Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 405,756All CVEsplus 19,170 rejected
  • 380Last 24 hours4,868 in the last 7 days
  • 16,925Last 30 days1,493 of them critical
  • 1,779Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202610300410
20250010016
20240040045
20230000001
20220010011

Latest CVEs

10 CVEs, newest first

CVEs, newest first
Title
CVE-2026-3253
MailerLite – Signup forms (official) <= 1.7.21 - Missing Authorization to Authenticated (Contributor+) Form Creation and Deletionmailerlite · MailerLite – Signup forms (official)
Medium4.3
CVE-2026-25420
WordPress MailerLite plugin <= 1.7.18 - Broken Access Control vulnerabilityMailerLite · MailerLite
Medium4.3
CVE-2025-67945
WordPress MailerLite – WooCommerce integration plugin <= 3.1.2 - SQL Injection vulnerabilityMailerLite · MailerLite – WooCommerce integration
Critical9.3
CVE-2026-1000
MailerLite - WooCommerce integration <= 3.1.3 - Missing Authorization to Data Deletionmailerlite · MailerLite – WooCommerce integration
Medium6.5
CVE-2025-13993
MailerLite – Signup forms (official) <= 1.7.16 - Authenticated (Administrator+) Stored Cross-Site Scriptingmailerlite · MailerLite – Signup forms (official)
Medium5.5
CVE-2023-52227
WordPress MailerLite – WooCommerce integration plugin <= 2.0.8 - Broken Access Control vulnerabilityMailerLite · MailerLite – WooCommerce integration
Medium4.3
CVE-2024-2797
MailerLite – Signup forms (official) <= 1.7.6 - Missing Authorizationmailerlite · MailerLite – Signup forms (official)
Medium5.3
CVE-2024-1386
The MailerLite – Signup forms (official) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in versions 1.5.0 to…mailerlite · MailerLite – Signup forms (official)
Medium6.4
CVE-2023-52223
WordPress MailerLite – WooCommerce integration Plugin <= 2.0.8 is vulnerable to Cross Site Request Forgery (CSRF)MailerLite · MailerLite – WooCommerce integration
Medium5.4
CVE-2022-33201
WordPress MailerLite – Signup forms (official) plugin <= 1.5.7 - Cross-Site Request Forgery (CSRF) vulnerabilityMailerLite · MailerLite (WordPress plugin)
Medium6.3