Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,624All CVEsplus 19,169 rejected
- 563Last 24 hours4,904 in the last 7 days
- 18,555Last 30 days1,584 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 8 | 10 | 0 | 0 | 19 | 45 |
| 2025 | 0 | 7 | 5 | 0 | 0 | 12 | 26 |
| 2024 | 0 | 0 | 8 | 0 | 0 | 8 | 14 |
| 2023 | 0 | 2 | 4 | 0 | 0 | 6 | 6 |
| Title | ||
|---|---|---|
| CVE-2026-42709 | WordPress Food Menu – Restaurant Menu & Online Ordering for WooCommerce plugin <= 6.0.5 - Cross Site Scripting (XSS) vulnerabilityRadiusTheme · Food Menu – Restaurant Menu & Online Ordering for WooCommerce | High7.1 |
| CVE-2026-39764 | WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.19 - SQL Injection vulnerabilityRadiusTheme · Radius Booking — Booking Calendar for Appointments & Services | Critical9.3 |
| CVE-2026-97282 | WordPress Review Schema plugin <= 3.1.0 - Insecure Direct Object References (IDOR) vulnerabilityRadiusTheme · Review Schema | Medium5.3 |
| CVE-2026-96351 | WordPress Classified Listing plugin <= 6.1.3 - Cross Site Scripting (XSS) vulnerabilityRadiusTheme · Classified Listing | High7.1 |
| CVE-2026-94680 | WordPress The Post Grid plugin <= 7.9.5 - Cross Site Scripting (XSS) vulnerabilityRadiusTheme · The Post Grid | Medium6.5 |
| CVE-2026-94671 | WordPress The Post Grid plugin <= 7.9.5 - Cross Site Scripting (XSS) vulnerabilityRadiusTheme · The Post Grid | Medium6.5 |
| CVE-2026-15985 | Classified Listing - Mobile Number Verification <= 1.6.0 - Unauthenticated Authentication Bypass via Firebase OTP LoginRadiusTheme · Classified Listing - Mobile Number Verification | High8.1 |
| CVE-2026-66647 | WordPress Homlisti theme <= 3.1.2 - Broken Access Control vulnerabilityRadiusTheme · Homlisti | Medium6.5 |
| CVE-2026-57355 | WordPress Classified Listing plugin <= 5.4.2 - Broken Access Control vulnerabilityRadiusTheme · Classified Listing | Medium6.5 |
| CVE-2026-57344 | WordPress Classified Listing plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerabilityRadiusTheme · Classified Listing | High7.1 |
| CVE-2022-50947 | WordPress Plugin Testimonial Slider and Showcase 2.2.6 Stored XSSPublic exploitRadiusTheme · Testimonial Slider and Showcase | Medium5.1 |
| CVE-2026-25344 | WordPress Review Schema plugin <= 2.2.6 - Sensitive Data Exposure vulnerabilityRadiusTheme · Review Schema | Medium6.5 |
| CVE-2026-25026 | WordPress Team plugin <= 5.0.11 - Broken Access Control vulnerabilityRadiusTheme · Team | High7.5 |
| CVE-2026-32396 | WordPress Team plugin <= 5.0.13 - Broken Access Control vulnerabilityRadiusTheme · Team | Medium5.3 |
| CVE-2026-32372 | WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.2.4 - Sensitive Data Exposure vulnerabilityRadiusTheme · ShopBuilder – Elementor WooCommerce Builder Addons | Medium5.3 |
| CVE-2026-32369 | WordPress Medilink-Core plugin < 2.0.7 - Local File Inclusion vulnerabilityRadiusTheme · Medilink-Core | High7.5 |
| CVE-2026-27383 | WordPress Metro theme <= 2.13 - Local File Inclusion vulnerabilityRadiusTheme · Metro | High8.1 |
| CVE-2026-27382 | WordPress Metro theme <= 2.13 - Reflected Cross Site Scripting (XSS) vulnerabilityRadiusTheme · Metro | High7.1 |
| CVE-2026-23546 | WordPress Classified Listing plugin <= 5.3.4 - Sensitive Data Exposure vulnerabilityRadiusTheme · Classified Listing | Medium6.5 |
| CVE-2025-64282 | WordPress Radius Blocks plugin <= 2.2.1 - Insecure Direct Object References (IDOR) vulnerabilityRadiusTheme · Radius Blocks | Medium4.3 |
| CVE-2025-32657 | WordPress Testimonial Slider and Showcase Pro plugin <= 2.1.7 - Local File Inclusion vulnerabilityRadiusTheme · Testimonial Slider And Showcase Pro | High7.5 |
| CVE-2025-57975 | WordPress Team Plugin <= 5.0.6 - Broken Access Control VulnerabilityRadiusTheme · Team | Medium4.3 |
| CVE-2025-58601 | WordPress Classified Listing Plugin <= 5.0.6 - Broken Access Control VulnerabilityRadiusTheme · Classified Listing | Medium4.3 |
| CVE-2025-53565 | WordPress Widget for Google Reviews <= 1.0.15 - Local File Inclusion VulnerabilityRadiusTheme · Widget for Google Reviews | High8.1 |
| CVE-2025-54698 | WordPress Classified Listing Plugin plugin <= 5.0.0 - Content Injection VulnerabilityRadiusTheme · Classified Listing | Medium5.4 |
| CVE-2025-52715 | WordPress Classified Listing plugin <= 4.2.0 - Local File Inclusion VulnerabilityRadiusTheme · Classified Listing | High7.5 |
| CVE-2025-24745 | WordPress Classified Listing plugin <= 4.0.1 - Reflected Cross Site Scripting (XSS) vulnerabilityRadiusTheme · Classified Listing | High7.1 |
| CVE-2025-32656 | WordPress Testimonial Slider and Showcase Pro plugin <= 2.3.15 - Local File Inclusion vulnerabilityRadiusTheme · Testimonial Slider And Showcase Pro | High8.1 |
| CVE-2025-32159 | WordPress Radius Blocks plugin <= 2.2.1 - Local File Inclusion vulnerabilityRadiusTheme · Radius Blocks | High7.5 |
| CVE-2025-30814 | WordPress The Post Grid plugin <= 7.7.17 - Local File Inclusion vulnerabilityRadiusTheme · The Post Grid | High7.5 |
| CVE-2025-24712 | WordPress Radius Blocks – WordPress Gutenberg Blocks Plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) vulnerabilityRadiusTheme · Radius Blocks | Medium5.4 |
| CVE-2024-54272 | WordPress Radius Blocks plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerabilityRadiusTheme · Radius Blocks | Medium6.5 |
| CVE-2024-52386 | WordPress Classified Listing plugin <= 3.1.16 - Local File Inclusion vulnerabilityRadiusTheme · Classified Listing | Medium5.3 |
| CVE-2024-37481 | WordPress The Post Grid plugin <= 7.7.4 - Broken Access Control vulnerabilityRadiusTheme · The Post Grid | Medium6.5 |
| CVE-2024-37482 | WordPress The Post Grid plugin <= 7.7.4 - Broken Access Control vulnerabilityRadiusTheme · The Post Grid | Medium4.3 |
| CVE-2024-37483 | WordPress The Post Grid plugin <= 7.7.4 - Broken Access Control vulnerabilityRadiusTheme · The Post Grid | Medium5.4 |
| CVE-2024-37520 | WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 2.1.12 - Local File Inclusion vulnerabilityRadiusTheme · ShopBuilder – Elementor WooCommerce Builder Addons | Medium6.5 |
| CVE-2024-35739 | WordPress The Post Grid plugin <= 7.7.1 - Cross Site Scripting (XSS) vulnerabilityRadiusTheme · The Post Grid | Medium6.5 |
| CVE-2024-34812 | WordPress ShopBuilder plugin <= 2.1.8 - Sensitive Data Exposure vulnerabilityRadiusTheme · ShopBuilder – Elementor WooCommerce Builder Addons | Medium5.3 |
| CVE-2023-39923 | WordPress The Post Grid Plugin <= 7.2.7 is vulnerable to Cross Site Request Forgery (CSRF)RadiusTheme · The Post Grid | Medium5.4 |
| CVE-2023-37894 | WordPress Variation Images Gallery for WooCommerce Plugin <= 2.3.3 is vulnerable to Cross Site Scripting (XSS)RadiusTheme · Variation Images Gallery for WooCommerce | High7.1 |
| CVE-2023-37975 | WordPress Variation Swatches for WooCommerce Plugin <= 2.3.7 is vulnerable to Cross Site Scripting (XSS)RadiusTheme · Variation Swatches for WooCommerce | High7.1 |
| CVE-2023-37387 | WordPress Classified Listing Plugin <= 2.4.5 is vulnerable to Cross Site Request Forgery (CSRF)RadiusTheme · Classified Listing | Medium5.4 |
| CVE-2022-46853 | WordPress The Post Grid Plugin <= 5.0.4 is vulnerable to Cross Site Request Forgery (CSRF)RadiusTheme · The Post Grid | Medium4.3 |
| CVE-2023-23685 | WordPress Portfolio – WordPress Portfolio Plugin Plugin <= 2.8.10 is vulnerable to Cross Site Scripting (XSS)RadiusTheme · Portfolio – WordPress Portfolio Plugin | Medium6.5 |