Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 10 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,790All CVEsplus 19,170 rejected
- 385Last 24 hours4,901 in the last 7 days
- 16,937Last 30 days1,493 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 22 | 2 | 0 | 0 | 26 | 39 |
| 2025 | 1 | 4 | 4 | 0 | 0 | 9 | 13 |
| 2024 | 1 | 3 | 0 | 0 | 0 | 4 | 4 |
| Title | ||
|---|---|---|
| CVE-2026-62022 | WordPress Tonda Membership plugin <= 1.0.1 - Privilege Escalation vulnerabilitySelect-Themes · Tonda Membership | Critical9.8 |
| CVE-2026-28152 | WordPress Tonda Core plugin < 2.6 - Local File Inclusion vulnerabilitySelect-Themes · Tonda Core | High8.1 |
| CVE-2026-28151 | WordPress Tonda theme < 2.6 - Local File Inclusion vulnerabilitySelect-Themes · Tonda | High8.1 |
| CVE-2026-65477 | WordPress Tonda Core plugin <= 2.1.2 - Local File Inclusion vulnerabilitySelect-Themes · Tonda Core | High7.5 |
| CVE-2026-57805 | WordPress Tonda theme <= 2.5 - Local File Inclusion vulnerabilitySelect-Themes · Tonda | High7.5 |
| CVE-2026-57803 | WordPress Struktur Core plugin < 2.7 - Local File Inclusion vulnerabilitySelect-Themes · Struktur Core | High7.5 |
| CVE-2026-57802 | WordPress Struktur theme < 2.7 - Local File Inclusion vulnerabilitySelect-Themes · Struktur | High7.5 |
| CVE-2026-57801 | WordPress SetSail theme <= 2.1 - Local File Inclusion vulnerabilitySelect-Themes · SetSail | High7.5 |
| CVE-2026-40752 | WordPress Manufaktur Solutions theme <= 1.1.1 - PHP Object Injection vulnerabilitySelect-Themes · Manufaktur Solutions | High8.1 |
| CVE-2026-39560 | WordPress Hiroshi theme <= 1.5.1 - PHP Object Injection vulnerabilitySelect-Themes · Hiroshi | High8.1 |
| CVE-2026-39573 | WordPress Mildhill theme <= 1.5 - PHP Object Injection vulnerabilitySelect-Themes · Mildhill | High8.1 |
| CVE-2026-39545 | WordPress Zermatt theme <= 1.6.1 - PHP Object Injection vulnerabilitySelect-Themes · Zermatt | High8.1 |
| CVE-2026-39580 | WordPress Micdrop theme <= 1.3.1 - PHP Object Injection vulnerabilitySelect-Themes · Micdrop | High8.1 |
| CVE-2026-39567 | WordPress Santé theme <= 1.5.1 - PHP Object Injection vulnerabilitySelect-Themes · Santé | High8.1 |
| CVE-2026-39547 | WordPress Getaway theme < 1.8 - Local File Inclusion vulnerabilitySelect-Themes · Getaway | High8.1 |
| CVE-2026-39553 | WordPress WaveRide theme <= 1.4 - Local File Inclusion vulnerabilitySelect-Themes · WaveRide | High8.1 |
| CVE-2026-32502 | WordPress Borgholm theme < 1.6 - PHP Object Injection vulnerabilitySelect-Themes · Borgholm | Critical9.8 |
| CVE-2026-25458 | WordPress Moments theme <= 2.2 - Local File Inclusion vulnerabilitySelect-Themes · Moments | High8.1 |
| CVE-2026-25457 | WordPress Mixtape theme <= 2.1 - Local File Inclusion vulnerabilitySelect-Themes · Mixtape | High8.1 |
| CVE-2026-22449 | WordPress Don Peppe theme <= 1.3 - Local File Inclusion vulnerabilitySelect-Themes · Don Peppe | High8.1 |
| CVE-2026-22446 | WordPress Prowess theme <= 1.8.1 - Local File Inclusion vulnerabilitySelect-Themes · Prowess | High8.1 |
| CVE-2026-22423 | WordPress SetSail theme <= 1.8 - Local File Inclusion vulnerabilitySelect-Themes · SetSail | High8.1 |
| CVE-2025-69407 | WordPress Struktur theme <= 2.5.1 - Local File Inclusion vulnerabilitySelect-Themes · Struktur | High8.1 |
| CVE-2026-24531 | WordPress Prowess theme <= 2.3 - Local File Inclusion vulnerabilitySelect-Themes · Prowess | High7.5 |
| CVE-2026-22450 | WordPress Don Peppe theme <= 1.3 - Broken Access Control vulnerabilitySelect-Themes · Don Peppe | Medium4.3 |
| CVE-2026-22447 | WordPress Prowess theme <= 1.8.1 - Broken Access Control vulnerabilitySelect-Themes · Prowess | Medium4.3 |
| CVE-2025-69029 | WordPress Struktur theme <= 2.5.1 - Insecure Direct Object References (IDOR) vulnerabilitySelect-Themes · Struktur | Medium5.4 |
| CVE-2025-68077 | WordPress Stockholm theme <= 9.14.1 - Cross Site Scripting (XSS) vulnerabilitySelect-Themes · Stockholm | Medium6.5 |
| CVE-2025-68076 | WordPress Stockholm Core plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerabilitySelect-Themes · Stockholm Core | Medium6.5 |
| CVE-2025-68068 | WordPress Stockholm theme <= 9.14.1 - Local File Inclusion vulnerabilitySelect-Themes · Stockholm | High7.5 |
| CVE-2025-68067 | WordPress Stockholm Core plugin <= 2.4.6 - Local File Inclusion vulnerabilitySelect-Themes · Stockholm Core | High7.5 |
| CVE-2025-67539 | WordPress Select Core plugin < 2.6 - Cross Site Scripting (XSS) vulnerabilitySelect-Themes · Select Core | Medium6.5 |
| CVE-2025-67521 | WordPress Select Core plugin < 2.6 - Local File Inclusion vulnerabilitySelect-Themes · Select Core | High7.5 |
| CVE-2025-39463 | WordPress Dessau theme < 1.9 - Local File Inclusion vulnerabilitySelect-Themes · Dessau | High7.5 |
| CVE-2025-1564 | SetSail Membership <= 1.0.3 - Authentication Bypass via Account TakeoverSelect-Themes · SetSail Membership | Critical9.8 |
| CVE-2024-34554 | WordPress Stockholm Core plugin <= 2.4.1 - Local File Inclusion vulnerabilitySelect-Themes · Stockholm Core | High8.5 |
| CVE-2024-34552 | WordPress Stockholm theme <= 9.6 - Local File Inclusion vulnerabilitySelect-Themes · Stockholm | High8.5 |
| CVE-2024-34551 | WordPress Stockholm theme <= 9.6 - Unauthenticated Local File Inclusion vulnerabilitySelect-Themes · Stockholm | Critical9.0 |
| CVE-2024-34553 | WordPress Stockholm Core plugin <= 2.4.1 - Reflected Cross Site Scripting (XSS) vulnerabilitySelect-Themes · Stockholm Core | High7.1 |