Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 10 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,380All CVEsplus 19,159 rejected
- 656Last 24 hours4,932 in the last 7 days
- 18,773Last 30 days1,596 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 23 | 4 | 0 | 0 | 29 | 41 |
| 2025 | 0 | 7 | 5 | 0 | 0 | 12 | 12 |
| Title | ||
|---|---|---|
| CVE-2026-93429 | VikBooking Hotel Booking Engine & PMS <= 1.8.17 - Unauthenticated Stored Cross-Site Scripting via 'guests[][][documents]' Parametere4jvikwp · VikBooking Hotel Booking Engine & PMS | High7.2 |
| CVE-2026-116548 | VikRentCar Car Rental Management System <= 1.4.10 - Unauthenticated Stored Cross-Site Scripting via 'optionals' ParameterPublic exploite4jvikwp · VikRentCar Car Rental Management System | High7.2 |
| CVE-2026-115840 | VikRentCar Car Rental Management System <= 1.4.9 - Unauthenticated Stored Cross-Site Scripting via 'poplink' Parametere4jvikwp · VikRentCar Car Rental Management System | High7.2 |
| CVE-2026-116405 | WordPress VikRentCar plugin <= 1.4.9 - Cross Site Scripting (XSS) vulnerabilitye4jvikwp · VikRentCar | High7.1 |
| CVE-2026-28160 | WordPress VikRentCar plugin <= 1.4.10 - Cross Site Scripting (XSS) vulnerabilitye4jvikwp · VikRentCar | High7.1 |
| CVE-2026-116750 | VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) SQL Injection via 'catid' Block Attributee4jvikwp · VikRentCar Car Rental Management System | Medium6.5 |
| CVE-2026-116749 | VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'className' Block Attributee4jvikwp · VikRentCar Car Rental Management System | Medium6.4 |
| CVE-2026-111120 | VikRentCar Car Rental Management System <= 1.4.8 - Cross-Site Request Forgery to Remote Code Execution via 'condtext_update_tmpl' AJAX Taske4jvikwp · VikRentCar Car Rental Management System | High8.8 |
| CVE-2026-112835 | WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerabilitye4jvikwp · VikRentCar | High7.1 |
| CVE-2026-112838 | WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerabilitye4jvikwp · VikRentCar | High7.1 |
| CVE-2026-112836 | WordPress VikRentCar plugin <= 1.4.8 - Cross Site Request Forgery (CSRF) vulnerabilitye4jvikwp · VikRentCar | High8.8 |
| CVE-2026-95684 | VikBooking Hotel Booking Engine & PMS <= 1.8.15 - Unauthenticated Stored Cross-Site Scripting via 'attachments[name]' Parametere4jvikwp · VikBooking Hotel Booking Engine & PMS | High7.2 |
| CVE-2026-95591 | WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.14 - Cross Site Scripting (XSS) vulnerabilitye4jvikwp · VikBooking Hotel Booking Engine & PMS | High7.1 |
| CVE-2026-39790 | WordPress VikRentCar plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerabilitye4jvikwp · VikRentCar | High7.1 |
| CVE-2026-87115 | VikAppointments Services Booking Calendar <= 1.2.21 - Unauthenticated Arbitrary File Deletion via 'old_vapcfN' Parametere4jvikwp · VikAppointments Services Booking Calendar | Critical9.1 |
| CVE-2026-84768 | WordPress VikAppointments Services Booking Calendar plugin <= 1.2.20 - SQL Injection vulnerabilitye4jvikwp · VikAppointments Services Booking Calendar | Critical9.3 |
| CVE-2026-15918 | VikAppointments – Services Booking Calendar <= 1.2.19 - Unauthenticated SQL Injectione4jvikwp · VikAppointments Services Booking Calendar | High7.5 |
| CVE-2026-16143 | VikRentItems Flexible Rental Management System <= 1.2.1 - Unauthenticated Stored Cross-Site Scriptinge4jvikwp · VikRentItems Flexible Rental Management System | High7.2 |
| CVE-2026-15401 | VikBooking Hotel Booking Engine & PMS <= 1.8.13 - Unauthenticated Stored Cross-Site Scripting via Custom Field 'vbfX' Parametere4jvikwp · VikBooking Hotel Booking Engine & PMS | High7.2 |
| CVE-2026-15346 | VikBooking Hotel Booking Engine & PMS <= 1.8.13 - Reflected Cross-Site Scripting via 'category_id' Parametere4jvikwp · VikBooking Hotel Booking Engine & PMS | Medium6.1 |
| CVE-2026-6820 | VikBooking Hotel Booking Engine & PMS <= 1.8.8 - Unauthenticated Stored Cross-Site Scripting via Booking Form Email Fielde4jvikwp · VikBooking Hotel Booking Engine & PMS | High7.2 |
| CVE-2026-6818 | VikBooking Hotel Booking Engine & PMS <= 1.8.8 - Unauthenticated Stored Cross-Site Scripting via 'special_requests' Parametere4jvikwp · VikBooking Hotel Booking Engine & PMS | High7.2 |
| CVE-2026-57723 | WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.12 - CSRF to Arbitrary File Deletion vulnerabilitye4jvikwp · VikBooking Hotel Booking Engine & PMS | High7.4 |
| CVE-2026-12754 | VikBooking Hotel Booking Engine & PMS <= 1.8.12 - Reflected Cross-Site Scripting via 'layoutstyle' Parametere4jvikwp · VikBooking Hotel Booking Engine & PMS | Medium6.1 |
| CVE-2026-52699 | WordPress VikRentCar plugin <= 1.4.5 - Insecure Direct Object References (IDOR) vulnerabilitye4jvikwp · VikRentCar | High7.5 |
| CVE-2026-42683 | WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.8 - Cross Site Scripting (XSS) vulnerabilitye4jvikwp · VikBooking Hotel Booking Engine & PMS | High7.1 |
| CVE-2026-42762 | WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerabilitye4jvikwp · VikBooking Hotel Booking Engine & PMS | High7.1 |
| CVE-2026-42737 | WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.9 - Arbitrary File Deletion vulnerabilitye4jvikwp · VikBooking Hotel Booking Engine & PMS | High8.6 |
| CVE-2026-25025 | WordPress VikRestaurants plugin <= 1.5.2 - Reflected Cross Site Scripting (XSS) vulnerabilitye4jvikwp · VikRestaurants | High7.1 |
| CVE-2025-49918 | WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.2 - Sensitive Data Exposure vulnerabilitye4jvikwp · VikBooking Hotel Booking Engine & PMS | Medium5.9 |
| CVE-2025-14049 | VikRentItems Flexible Rental Management System <= 1.2.0 - Reflected Cross-Site Scripting via 'delto' Parametere4jvikwp · VikRentItems Flexible Rental Management System | Medium6.1 |
| CVE-2025-13724 | VikRentCar Car Rental Management System <= 1.4.4 - Authenticated (Author+) SQL Injection via 'month' Parametere4jvikwp · VikRentCar Car Rental Management System | High7.5 |
| CVE-2025-5803 | WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.2 - Broken Access Control vulnerabilitye4jvikwp · VikBooking Hotel Booking Engine & PMS | Medium5.3 |
| CVE-2025-57962 | WordPress VikRestaurants Table Reservations and Take-Away plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerabilitye4jvikwp · VikRestaurants | Medium5.9 |
| CVE-2025-57968 | WordPress VikRestaurants Table Reservations and Take-Away plugin <= 1.5 - Cross Site Scripting (XSS) vulnerabilitye4jvikwp · VikRestaurants | High7.1 |
| CVE-2025-5322 | VikRentCar Car Rental Management System <= 1.4.3 - Authenticated (Administrator+) Arbitrary File Uploade4jvikwp · VikRentCar Car Rental Management System | High7.2 |
| CVE-2025-46251 | WordPress VikRestaurants Table Reservations and Take-Away plugin <= 1.3.3 - CSRF to Stored XSS vulnerabilitye4jvikwp · VikRestaurants | High7.1 |
| CVE-2025-22670 | WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.7.2 - CSRF to Settings Change vulnerabilitye4jvikwp · VikBooking Hotel Booking Engine & PMS | Medium6.5 |
| CVE-2024-11640 | VikRentCar Car Rental Management System <= 1.4.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Uploade4jvikwp · VikRentCar Car Rental Management System | High8.8 |
| CVE-2024-11641 | VikBooking Hotel Booking Engine & PMS <= 1.7.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Uploade4jvikwp · VikBooking Hotel Booking Engine & PMS | High8.8 |
| CVE-2025-22719 | WordPress VikAppointments Services Booking Calendar plugin <= 1.2.16 - CSRF to Stored XSS vulnerabilitye4jvikwp · VikAppointments Services Booking Calendar | High7.1 |