diff --git a/README.md b/README.md
index 47d9ad4646d..4b74d8d9488 100644
--- a/README.md
+++ b/README.md
@@ -1,8 +1,8 @@
-

+

-[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)
+[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)

diff --git a/cves/2026/CVE-2026-15015.md b/cves/2026/CVE-2026-15015.md
new file mode 100644
index 00000000000..036f06cf5ab
--- /dev/null
+++ b/cves/2026/CVE-2026-15015.md
@@ -0,0 +1,21 @@
+### [CVE-2026-15015](https://www.cve.org/CVERecord?id=CVE-2026-15015)
+**MountDev AI MCP Connector for WordPress <= 1.6.1 - Unauthenticated Privilege Escalation via OAuth Authorization Endpoint**
+
+
+
+
+
+### Description
+
+The MountDev AI MCP Connector for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.6.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to obtain an administrator-bound OAuth Bearer token via a self-registered client, granting full administrator-equivalent access to the plugin's MCP tool surface and all exposed WordPress content, users, and options. This is exploitable by combining the publicly accessible Dynamic Client Registration endpoint, which allows unauthenticated callers to register arbitrary OAuth clients with an attacker-controlled redirect_uri, with the unprotected authorization endpoint to complete the full OAuth flow without any administrator interaction.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-15015.yaml
diff --git a/cves/2026/CVE-2026-18315.md b/cves/2026/CVE-2026-18315.md
index 04b712c1ccf..8093cdcd1d2 100644
--- a/cves/2026/CVE-2026-18315.md
+++ b/cves/2026/CVE-2026-18315.md
@@ -16,3 +16,6 @@ No PoCs from references.
#### Github
- https://github.com/nastar-id/CVE-2026-18315-PoC
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-18315.yaml
diff --git a/cves/2026/CVE-2026-49772.md b/cves/2026/CVE-2026-49772.md
index 2b5377da714..d6da91f96cd 100644
--- a/cves/2026/CVE-2026-49772.md
+++ b/cves/2026/CVE-2026-49772.md
@@ -18,3 +18,6 @@ No PoCs from references.
#### Github
- https://github.com/joshuavanderpoll/CVE-2026-49772
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-49772.yaml
diff --git a/cves/2026/CVE-2026-52715.md b/cves/2026/CVE-2026-52715.md
index 3d5c050b700..dea3e06f5cb 100644
--- a/cves/2026/CVE-2026-52715.md
+++ b/cves/2026/CVE-2026-52715.md
@@ -16,3 +16,6 @@ No PoCs from references.
#### Github
- https://github.com/686f6c61/POC-GeoLeak-CVE-2026-52715
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-52715.yaml
diff --git a/cves/2026/CVE-2026-56070.md b/cves/2026/CVE-2026-56070.md
new file mode 100644
index 00000000000..8f175e670d3
--- /dev/null
+++ b/cves/2026/CVE-2026-56070.md
@@ -0,0 +1,21 @@
+### [CVE-2026-56070](https://www.cve.org/CVERecord?id=CVE-2026-56070)
+**WordPress Advance Product Search plugin <= 1.4.4 - SQL Injection vulnerability**
+
+
+
+
+
+### Description
+
+Unauthenticated SQL Injection in Advance Product Search <= 1.4.4 versions.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-56070.yaml
diff --git a/cves/2026/CVE-2026-6279.md b/cves/2026/CVE-2026-6279.md
index 41e27b03c19..f2ea27350c8 100644
--- a/cves/2026/CVE-2026-6279.md
+++ b/cves/2026/CVE-2026-6279.md
@@ -22,4 +22,4 @@ No PoCs from references.
- https://github.com/katranSefa/CVE-2026-6279
#### Nuclei
-- https://github.com/topscoder/nuclei-wordfence-cve/blob/main/nuclei-templates/2026/CVE-2026-6279-fusion_builder-5dc72d78-d47c-4b36-8d69-8672e15ddf8c.yaml
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-6279.yaml
diff --git a/cves/2026/CVE-2026-6495.md b/cves/2026/CVE-2026-6495.md
index b949ee3f216..45eb8c5e304 100644
--- a/cves/2026/CVE-2026-6495.md
+++ b/cves/2026/CVE-2026-6495.md
@@ -15,3 +15,6 @@ The Ajax Load More WordPress plugin before 7.8.4 does not sanitise and escape a
#### Github
No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-6495.yaml
diff --git a/cves/2026/CVE-2026-72867.md b/cves/2026/CVE-2026-72867.md
index 29173f7e299..f4fa3d6ae5a 100644
--- a/cves/2026/CVE-2026-72867.md
+++ b/cves/2026/CVE-2026-72867.md
@@ -18,3 +18,6 @@ No PoCs from references.
#### Github
- https://github.com/Lulztigre/CVE-2026-72867
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-72867.yaml
diff --git a/cves/2026/CVE-2026-82186.md b/cves/2026/CVE-2026-82186.md
index c0043d7cd86..573997a76a8 100644
--- a/cves/2026/CVE-2026-82186.md
+++ b/cves/2026/CVE-2026-82186.md
@@ -15,3 +15,6 @@ The WPLP Cookie Consent WordPress plugin before 4.4.2 does not properly validat
#### Github
No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-82186.yaml
diff --git a/cves/2026/CVE-2026-94169.md b/cves/2026/CVE-2026-94169.md
new file mode 100644
index 00000000000..157c17d921b
--- /dev/null
+++ b/cves/2026/CVE-2026-94169.md
@@ -0,0 +1,21 @@
+### [CVE-2026-94169](https://www.cve.org/CVERecord?id=CVE-2026-94169)
+**WordPress The Grid plugin <= 2.8.1 - Remote Code Execution (RCE) vulnerability**
+
+
+
+
+
+### Description
+
+Improper Control of Generation of Code ('Code Injection') vulnerability in Theme-one The Grid the-grid allows Command Injection.This issue affects The Grid: from n/a through 2.8.1.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-94169.yaml
diff --git a/docs/hero.svg b/docs/hero.svg
index 6486ff5e39e..784ae9dbba1 100644
--- a/docs/hero.svg
+++ b/docs/hero.svg
@@ -1,5 +1,5 @@