Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 405,620All CVEsplus 19,169 rejected
  • 563Last 24 hours4,903 in the last 7 days
  • 18,566Last 30 days1,585 of them critical
  • 1,779Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202600200210
20250320058
20240030033

Latest CVEs

10 CVEs, newest first

CVEs, newest first
Title
CVE-2026-82530
IP2Location Country Blocker < 2.45.0 Access Control Bypass via X-Real-IP HeaderIP2Location · IP2Location Country Blocker
Medium6.9
CVE-2022-50961
WordPress Plugin IP2Location Country Blocker 2.26.7 Stored XSSPublic exploitIP2Location · IP2Location Country Blocker
Medium5.1
CVE-2025-39455
WordPress IP2Location Variables plugin <= 2.9.5 - CSRF to Cross Site Scripting (XSS) vulnerabilityIP2Location · IP2Location Variables
High7.1
CVE-2025-32644
WordPress IP2Location World Clock Plugin <= 1.1.9 - CSRF to Stored XSS vulnerabilityIP2Location · IP2Location World Clock
High7.1
CVE-2025-1502
IP2Location Redirection <= 1.33.3 - Missing Authorization to Unauthenticated Settings Exportip2location · IP2Location Redirection
Medium5.3
CVE-2025-1361
IP2Location Country Blocker <= 2.38.8 - Missing Authorization to Unauthenticated Information Exposure via admin_init FunctionPublic exploitip2location · IP2Location Country Blocker
High7.5
CVE-2025-24731
WordPress IP2Location Country Blocker plugin <= 2.38.3 - Cross Site Scripting (XSS) vulnerabilityIP2Location · Download IP2Location Country Blocker
Medium5.9
CVE-2023-37865
WordPress IP2Location Country Blocker plugin <= 2.29.1 - IP Bypass Vulnerability vulnerabilityIP2Location · Download IP2Location Country Blocker
Medium5.3
CVE-2024-32443
WordPress IP2Location Country Blocker plugin <= 2.34.2 - Cross Site Request Forgery (CSRF) vulnerabilityIP2Location · Download IP2Location Country Blocker
Medium4.3
CVE-2024-22294
WordPress Download IP2Location Country Blocker Plugin <= 2.33.3 is vulnerable to Sensitive Data ExposureIP2Location · IP2Location Country Blocker
Medium5.3