Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 402,131All CVEsplus 19,141 rejected
  • 324Last 24 hours3,293 in the last 7 days
  • 16,925Last 30 days1,559 of them critical
  • 1,769Known exploitedin the CISA KEV catalog

CVEs published per day

In the last 90 days, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
9 Nov 202600000019,412
8 Nov 202612400719,412
7 Nov 20260581008619,405
6 Nov 2026268001619,319
5 Nov 202600000019,303
4 Nov 20262111001419,303
3 Nov 20260016001619,289
2 Nov 202600000019,273
1 Nov 202611100319,273
31 Oct 202600000019,270
30 Oct 202661933005819,270
29 Oct 20262840580012619,212
28 Oct 20263143002019,086
27 Oct 202610000119,066
26 Oct 20260339104319,065
25 Oct 202600000019,022
24 Oct 2026496001919,022
23 Oct 20261382002319,003
22 Oct 20263923003518,980
21 Oct 20263106001918,945
20 Oct 20260110001118,926
19 Oct 20262314001918,915
18 Oct 2026384001518,896
17 Oct 202603100418,881
16 Oct 20262510001718,877
15 Oct 20266924003918,860
14 Oct 20262176002518,821
13 Oct 20260226002818,796
12 Oct 20260224102718,768
11 Oct 202600000018,741
10 Oct 20266385120016018,741
9 Oct 202674923007918,581
8 Oct 20260618002418,502
7 Oct 202621111002418,478
6 Oct 20261888240013018,454
5 Oct 202621542005918,324
4 Oct 202615100718,265
3 Oct 202603000318,258
2 Oct 20260111101318,255
1 Oct 202621922004318,242
30 Sept 2026881601015018,199
29 Sept 202600000018,049
28 Sept 202600000018,049
27 Sept 202600000018,049
26 Sept 202600000018,049
25 Sept 202601000118,049
24 Sept 202600000018,048
23 Sept 202612029005018,048
22 Sept 202602000217,998
21 Sept 202600000017,996
20 Sept 202600000017,996
19 Sept 202600000017,996
18 Sept 202601000117,996
17 Sept 202631319003517,995
16 Sept 202601000117,960
15 Sept 202600000017,959
14 Sept 202600000017,959
13 Sept 202600000017,959
12 Sept 202600000017,959
11 Sept 20262615002317,959
10 Sept 202611511002717,936
9 Sept 202600000017,909
8 Sept 2026082001017,909
7 Sept 202600000017,899
6 Sept 202600000017,899
5 Sept 202600000017,899
4 Sept 202601500617,899
3 Sept 202662021004717,893
2 Sept 202621311002617,846
1 Sept 202600000017,820
31 Aug 20267147002817,820
30 Aug 202600000017,792
29 Aug 202600000017,792
28 Aug 2026156001217,792
27 Aug 20267166002917,780
26 Aug 202600000017,751
25 Aug 202600000017,751
24 Aug 2026132911005317,751
23 Aug 202600000017,698
22 Aug 202600000017,698
21 Aug 202600000017,698
20 Aug 202619267005217,698
19 Aug 202610121002317,646
18 Aug 20261949360010417,623
17 Aug 202600000017,519
16 Aug 202600000017,519
15 Aug 202600000017,519
14 Aug 202600000017,519
13 Aug 20262058290010717,519
12 Aug 202610000117,412
11 Aug 202600000017,411

Latest CVEs

2,001 CVEs published in the last 90 days, newest first

CVEs, newest first
Title
CVE-2026-61987
WordPress WCFM – Frontend Manager for WooCommerce plugin <= 6.8.1 - Cross Site Scripting (XSS) vulnerabilityWC Lovers · WCFM – Frontend Manager for WooCommerce
Medium6.5
CVE-2026-114186
WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerabilityWPVibes · AnyWhere Elementor
Medium6.5
CVE-2026-114189
WordPress AnyWhere Elementor plugin <= 1.3.0 - SQL Injection vulnerabilityWPVibes · AnyWhere Elementor
High8.5
CVE-2026-109900
WordPress Melapress Role Editor plugin <= 1.3.0 - Privilege Escalation vulnerabilityMelapress · Melapress Role Editor
Critical9.6
CVE-2026-120858
WordPress FluentForm plugin <= 6.2.16 - Broken Access Control vulnerabilityWP ManageNinja LLC · FluentForm
Medium6.5
CVE-2026-109899
WordPress Melapress Role Editor plugin <= 1.3.0 - Broken Access Control vulnerabilityMelapress · Melapress Role Editor
High7.1
CVE-2026-114188
WordPress AnyWhere Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerabilityWPVibes · AnyWhere Elementor
Medium6.5
CVE-2026-123472
WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.3 - Cross Site Scripting (XSS) vulnerabilityeLightUp · Meta Box – WordPress Custom Fields Framework
Medium6.5
CVE-2026-119522
WordPress User Registration plugin <= 5.3.1 - Broken Access Control vulnerabilityThemeGrill · User Registration
Medium5.3
CVE-2026-123461
WordPress FOX plugin <= 1.5.6 - Broken Access Control vulnerabilityPluginUs.Net · FOX
Medium5.3
CVE-2026-120836
WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.3 - Broken Access Control vulnerabilityeLightUp · Meta Box – WordPress Custom Fields Framework
Medium6.5
CVE-2026-124258
WordPress User Registration plugin <= 5.3.1 - Broken Access Control vulnerabilityThemeGrill · User Registration
Medium5.3
CVE-2026-123860
WordPress JetFormBuilder plugin <= 3.6.8 - Content Injection vulnerabilityCrocoblock · JetFormBuilder
Medium5.3
CVE-2026-123861
WordPress JetFormBuilder – Hierarchical Select plugin <= 1.0.10 - Insecure Direct Object References (IDOR) vulnerabilityCrocoBlock · JetFormBuilder – Hierarchical Select
Medium5.3
CVE-2026-120839
WordPress WpTravelly plugin <= 2.3.8 - Local File Inclusion vulnerabilityMagepeople inc. · WpTravelly
High8.8
CVE-2026-120841
WordPress WpTravelly plugin <= 2.3.8 - Local File Inclusion vulnerabilityMagepeople inc. · WpTravelly
High8.8
CVE-2026-121777
WordPress Cool Formkit Lite plugin <= 2.7.10 - Content Injection vulnerabilityCool Plugins · Cool Formkit Lite
Medium5.3
CVE-2026-123467
WordPress Motors plugin <= 1.4.128 - Broken Access Control vulnerabilityStylemixThemes · Motors
Medium4.3
CVE-2026-122659
WordPress Fluent Booking plugin <= 2.5.0 - Broken Access Control vulnerabilityWP ManageNinja LLC · Fluent Booking
Medium5.4
CVE-2026-121579
WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Cross Site Scripting (XSS) vulnerabilityUnlimited Elements · Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
Medium6.5
CVE-2026-121575
WordPress WP User Manager plugin <= 2.10.4 - Broken Access Control vulnerabilityWP User Manager · WP User Manager
Medium5.3
CVE-2026-122660
WordPress FloristPress plugin <= 7.8.5 - Broken Access Control vulnerabilityBAKKBONE Australia · FloristPress
Medium4.3
CVE-2026-123483
WordPress JetFormBuilder plugin <= 3.6.8 - Content Injection vulnerabilityCrocoblock · JetFormBuilder
Medium5.3
CVE-2026-123183
WordPress Active Products Tables for WooCommerce plugin <= 2.1.6 - Content Injection vulnerabilityPluginUs.Net · Active Products Tables for WooCommerce
Medium5.3
CVE-2026-123474
WordPress Premium Blocks – Gutenberg Blocks for WordPress plugin <= 2.3.18 - Broken Access Control vulnerabilityLeapWorx · Premium Blocks – Gutenberg Blocks for WordPress
Medium5.3
CVE-2026-121775
WordPress CURCY plugin <= 2.2.20 - Broken Access Control vulnerabilityVillaTheme · CURCY
Medium5.3
CVE-2026-123462
WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerabilitymyCred · myCred
Medium5.3
CVE-2026-122669
WordPress Everest Forms plugin <= 3.6.3 - Cross Site Scripting (XSS) vulnerabilityEverest Forms · Everest Forms
Medium6.5
CVE-2026-122663
WordPress CURCY plugin <= 2.2.20 - Broken Access Control vulnerabilityVillaTheme · CURCY
Medium5.3
CVE-2026-121784
WordPress WpBookingly plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerabilityMagepeople inc. · WpBookingly
Medium6.5
CVE-2026-123477
WordPress JetEngine plugin <= 3.9.0.2 - Cross Site Scripting (XSS) vulnerabilityCrocoblock · JetEngine
Medium6.5
CVE-2026-119498
WordPress Simple Cloudflare Turnstile plugin <= 1.44.4 - Broken Authentication vulnerabilityRelyWP · Simple Cloudflare Turnstile
Medium5.3
CVE-2026-121765
WordPress TranslatePress plugin <= 3.3.8 - Cross Site Scripting (XSS) vulnerabilityCozmoslabs · TranslatePress
High7.1
CVE-2026-121571
WordPress Autopay dla WooCommerce plugin <= 2.3.0 - Broken Access Control vulnerabilityWP Desk · Autopay dla WooCommerce
Medium5.3
CVE-2026-119496
WordPress Media LIbrary Assistant plugin <= 3.43 - Content Injection vulnerabilityDavid Lingren · Media LIbrary Assistant
Medium5.3
CVE-2026-123470
WordPress HivePress plugin <= 1.8.1 - Broken Access Control vulnerabilityHivePress · HivePress
Medium4.3
CVE-2026-119513
WordPress JS Help Desk plugin <= 5.0.3 - Broken Access Control vulnerabilityAhmad · JS Help Desk
Medium5.3
CVE-2026-123468
WordPress Motors plugin <= 1.4.128 - Broken Access Control vulnerabilityStylemixThemes · Motors
Medium4.3
CVE-2026-120857
WordPress 2Way VideoCalls and Random Chat plugin <= 6.1.9 - Broken Access Control vulnerabilityVideoWhisper.com · 2Way VideoCalls and Random Chat
Medium5.3
CVE-2026-123148
WordPress IvyForms plugin <= 1.5.1 - Broken Access Control vulnerabilityTMS · IvyForms
Medium5.3
CVE-2026-120837
WordPress Everest Forms plugin <= 3.6.3 - Broken Access Control vulnerabilityEverest Forms · Everest Forms
Medium4.3
CVE-2026-121724
WordPress Contextual Related Posts plugin <= 4.5.3 - Broken Access Control vulnerabilityWebberZone · Contextual Related Posts
Medium4.3
CVE-2026-120364
WordPress Vidplex plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerabilityUntapwp · Vidplex
Medium6.5
CVE-2026-119523
WordPress Paid Member Subscriptions plugin <= 3.1.3 - Broken Access Control vulnerabilityCozmoslabs · Paid Member Subscriptions
Medium5.3
CVE-2026-119525
WordPress Dropshipping XML for WooCommerce plugin <= 1.7.4 - Broken Access Control vulnerabilityWP Desk · Dropshipping XML for WooCommerce
Medium4.3
CVE-2026-120365
WordPress WP Customer Area plugin <= 8.4.3 - Cross Site Scripting (XSS) vulnerabilityAguila Technologies · WP Customer Area
Medium6.5
CVE-2026-119478
WordPress MasterStudy LMS plugin <= 3.7.56 - Content Injection vulnerabilityStylemixThemes · MasterStudy LMS
Medium4.3
CVE-2026-119508
WordPress Radius Booking — Booking Calendar for Appointments &amp; Services plugin <= 1.0.20 - Broken Access Control vulnerabilityMamunur Rashid · Radius Booking — Booking Calendar for Appointments &amp; Services
Medium5.3
CVE-2026-119492
WordPress Ditty plugin <= 3.1.71 - Content Injection vulnerabilityMetaphor Creations, LLC · Ditty
Medium4.3
CVE-2026-119501
WordPress Element Pack Elementor Addons plugin <= 10.0.2 - Cross Site Scripting (XSS) vulnerabilityBdThemes · Element Pack Elementor Addons
Medium6.5