Investigate real vulnerabilities with AI guidance. Every major CVE is MITRE-tagged, CVSS-scored, and paired with an Evidence Mode investigation — so you understand the threat, not just the patch number.
WordPress Mobile Builder Plugin Privilege Escalation via REST
Prenotazioni Plugin Stored XSS via Unprotected Settings
Unauthenticated SQL Injection in Mobile Builder WordPress Plugin
Unrestricted Plugin Installation via Missing Capability Verification
Unauthenticated Arbitrary File Upload in WordPress Plugin
OpenSpug File Transfer OS Command Injection Flaw
WordPress Push Notification Plugin Unauthenticated Stored XSS
WordPress Plugin Allows Unauthenticated Content Deletion
WooCommerce Bookings Unauthenticated Memory Exhaustion DoS
Unauthenticated SQL Injection in Tcard WordPress Plugin
Unauthenticated REST Endpoint Allows Arbitrary WordPress Option Modification
Unauthenticated REST Endpoint Allows Arbitrary WordPress Option Modification
Stored XSS in Ninja Forms Click5 CRM Add-on
Stored XSS in Gravity Forms Click5 CRM Add-on
Hardcoded REST API Credentials Enable WooCommerce Payment Theft
Unauthenticated REST Endpoint Allows Arbitrary WordPress Option Modification
Unauthenticated REST Endpoint Allows Arbitrary WordPress Option Modification
WPForms Click5 CRM Add-on Stored XSS via Unauthenticated Endpoint
Contact Form 7 Click5 CRM Plugin Stored XSS Flaw
WordPress Plugin Session Validation Bypass Enables Admin Takeover
WordPress Plugin AJAX Actions Lack Authentication Checks
WordPress Crowdfundly Plugin Missing Capability Checks
Insurify Plugin Allows Unauthenticated WordPress Option Deletion
Stored XSS in WordPress Web Vitals Tracking Plugin
WordPress Plugin Fails to Validate User Authentication Codes
Unauthenticated AJAX Action Allows WordPress Option Manipulation
Unauthenticated WordPress Plugin Settings Manipulation
HootBoard Plugin Unauthenticated Stored XSS via REST Endpoints
Authenticated Users Inject Stored XSS via Plugin Configuration
BuddyPress Chat Plugin Allows Stored XSS via Message Injection
Casky's multi-agent pipeline uses CVE context to generate a structured investigation plan before a single skill runs. Run your first investigation free — no simulation, your actual security work.
Start investigating CVEs free →© 2026 Casky.AI, Inc. · AI Security Investigation