No
PHP2Shell - Remote Code Execution (CVE-2026-109618 & CVE-2026-109619) CVE-2026-109618	Network Scanner	Oct 21, 2026	Critical(9.2)	1	1	No

Vulnerability & Exploit Database

One of EMEA's fastest-growing tech companies

Independently audited company-wide ISMS

50,000+ security folks are here. Are you?

Security leaders trust what they can prove