Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 406,523All CVEsplus 19,172 rejected
  • 733Last 24 hours4,945 in the last 7 days
  • 16,836Last 30 days1,477 of them critical
  • 1,781Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
2026254001116
20250000005
20240000005
20231040055

Latest CVEs

16 CVEs, newest first

CVEs, newest first
Title
CVE-2026-120467
Joomla / WordPress Extension - acymailing.com - Subscriber identity not bound to the record acted upon in AcyMailing 1.0.0 - 11.1.1Datasolution · AcyMailing extension for Joomla and WordPress
High7.1
CVE-2026-120468
Joomla Extension - acymailing.com - Unauthenticated disclosure of mailing list metadata in AcyMailing 1.0.0 - 11.1.1Datasolution · AcyMailing extension for Joomla
Medium6.9
CVE-2026-120471
Joomla Extension - acymailing.com - Site modules rendered outside their access level in AcyMailing 1.0.0 - 11.1.1Datasolution · AcyMailing extension for Joomla
Medium6.9
CVE-2026-120470
Joomla / WordPress Extension - acymailing.com - Online version of an email readable without the visibility check in AcyMailing 1.0.0 - 11.1.1Datasolution · AcyMailing extension for Joomla and WordPress
Medium6.9
CVE-2026-120466
Joomla / WordPress Extension - acymailing.com - Missing authorization on subscription changes in AcyMailing 1.0.0 - 11.1.1Datasolution · AcyMailing extension for Joomla and WordPress
High8.8
CVE-2026-120469
Joomla / WordPress Extension - acymailing.com - Open redirect on the subscription and unsubscription endpoints in AcyMailing 1.0.0 - 11.1.1Datasolution · AcyMailing extension for Joomla and WordPress
Medium5.1
CVE-2026-118495
Joomla / WordPress Extension - acymailing.com - Exposure of sensitive information to an unauthorized actor in AcyMailing 6.0.0 - 11.1.1Datasolution · AcyMailing extension for Joomla and WordPress
High8.8
CVE-2026-105318
WordPress AcyMailing SMTP Newsletter plugin <= 11.1.0 - Cross Site Scripting (XSS) vulnerabilityDatasolution · AcyMailing SMTP Newsletter
High7.1
CVE-2026-94131
Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension < 11.1.0Datasolution · AcyMailing extension for Joomla
High8.3
CVE-2026-94132
Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0Datasolution · AcyMailing Enterprise extension for Joomla
Critical9.5
CVE-2026-56292
Joomla Extension - acymailing.com - SQL Injection in AcyMailing extension < 10.11.1Public exploitDatasolution · acymailing.com AcyMailing extension for Joomla
Critical9.2
CVE-2023-39971
Extension - acymailing.com - XSS in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3Datasolution · AcyMailing Enterprise component for Joomla
Medium6.1
CVE-2023-39974
Extension - acymailing.com - Exposure of Sensitive Information in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3Datasolution · AcyMailing Enterprise component for Joomla
Medium5.3
CVE-2023-39972
Extension - acymailing.com - Improper Access Control in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3Datasolution · AcyMailing Enterprise component for Joomla
Medium4.3
CVE-2023-39973
Extension - acymailing.com - Improper Access Control in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3Datasolution · AcyMailing Enterprise component for Joomla
Medium4.3
CVE-2023-39970
Extension - acymailing.com - RCE in AcyMailing component for Joomla 6.7.0-8.5.0Datasolution · AcyMailing component for Joomla
Critical9.8