Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 406,523All CVEsplus 19,172 rejected
  • 733Last 24 hours4,945 in the last 7 days
  • 16,836Last 30 days1,477 of them critical
  • 1,781Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
20260000008
20250300038
20240110025
20230120033

Latest CVEs

8 CVEs, newest first

CVEs, newest first
Title
CVE-2025-22774
WordPress CRUDLab Scroll to Top Plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCRUDLab · CRUDLab Scroll to Top
High7.1
CVE-2025-23814
WordPress CRUDLab Like Box Plugin <= 2.0.9 - Reflected Cross Site Scripting (XSS) vulnerabilityCRUDLab · CRUDLab Like Box
High7.1
CVE-2025-23938
WordPress Image Gallery Box by CRUDLab Plugin <= 1.0.3 - Local File Inclusion vulnerabilityCRUDLab · Image Gallery Box by CRUDLab
High7.5
CVE-2024-54399
WordPress CRUDLab Google Plus Button plugin <= 1.0.2 - CSRF to Stored XSS vulnerabilityCRUDLab · CRUDLab Google Plus Button
High7.1
CVE-2023-47820
WordPress WP Like Button plugin <= 1.7.0 - Broken Access Control vulnerabilityCRUDLab · WP Like Button
Medium4.3
CVE-2023-32966
WordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Request Forgery (CSRF) leading to Stored XSSCRUDLab · Jazz Popups
Medium5.4
CVE-2023-40199
WordPress WP Like Button Plugin <= 1.7.0 is vulnerable to Cross Site Request Forgery (CSRF)CRUDLab · WP Like Button
Medium5.4
CVE-2023-32965
WordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Scripting (XSS)CRUDLab · Jazz Popups
High7.1