Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 406,414All CVEsplus 19,170 rejected
  • 782Last 24 hours5,187 in the last 7 days
  • 16,960Last 30 days1,488 of them critical
  • 1,779Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202600400411
20250030037
20240040044

Latest CVEs

11 CVEs, newest first

CVEs, newest first
Title
CVE-2026-8625
Dear Flipbook <= 2.4.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via '.df-element' Element Inner HTMLdearhive · DearFlip – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer
Medium6.4
CVE-2026-8623
Dear Flipbook <= 2.4.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via '.dvcss' Element Class Attributedearhive · DearFlip – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer
Medium6.4
CVE-2026-49047
WordPress DearFlip plugin <= 2.4.27 - Broken Access Control vulnerabilityDearHive · DearFlip
Medium4.3
CVE-2026-2569
Dear Flipbook <= 2.4.20 - Authenticated (Auhtor+) Stored Cross-Site Scripting via PDF Page Labelsdearhive · Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer
Medium6.4
CVE-2025-5314
Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer <= 2.3.65 - DOM-Based Reflected Cross-Site Scripting via 'pdf-source'dearhive · Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer
Medium6.1
CVE-2024-11830
Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer <= 2.3.52 - Authenticated (Contributor+) Stored Cross-Site Scriptingdearhive · Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer
Medium6.4
CVE-2025-22319
WordPress MashShare plugin <= 4.0.47 - Broken Access Control vulnerabilityDearHive · Social Media Share Buttons | MashShare
Medium4.3
CVE-2024-8717
PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer – DearFlip <= 2.3.32 - Reflected Cross-Site Scriptingdearhive · Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer
Medium6.1
CVE-2024-29807
WordPress DearFlip plugin <= 2.2.26 - Cross Site Scripting (XSS) vulnerabilityDearHive · DearFlip
Medium6.5
CVE-2024-0895
PDF Flipbook, 3D Flipbook – DearFlip <= 2.2.26 - Authenticated (Contributor+) Stored Cross-Site Scriptingdearhive · Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer
Medium5.4
CVE-2024-23505
WordPress PDF Viewer & 3D PDF Flipbook – DearPDF Plugin <= 2.0.38 is vulnerable to Cross Site Scripting (XSS)DearHive · PDF Viewer & 3D PDF Flipbook – DearPDF
Medium6.5