Investigate real vulnerabilities with AI guidance. Every major CVE is MITRE-tagged, CVSS-scored, and paired with an Evidence Mode investigation — so you understand the threat, not just the patch number.
Unauthenticated PHP Object Injection in WordPress Plugins
Reflected XSS in OceanWP Theme Affects WordPress Sites
WordPress 2FA Plugins Fail to Bind Authentication Codes to Accounts
WordPress LogixFast Auth Plugin Email Verification Bypass
WordPress Plugin Path Traversal Enables Arbitrary File Access
IIOP EJB Authentication Bypass via Unverified Identity Assertions
WordPress Plugin Arbitrary File Upload to RCE
WordPress Contact Form Plugin Template Injection Flaw
Node Version Manager Command Injection via sed Address Escape
WildFly IIOP Pre-Authentication Deserialization Bypass
WordPress Events Plugin Stored XSS via Unauthenticated Submissions
Unauthenticated SQL Injection in vTables WordPress Plugin
WordPress Mapster Plugin Unauthenticated Stored XSS
Shared Token Breaks Access Control in PDF Conversion Service
Missing Authorization in WooCommerce Dropshipping Plugin
WordPress GEO Plugin Access Control Misconfiguration
ZIP-Based SSRF Bypass in HTML-to-PDF Conversion Service
Hardcoded Credentials Exposed in Foxit Website JavaScript
LearnPress Access Control Misconfiguration Enables Unauthorized Access
Reflected XSS in TableOn WordPress Plugin Filterable Posts
WooCommerce Upload Plugin Allows Unauthenticated PHP File Execution
WooCommerce Menu Cart Plugin Stored XSS in Variation Data
Reflected XSS in Persian WooCommerce SMS Plugin
WordPress Eventpress Plugin Privilege Escalation via Parameter Validation
GoSMTP Plugin Authorization Bypass Enables Admin Takeover
WooCommerce Lumise Plugin Directory Traversal Flaw
WordPress Contact Manager Plugin Arbitrary File Upload
WordPress IvyForms Plugin Arbitrary File Upload Flaw
WordPress MxChat Plugin Stored DOM XSS via Feedback Parameter
WordPress Slider Plugin Stored XSS via Unescaped Comments
Casky's multi-agent pipeline uses CVE context to generate a structured investigation plan before a single skill runs. Run your first investigation free — no simulation, your actual security work.
Start investigating CVEs free →© 2026 Casky.AI, Inc. · AI Security Investigation