Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 406,542All CVEsplus 19,172 rejected
- 708Last 24 hours4,921 in the last 7 days
- 16,791Last 30 days1,474 of them critical
- 1,781Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 10 | 15 | 0 | 0 | 27 | 27 |
| Title | ||
|---|---|---|
| CVE-2026-116853 | WordPress GiveWP plugin <= 4.19.0.1 - Broken Access Control vulnerabilityNexcess · GiveWP | Medium6.5 |
| CVE-2026-104672 | WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerabilityNexcess · GiveWP | High7.1 |
| CVE-2026-104405 | WordPress GiveWP plugin <= 4.17.0 - Privilege Escalation vulnerabilityNexcess · GiveWP | High8.1 |
| CVE-2026-97285 | WordPress The Events Calendar plugin <= 6.17.5 - Broken Access Control vulnerabilityNexcess · The Events Calendar | Medium5.4 |
| CVE-2026-97266 | WordPress Virtue/Ascend/Pinnacle Toolkit plugin <= 4.9.12.1 - Cross Site Scripting (XSS) vulnerabilityNexcess · Virtue/Ascend/Pinnacle Toolkit | Medium6.5 |
| CVE-2026-97066 | WordPress GiveWP plugin <= 4.16.9 - Insecure Direct Object References (IDOR) vulnerabilityNexcess · GiveWP | Medium5.3 |
| CVE-2026-96830 | WordPress GiveWP plugin <= 4.16.9 - Cross Site Scripting (XSS) vulnerabilityNexcess · GiveWP | High7.1 |
| CVE-2026-94677 | WordPress Kadence WooCommerce Email Designer plugin <= 1.5.19.1 - PHP Object Injection vulnerabilityNexcess · Kadence WooCommerce Email Designer | High7.2 |
| CVE-2026-93526 | WordPress Event Tickets plugin <= 5.29.4 - Cross Site Scripting (XSS) vulnerabilityNexcess · Event Tickets | High7.1 |
| CVE-2026-84767 | WordPress BookIt plugin <= 2.6.0.3 - Bypass Vulnerability vulnerabilityNexcess · BookIt | Medium5.3 |
| CVE-2026-78265 | WordPress The Events Calendar plugin <= 6.17.2 - PHP Object Injection vulnerabilityNexcess · The Events Calendar | Critical9.8 |
| CVE-2026-78263 | WordPress Event Tickets plugin <= 5.29.2.1 - Cross Site Scripting (XSS) vulnerabilityNexcess · Event Tickets | High7.1 |
| CVE-2026-73997 | WordPress Starter Templates by Kadence WP plugin <= 2.3.3 - Denial of Service Attack vulnerabilityNexcess · Starter Templates by Kadence WP | High7.5 |
| CVE-2026-73352 | WordPress GiveWP plugin <= 4.16.5.1 - Broken Access Control vulnerabilityNexcess · GiveWP | Medium6.5 |
| CVE-2026-73348 | WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerabilityNexcess · GiveWP | Medium6.5 |
| CVE-2026-73357 | WordPress GiveWP plugin < 4.16.6 - Cross Site Scripting (XSS) vulnerabilityNexcess · GiveWP | Medium6.5 |
| CVE-2026-73349 | WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerabilityNexcess · GiveWP | Medium5.3 |
| CVE-2026-66696 | WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.8 - Sensitive Data Exposure vulnerabilityNexcess · Gutenberg Blocks by Kadence Blocks | Medium4.3 |
| CVE-2026-66690 | WordPress GiveWP plugin <= 4.16.5 - Cross Site Scripting (XSS) vulnerabilityNexcess · GiveWP | High7.1 |
| CVE-2026-28005 | WordPress Kadence WooCommerce Email Designer plugin <= 1.5.19 - Privilege Escalation vulnerabilityNexcess · Kadence WooCommerce Email Designer | Critical9.8 |
| CVE-2026-65441 | WordPress GiveWP plugin <= 4.16.3 - Cross Site Scripting (XSS) vulnerabilityNexcess · GiveWP | High7.1 |
| CVE-2026-65567 | WordPress Event Tickets plugin <= 5.29.0.1 - Broken Access Control vulnerabilityNexcess · Event Tickets | Medium5.3 |
| CVE-2026-65473 | WordPress Virtue/Ascend/Pinnacle Toolkit plugin <= 4.9.12 - Cross Site Scripting (XSS) vulnerabilityNexcess · Virtue/Ascend/Pinnacle Toolkit | Medium6.5 |
| CVE-2026-65464 | WordPress GiveWP plugin <= 4.16.3 - Cross Site Request Forgery (CSRF) vulnerabilityNexcess · GiveWP | Medium5.4 |
| CVE-2026-57705 | WordPress Event Tickets plugin <= 5.28.5 - Broken Access Control vulnerabilityNexcess · Event Tickets | High7.5 |
| CVE-2026-57661 | WordPress WPComplete plugin <= 2.9.5.5 - Broken Access Control vulnerabilityNexcess · WPComplete | Medium5.4 |
| CVE-2026-42750 | WordPress WPComplete plugin <= 2.9.5.4 - Cross Site Scripting (XSS) vulnerabilityNexcess · WPComplete | Medium6.5 |