Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 406,521All CVEsplus 19,172 rejected
- 753Last 24 hours5,191 in the last 7 days
- 16,859Last 30 days1,479 of them critical
- 1,781Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 1 | 7 | 0 | 0 | 8 | 14 |
| 2025 | 0 | 1 | 0 | 0 | 0 | 1 | 6 |
| 2024 | 0 | 0 | 3 | 0 | 0 | 3 | 5 |
| 2023 | 0 | 0 | 2 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-11996 | Advanced Popups <= 1.2.3 - Authenticated (Author+) Stored Cross-Site Scripting via 'Notification Button Link' Fieldcodesupplyco · Advanced Popups | Medium6.4 |
| CVE-2026-2390 | Powerkit <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lazy Load Image Processingcodesupplyco · Powerkit – Supercharge your WordPress Site | Medium6.4 |
| CVE-2026-28178 | WordPress Powerkit plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerabilitycodesupplyco · Powerkit | Medium6.5 |
| CVE-2026-15644 | Powerkit <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attributecodesupplyco · Powerkit – Supercharge your WordPress Site | Medium6.4 |
| CVE-2026-15649 | Powerkit <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributescodesupplyco · Powerkit – Supercharge your WordPress Site | Medium6.4 |
| CVE-2026-15645 | Powerkit <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'nav' Shortcode Attributecodesupplyco · Powerkit – Supercharge your WordPress Site | Medium6.4 |
| CVE-2026-39559 | WordPress Uppercase theme < 1.2.2 - Local File Inclusion vulnerabilitycodesupplyco · Uppercase | High8.1 |
| CVE-2026-9629 | Canvas <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag' Block Attributecodesupplyco · Canvas | Medium6.4 |
| CVE-2025-52723 | WordPress Networker theme <= 1.2.0 - Local File Inclusion Vulnerabilitycodesupplyco · Networker | High8.1 |
| CVE-2024-9025 | Sight – Professional Image Gallery and Portfolio <= 1.1.2 - Missing Authorization to Sensitive Information Exposure in handler_post_titlecodesupplyco · Sight – Professional Image Gallery and Portfolio | Medium5.3 |
| CVE-2024-2458 | Powerkit – Supercharge your WordPress Site <= 2.9.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcodecodesupplyco · Powerkit – Supercharge your WordPress Site | Medium6.4 |
| CVE-2024-2962 | Networker - Tech News WordPress Theme with Dark Mode <= 1.1.9 - Missing AuthorizationPublic exploitcodesupplyco · Networker - Tech News WordPress Theme with Dark Mode | Medium5.3 |
| CVE-2021-4426 | Absolute Reviews <= 1.0.8 - Cross-Site Request Forgery Bypasscodesupplyco · Absolute Reviews | Medium4.3 |
| CVE-2021-4421 | Advanced Popups <= 1.1.1 - Cross-Site Request Forgery Bypasscodesupplyco · Advanced Popups | Medium4.3 |