Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 405,375All CVEsplus 19,159 rejected
  • 663Last 24 hours4,936 in the last 7 days
  • 18,822Last 30 days1,601 of them critical
  • 1,779Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202601100211
20250000009
20241110039
20230000006
20220060066

Latest CVEs

11 CVEs, newest first

CVEs, newest first
Title
CVE-2026-56042
WordPress Advanced Order Export For WooCommerce plugin <= 4.0.9 - Cross Site Scripting (XSS) vulnerabilityAlgolplus · Advanced Order Export For WooCommerce
High7.1
CVE-2026-11360
Advanced Order Export For WooCommerce <= 4.0.10 - Authenticated (Shop Manager+) SQL Injection via 'sort_direction' Parameteralgolplus · Advanced Order Export For WooCommerce
Medium4.9
CVE-2024-10828
Advanced Order Export For WooCommerce <= 3.5.5 - Unauthenticated PHP Object Injection via Order Detailsalgolplus · Advanced Order Export For WooCommerce
High8.1
CVE-2024-31266
WordPress Advanced Order Export For WooCommerce plugin <= 3.4.4 - Remote Code Execution (RCE) vulnerabilityAlgolPlus · Advanced Order Export For WooCommerce
Critical9.1
CVE-2022-40203
WordPress Advanced Dynamic Pricing for WooCommerce Plugin <= 4.1.5 is vulnerable to Broken Access ControlAlgolPlus · Advanced Dynamic Pricing for WooCommerce
Medium6.3
CVE-2022-41655
WordPress Phone Orders for WooCommerce plugin <= 3.7.1 - Auth. Sensitive Data Exposure vulnerabilityAlgolPlus · Phone Orders for WooCommerce (WordPress plugin)
Medium4.3
CVE-2022-43488
WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 - Cross-Site Request Forgery (CSRF) vulnerabilityAlgolPlus · Advanced Dynamic Pricing for WooCommerce (WordPress plugin)
Medium5.4
CVE-2022-40128
WordPress Advanced Order Export For WooCommerce plugin <= 3.3.2 - Cross-Site Request Forgery (CSRF) vulnerabilityAlgolPlus · Advanced Order Export For WooCommerce (WordPress plugin)
Medium4.3
CVE-2022-43491
WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 - Cross-Site Request Forgery (CSRF) vulnerabilityAlgolPlus · Advanced Dynamic Pricing for WooCommerce (WordPress plugin)
Medium5.4
CVE-2022-38095
WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.3 - Cross-Site Request Forgery (CSRF) vulnerabilityAlgolPlus · Advanced Dynamic Pricing for WooCommerce (WordPress plugin)
Medium5.4
CVE-2022-35275
WordPress Advanced Order Export For WooCommerce plugin <= 3.3.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerabilityAlgolPlus · Advanced Order Export For WooCommerce (WordPress plugin)
Medium4.8