Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 406,229All CVEsplus 19,170 rejected
  • 649Last 24 hours5,124 in the last 7 days
  • 17,085Last 30 days1,498 of them critical
  • 1,779Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202601000115
202505400914
20241110035
20232000022

Latest CVEs

15 CVEs, newest first

CVEs, newest first
Title
CVE-2026-56045
WordPress Automatic plugin < 3.135.1 - Cross Site Scripting (XSS) vulnerabilityValvePress · Automatic
High7.1
CVE-2025-6247
WordPress Automatic Plugin - AI content generator and auto poster plugin <= 3.118.0 - Cross-Site Request Forgery to Stored Cross-Site ScriptingValvePress · WordPress Automatic Plugin
Medium4.7
CVE-2025-39510
WordPress Pinterest Automatic Pin plugin < 4.19.0 - SQL Injection vulnerabilityValvePress · Pinterest Automatic Pin
High8.5
CVE-2025-46500
WordPress Wordpress Auto Spinner plugin <= 3.26.0 - Reflected Cross Site Scripting (XSS) vulnerabilityValvePress · Wordpress Auto Spinner
High7.1
CVE-2025-39487
WordPress Rankie plugin <= 1.8.2 - Reflected Cross Site Scripting (XSS) vulnerabilityValvePress · Rankie
High7.1
CVE-2025-39486
WordPress Rankie plugin < 1.8.2 - SQL Injection vulnerabilityValvePress · Rankie
High8.5
CVE-2025-5395
WordPress Automatic Plugin - AI content generator and auto poster plugin <= 3.115.0 - Authenticated (Author+) Arbitrary File UploadValvePress · WordPress Automatic Plugin
High8.8
CVE-2025-39493
WordPress Rankie plugin < 1.8.2 - Broken Access Control VulnerabilityValvePress · Rankie
Medium4.3
CVE-2025-39511
WordPress Pinterest Automatic Pin plugin <= 4.19.0 - Broken Access Control VulnerabilityValvePress · Pinterest Automatic Pin
Medium4.3
CVE-2025-47534
WordPress Wordpress Auto Spinner plugin <= 3.25.0 - Broken Access Control VulnerabilityValvePress · Wordpress Auto Spinner
Medium4.3
CVE-2024-4849
WordPress Automatic <= 3.94.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via autoplay ParameterValvePress · WordPress Automatic Plugin
Medium6.4
CVE-2024-32693
WordPress Automatic plugin < 3.93.0 - Multiple Cross Site Request Forgery (CSRF) vulnerabilityValvePress · Automatic
High7.6
CVE-2024-27956
WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerabilityPublic exploitValvePress · Automatic
Critical9.9
CVE-2021-4380
Pinterest Automatic <= 4.14.3 - Unuathenticated Arbitrary Options UpdatePublic exploitValvePress · Pinterest Automatic
Critical9.8
CVE-2021-4374
WordPress Automatic Plugin <= 3.53.2 - Unauthenticated Arbitrary Options UpdatePublic exploitValvePress · WordPress Automatic Plugin
Critical9.1