Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 406,612All CVEsplus 19,172 rejected
- 69Last 24 hours4,661 in the last 7 days
- 16,238Last 30 days1,433 of them critical
- 1,781Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 2 | 3 | 0 | 0 | 5 | 32 |
| 2025 | 0 | 1 | 8 | 0 | 0 | 9 | 27 |
| 2024 | 0 | 4 | 12 | 0 | 0 | 16 | 18 |
| 2023 | 1 | 0 | 1 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-116753 | Multi Step for Contact Form 7 <= 2.9.1 - Unauthenticated Stored Cross-Site Scripting via Multipart Field Nameninjateam · Multi Step for Contact Form 7 | High7.2 |
| CVE-2026-15004 | FileBird – WordPress Media Library Folders & File Manager <= 6.5.6 - Authenticated (Author+) Stored Cross-Site Scriptingninjateam · FileBird – WordPress Media Library Folders & File Manager | Medium5.4 |
| CVE-2026-1104 | FastDup – Fastest WordPress Migration & Duplicator <= 2.7.1 - Missing Authorization to Authenticated (Contributor+) Backup Creation and Downloadninjateam · FastDup – Fastest WordPress Migration & Duplicator | High8.8 |
| CVE-2025-14001 | WP Duplicate Page <= 1.8 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplicationninjateam · WP Duplicate Page | Medium5.4 |
| CVE-2026-0604 | FastDup <= 2.7 - Authenticated (Contributor+) Path Traversal via 'dir_path' REST Parameterninjateam · FastDup – Fastest WordPress Migration & Duplicator | Medium6.5 |
| CVE-2025-66134 | WordPress FileBird Pro plugin <= 6.5.1 - Broken Access Control vulnerabilityNinjaTeam · FileBird Pro | Medium5.4 |
| CVE-2025-12900 | FileBird – WordPress Media Library Folders & File Manager <= 6.5.1 - Missing Authorization to Authenticated (Author+) Global Folders Tamperingninjateam · FileBird – WordPress Media Library Folders & File Manager | Medium4.3 |
| CVE-2025-12481 | WP Duplicate Page <= 1.7 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Disclosureninjateam · WP Duplicate Page | Medium4.3 |
| CVE-2025-11510 | FileBird <= 6.4.9 - Improper Authorization to Authenticated (Author+) Settings Resetninjateam · FileBird – WordPress Media Library Folders & File Manager | Medium4.3 |
| CVE-2025-0818 | Multiple elFinder Plugins <= (Various Versions) - Directory Traversal to Arbitrary File Deletionninjateam · File Manager Pro – Filester | Medium6.5 |
| CVE-2025-6986 | FileBird – WordPress Media Library Folders & File Manager <= 6.4.8 - Authenticated (Author+) SQL Injectionninjateam · FileBird – WordPress Media Library Folders & File Manager | Medium6.5 |
| CVE-2025-3234 | File Manager Pro – Filester <= 1.8.8 - Authenticated (Administrator+) Arbitrary File Uploadninjateam · File Manager Pro – Filester | High7.2 |
| CVE-2025-5236 | NinjaTeam Chat for Telegram <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via username Parameterninjateam · WP Telegram Chat Widget | Medium6.4 |
| CVE-2025-1672 | Notibar <= 2.1.5 - Authenticated (Administrator+) Stored Cross-Site Scriptingninjateam · Notibar – Notification Bar for WordPress | Medium5.5 |
| CVE-2024-11885 | NinjaTeam Chat for Telegram <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingninjateam · WP Telegram Chat Widget | Medium6.4 |
| CVE-2024-12331 | File Manager Pro – Filester <= 1.8.6 - Missing Authorization to Authenticated (Subscriber+) Filebird Plugin Installationninjateam · File Manager Pro – Filester | Medium4.3 |
| CVE-2024-11012 | Notibar – Notification Bar for WordPress <= 2.1.4 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via njt_nofi_textninjateam · Notibar – Notification Bar for WordPress | Medium6.3 |
| CVE-2024-9669 | File Manager Pro – Filester <= 1.8.5 - Authenticated (Administrator+) Local JavaScript File Inclusionninjateam · File Manager Pro – Filester | High7.2 |
| CVE-2024-8066 | File Manager Pro – Filester <= 1.8.6- Authenticated (Subscriber+) Arbitrary File Uploadninjateam · File Manager Pro – Filester | High7.5 |
| CVE-2024-10533 | WP Chat App <= 3.6.8 - Missing Authorization to Authenticated (Subscriber+) Filebird Plugin Installationninjateam · WP Chat App | Medium4.3 |
| CVE-2024-10055 | Click to Chat – WP Support All-in-One Floating Widget <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpsaio_snapchat Shortcodeninjateam · WP Click to Chat – Email, Live Chat, Call & Book Now Buttons | Medium6.4 |
| CVE-2024-7031 | File Manager Pro – Filester <= 1.8.2 - Authenticated Plugin Settings Updateninjateam · File Manager Pro – Filester | High7.5 |
| CVE-2024-5607 | GDPR CCPA Compliance & Cookie Consent Banner <= 2.7.0 - Missing Authorization to Settings Update and Stored Cross-Site Scriptingninjateam · GDPR CCPA Compliance & Cookie Consent Banner | Medium5.4 |
| CVE-2024-2346 | FileBird – WordPress Media Library Folders & File Manager <= 5.6.3 - Authenticated (Author+) Insecure Direct Object Referenceninjateam · FileBird – WordPress Media Library Folders & File Manager | Medium5.4 |
| CVE-2024-2345 | FileBird – WordPress Media Library Folders & File Manager <= 5.6.3 - Authenticated (Author+) Stored Cross-Site Scriptingninjateam · FileBird – WordPress Media Library Folders & File Manager | Medium6.4 |
| CVE-2024-2513 | WP Chat App <= 3.6.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Block Image Attributeninjateam · WP Chat App | Medium6.4 |
| CVE-2024-29103 | WordPress Database for Contact Form 7 plugin <= 3.0.6 - Unauthenticated Cross Site Scripting (XSS) vulnerabilityNinjaTeam · Database for Contact Form 7 | High7.1 |
| CVE-2024-1761 | WP Chat App <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributesninjateam · WP Chat App | Medium6.4 |
| CVE-2023-51370 | WordPress WP Chat App Plugin <= 3.4.4 is vulnerable to Cross Site Scripting (XSS)NinjaTeam · WP Chat App | Medium5.9 |
| CVE-2024-0691 | FileBird <= 5.6.0 - Authenticated(Administrator+) Stored Cross-Site Scripting via Folder Importninjateam · FileBird – WordPress Media Library Folders & File Manager | Medium5.5 |
| CVE-2023-5740 | Live Chat with Facebook Messenger <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodeninjateam · Live Chat with Facebook Messenger | Medium6.4 |
| CVE-2020-36718 | GDPR CCPA Compliance Support <= 2.3 - PHP Object Injectionninjateam · GDPR CCPA Compliance & Cookie Consent Banner | Critical9.8 |