Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 406,589All CVEsplus 19,172 rejected
- 68Last 24 hours4,661 in the last 7 days
- 16,360Last 30 days1,442 of them critical
- 1,781Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 1 | 9 | 0 | 0 | 10 | 36 |
| 2025 | 0 | 0 | 2 | 0 | 0 | 2 | 26 |
| 2024 | 0 | 1 | 22 | 0 | 0 | 23 | 24 |
| 2023 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-57754 | WordPress Livemesh Addons for WPBakery Page Builder plugin <= 3.9.4 - Cross Site Scripting (XSS) vulnerabilityLivemesh · Livemesh Addons for WPBakery Page Builder | Medium6.5 |
| CVE-2026-3895 | WPBakery Page Builder Addons by Livemesh <= 3.9.4 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scriptinglivemesh · WPBakery Page Builder Addons by Livemesh | Medium6.4 |
| CVE-2026-2030 | WPBakery Page Builder Addons by Livemesh <= 3.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributeslivemesh · WPBakery Page Builder Addons by Livemesh | Medium6.4 |
| CVE-2026-3896 | Livemesh SiteOrigin Widgets <= 3.9.2 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scriptinglivemesh · Livemesh SiteOrigin Widgets | Medium6.4 |
| CVE-2026-3897 | Livemesh Addons for Beaver Builder <= 3.9.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Missing Authorizationlivemesh · Livemesh Addons for Beaver Builder | Medium6.4 |
| CVE-2026-1572 | Livemesh Addons by Elementor <= 9.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via Plugin Settingslivemesh · Livemesh Addons by Elementor | Medium6.4 |
| CVE-2026-1620 | Livemesh Addons by Elementor <= 9.0 - Authenticated (Contributor+) Local File Inclusion via Widget Template Parameterlivemesh · Livemesh Addons by Elementor | High8.8 |
| CVE-2026-39636 | WordPress Livemesh Addons for Elementor plugin <= 9.0 - Cross Site Scripting (XSS) vulnerabilitylivemesh · Livemesh Addons for Elementor | Medium6.5 |
| CVE-2026-2029 | Livemesh Addons for Beaver Builder <= 3.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' and 'value' Shortcode Attributeslivemesh · Livemesh Addons for Beaver Builder | Medium6.4 |
| CVE-2026-24594 | WordPress Livemesh Addons for WPBakery Page Builder plugin <= 3.9.4 - Cross Site Scripting (XSS) vulnerabilitylivemesh · Livemesh Addons for WPBakery Page Builder | Medium5.9 |
| CVE-2025-62990 | WordPress Livemesh Addons for Beaver Builder plugin <= 3.9.2 - Cross Site Scripting (XSS) vulnerabilitylivemesh · Livemesh Addons for Beaver Builder | Medium6.5 |
| CVE-2025-8780 | Livemesh SiteOrigin Widgets <= 3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Hero Header and Pricing Table Widgetslivemesh · Livemesh SiteOrigin Widgets | Medium6.4 |
| CVE-2022-4974 | Freemius SDK <= 2.4.2 - Missing Authorization Checksdashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress | Medium6.3 |
| CVE-2024-8858 | Elementor Addons by Livemesh <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via piechart_settings Parameterlivemesh · Livemesh Addons by Elementor | Medium6.4 |
| CVE-2024-47303 | WordPress Elementor Addons by Livemesh plugin <= 8.5 - Cross Site Scripting (XSS) vulnerabilitylivemesh · Livemesh Addons for Elementor | Medium6.5 |
| CVE-2024-43320 | WordPress WPBakery Page Builder Addons plugin <= 3.9 - Cross Site Scripting (XSS) vulnerabilityLivemesh · Livemesh Addons for WPBakery Page Builder | Medium6.5 |
| CVE-2024-38784 | WordPress Livemesh Addons for Beaver Builder plugin <= 3.6.1 - Cross Site Scripting (XSS) vulnerabilityLivemesh · Livemesh Addons for Beaver Builder | Medium5.9 |
| CVE-2024-37547 | WordPress Elementor Addons by Livemesh plugin <= 8.4.0 - Local File Inclusion vulnerabilityLivemesh · Livemesh Addons for Elementor | Medium6.5 |
| CVE-2024-3639 | Elementor Addons by Livemesh <= 8.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Gridlivemesh · Livemesh Addons by Elementor | Medium6.4 |
| CVE-2024-2926 | Elementor Addons by Livemesh <= 8.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Various Widgetslivemesh · Livemesh Addons by Elementor | Medium6.4 |
| CVE-2024-3638 | Elementor Addons by Livemesh <= 8.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Marquee Text Widget, Testimonials Widget, and Testimonial Slider Widgetslivemesh · Livemesh Addons by Elementor | Medium6.4 |
| CVE-2024-2385 | Elementor Addons by Livemesh <= 8.4 - Authenticated (Contributor+) Limited Local File Inclusion via Widgetslivemesh · Livemesh Addons by Elementor | High8.8 |
| CVE-2024-2655 | Elementor Addons by Livemesh <= 8.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Namelivemesh · Livemesh Addons by Elementor | Medium6.4 |
| CVE-2024-2539 | Elementor Addons by Livemesh <= 8.3.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget _id attributelivemesh · Livemesh Addons by Elementor | Medium6.4 |
| CVE-2024-1458 | Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text Widgetlivemesh · Livemesh Addons by Elementor | Medium6.4 |
| CVE-2024-1461 | Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Members Widgetlivemesh · Livemesh Addons by Elementor | Medium6.4 |
| CVE-2024-1465 | Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Carousel Widgetlivemesh · Livemesh Addons by Elementor | Medium6.4 |
| CVE-2024-1464 | Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Slider Widgetlivemesh · Livemesh Addons by Elementor | Medium6.4 |
| CVE-2024-1466 | Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Multislider Widgetlivemesh · Livemesh Addons by Elementor | Medium6.4 |
| CVE-2024-30183 | WordPress WPBakery Page Builder Addons by Livemesh plugin <= 3.7 - Cross Site Scripting (XSS) vulnerabilityLivemesh · Livemesh Addons for WPBakery Page Builder | Medium6.5 |
| CVE-2024-25598 | WordPress Elementor Addons by Livemesh plugin <= 8.3 - Cross Site Scripting (XSS) vulnerabilityLivemesh · Livemesh Addons for Elementor | Medium6.5 |
| CVE-2024-27986 | WordPress Livemesh Addons for Elementor Plugin <= 8.3.5 is vulnerable to Cross Site Scripting (XSS)Livemesh · Elementor Addons by Livemesh | Medium6.5 |
| CVE-2024-2079 | WPBakery Page Builder Addons by Livemesh <= 3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodelivemesh · WPBakery Page Builder Addons by Livemesh | Medium6.4 |
| CVE-2024-1235 | Elementor Addons by Livemesh <= 8.3.2 - Authenticated (Contributor+) Stored Cross-Site Scriptinglivemesh · Livemesh Addons by Elementor | Medium6.4 |
| CVE-2024-0448 | Elementor Addons by Livemesh <= 8.3.1 - Authenticated (Contributor+) Stored Cross-Site Scriptinglivemesh · Livemesh Addons by Elementor | Medium6.4 |
| CVE-2023-50370 | WordPress Livemesh Addons for WPBakery Page Builder Plugin <= 3.5 is vulnerable to Cross Site Scripting (XSS)Livemesh · WPBakery Page Builder Addons by Livemesh | Medium6.5 |