Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 406,238All CVEsplus 19,170 rejected
- 657Last 24 hours5,130 in the last 7 days
- 17,046Last 30 days1,494 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 10 | 0 | 0 | 10 | 21 |
| 2025 | 1 | 1 | 4 | 0 | 0 | 6 | 11 |
| 2024 | 0 | 0 | 3 | 0 | 0 | 3 | 5 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2022 | 0 | 1 | 1 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-127206 | Image CAPTCHA for Contact Form 7 and WPForms 3.3.29 CAPTCHA BypassPublic exploithookandhook · Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR) | Medium6.9 |
| CVE-2026-112067 | Captcha Bypass in extension "Accessible Form Captcha" (bw_captcha)TYPO3 · Extension "Accessible Form Captcha" | Medium6.9 |
| CVE-2026-111278 | NivoCart through 2.5.1 CAPTCHA Bypass via Answer Disclosed in Page HTMLnivocart · nivocart | Medium6.9 |
| CVE-2024-23566 | HCL Aftermarket EPC is vulnerable to brute force attacks since application doesn’t have captcha implemented. It can lead to various security issues like brute…HCLSoftware · Aftermarket EPC | Medium6.5 |
| CVE-2024-23567 | HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL parameters during…HCLSoftware · Aftermarket EPC | Medium4.3 |
| CVE-2026-13082 | GD::SecurityImage versions through 1.75 for Perl use rand to generate secretsBURAK · GD::SecurityImage | Medium5.3 |
| CVE-2026-49953 | Discuz! X5.0 CAPTCHA Bypass via Predictable Character SetPublic exploitDiscuz! · Discuz! X5.0 | Medium6.9 |
| CVE-2026-40935 | WWBN/AVideo has CAPTCHA Bypass via Attacker-Controlled Length Parameter and Missing Token Invalidation on FailurePublic exploitWWBN · AVideo | Medium5.3 |
| CVE-2025-70129 | If the anti spam-captcha functionality in PluXml versions 5.8.22 and earlier is enabled, a captcha challenge is generated with a format that can be…Public exploit | Medium5.3 |
| CVE-2026-27411 | WordPress SiteGuard WP plugin plugin <= 1.7.9 - Captcha Bypass vulnerabilityjp-secure · SiteGuard WP Plugin | Medium5.4 |
| CVE-2025-10423 | newbee-mall kaptcha mallKaptcha CaptchaPublic exploitnewbee-mall | Medium6.3 |
| CVE-2025-8546 | atjiu pybbs Verification Code login CaptchaPublic exploitatjiu · pybbs | Medium6.9 |
| CVE-2025-50850 | An issue was discovered in CS Cart 4.18.3 allows the vendor login functionality lacks essential security controls such as CAPTCHA verification and rate…Public exploit | High8.6 |
| CVE-2025-40916 | Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha textGRYPHON · Mojolicious::Plugin::CaptchaPNG | Critical9.1 |
| CVE-2025-32036 | DNN allows the possibility of bypassing Captchadnnsoftware · Dnn.Platform | Medium4.2 |
| CVE-2025-1262 | Advanced Google reCaptcha <= 1.27 - Built-in Math CAPTCHA Bypasswebfactory · Advanced Google reCAPTCHA | Medium5.3 |
| CVE-2024-30540 | WordPress VS Contact Form plugin <= 14.7 - Sum Captcha Bypass vulnerabilityGuido · VS Contact Form | Medium5.3 |
| CVE-2024-31295 | WordPress Captcha by BestWebSoft plugin <= 5.2.0 - Captcha Bypass vulnerabilityBestWebSoft · Captcha by BestWebSoft | Medium5.3 |
| CVE-2023-6963 | Getwid – Gutenberg Blocks <= 2.0.4 - Captcha Bypassjetmonsters · Getwid – Gutenberg Blocks | Medium5.3 |
| CVE-2022-4036 | Appointment Hour Booking <= 1.3.72 - CAPTCHA Bypasscodepeople · Appointment Hour Booking – Booking Calendar | Medium5.3 |
| CVE-2022-1801 | Very Simple Contact Form < 11.6 - Captcha bypassUnknown · Very Simple Contact Form | High7.5 |