Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,790All CVEsplus 19,170 rejected
- 353Last 24 hours4,892 in the last 7 days
- 16,901Last 30 days1,491 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 6 | 0 | 0 | 6 | 22 |
| 2025 | 0 | 0 | 5 | 0 | 0 | 5 | 16 |
| 2024 | 0 | 0 | 7 | 0 | 0 | 7 | 11 |
| 2023 | 0 | 2 | 1 | 0 | 0 | 3 | 4 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2021 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-85414 | Gallery : FooGallery <= 3.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_settings' Shortcode Attributefooplugins · Gallery : FooGallery | Medium6.4 |
| CVE-2026-9134 | Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel <= 3.1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_attribute_key' Shortcode Parameterfooplugins · Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel | Medium6.4 |
| CVE-2024-13362 | Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parametersebet · Go Fetch Jobs (for WP Job Manager) | Medium6.1 |
| CVE-2026-25363 | WordPress FooGallery plugin <= 3.1.11 - Broken Access Control vulnerabilityFooPlugins · FooGallery | Medium4.3 |
| CVE-2026-25362 | WordPress FooGallery plugin <= 3.1.11 - Cross Site Scripting (XSS) vulnerabilityFooPlugins · FooGallery | Medium5.9 |
| CVE-2025-15524 | Gallery by FooGallery <= 3.1.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Gallery Metadata Exposurefooplugins · Gallery by FooGallery | Medium4.3 |
| CVE-2025-6068 | FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scriptingfooplugins · Gallery by FooGallery | Medium6.4 |
| CVE-2025-5537 | Lightbox & Modal Popup WordPress Plugin – FooBox <= 2.7.34 - Authenticated (Author+) Stored Cross-Site Scriptingfooplugins · Lightbox & Modal Popup WordPress Plugin – FooBox | Medium6.4 |
| CVE-2025-32139 | WordPress Lightbox & Modal Popup WordPress Plugin – FooBox plugin <= 2.7.33 - Cross Site Scripting (XSS) vulnerabilityFooPlugins · FooBox Image Lightbox | Medium5.9 |
| CVE-2024-12114 | FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.29 - Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Post/Page Updatesfooplugins · Gallery by FooGallery | Medium4.3 |
| CVE-2024-12119 | FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.29 - Authenticated (Custom+) Stored Cross-Site Scripting via Album Title Sizefooplugins · Gallery by FooGallery | Medium6.4 |
| CVE-2022-4974 | Freemius SDK <= 2.4.2 - Missing Authorization Checksdashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress | Medium6.3 |
| CVE-2024-5668 | Lightbox & Modal Popup WordPress Plugin – FooBox <= 2.7.28 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via HTML Data Attributesfooplugins · Lightbox & Modal Popup WordPress Plugin – FooBox | Medium6.4 |
| CVE-2024-2122 | FooGallery <= 2.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Custom URLfooplugins · Gallery by FooGallery | Medium6.4 |
| CVE-2024-2081 | FooGallery <= 2.4.14 - Authenticated (Author+) Stored Cross-Site Scriptingfooplugins · Gallery by FooGallery | Medium6.4 |
| CVE-2024-2471 | FooGallery <= 2.4.14 - Authenticated (Author+) Stored Cross-Site Scripting via Image Attachment Fieldsfooplugins · Gallery by FooGallery | Medium6.4 |
| CVE-2024-0604 | Best WordPress Gallery Plugin – FooGallery <= 2.4.7 -Authenticated(Administrator+) Stored Cross-Site Scripting via settingsfooplugins · Gallery by FooGallery | Medium4.4 |
| CVE-2023-6747 | FooGallery Premium <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scriptinghttps://fooplugins.com · FooGallery Premium | Medium6.4 |
| CVE-2023-44233 | WordPress FooGallery Plugin <= 2.2.44 is vulnerable to Cross Site Request Forgery (CSRF)FooPlugins · Best WordPress Gallery Plugin – FooGallery | Medium5.4 |
| CVE-2023-44244 | WordPress FooGallery Plugin <= 2.2.44 is vulnerable to Cross Site Scripting (XSS)FooPlugins · FooGallery | High7.1 |
| CVE-2023-29439 | WordPress FooGallery Plugin <= 2.2.35 is vulnerable to Cross Site Scripting (XSS)Public exploitFooPlugins · FooGallery | High7.1 |
| CVE-2021-24357 | FooGallery < 2.0.35 - Authenticated Stored Cross-Site ScriptingFooPlugins · Best Image Gallery & Responsive Photo Gallery – FooGallery | Medium5.4 |