Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,284All CVEsplus 19,159 rejected
- 574Last 24 hours4,857 in the last 7 days
- 18,774Last 30 days1,611 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 1 | 9 | 0 | 0 | 11 | 16 |
| 2025 | 0 | 2 | 2 | 0 | 0 | 4 | 5 |
| 2024 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-118800 | aBlocks <= 2.18.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'headingTag' Block Attributekodezen · aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder | Medium6.4 |
| CVE-2026-118801 | aBlocks <= 2.18.0 - Authenticated (Contributor+) Sensitive Information Exposure in 'ablocks_template' Shortcodekodezen · aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder | Medium4.3 |
| CVE-2026-120544 | Academy LMS <= 4.0.1 - Authenticated (Contributor+) Arbitrary HTML File Read via 'id' Parameter in /wp/v2/templates REST Routekodezen · Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning | Medium4.3 |
| CVE-2026-110018 | aBlocks <= 2.17.0 - Authenticated (Contributor+) Privilege Escalation to 'roleSlug' Block Attributekodezen · aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder | High8.8 |
| CVE-2026-104022 | Academy LMS <= 4.0.3 - Authenticated (Custom+) Privilege Escalation to add_child REST endpointkodezen · Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning | Medium5.4 |
| CVE-2026-104915 | Academy LMS <= 4.0.3 - Missing Authorization to Authenticated (Custom+) Arbitrary Academy Comment Deletion via delete_lesson_comment AJAX — Attacker-Controlled course_id vs. Target comment_idkodezen · Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning | Medium6.5 |
| CVE-2026-15056 | StoreEngine <= 2.1.1 - Authenticated (Vendor+) Arbitrary File Read via Path Traversal in Downloadable File URLkodezen · StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More | Medium6.5 |
| CVE-2026-9341 | Academy LMS <= 3.8.0 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'user_id' Parameterkodezen · Academy LMS | Medium4.3 |
| CVE-2026-5348 | Academy LMS <= 3.8.1 - Unauthenticated Insecure Direct Object Reference to Private Topic Disclosurekodezen · Academy LMS – WordPress LMS Plugin for Complete eLearning Solution | Medium5.3 |
| CVE-2025-15521 | Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.5.0 - Unauthenticated Privilege Escalation via Account Takeoverkodezen · Academy LMS – WordPress LMS Plugin for Complete eLearning Solution | Critical9.8 |
| CVE-2025-12449 | aBlocks – WordPress Gutenberg Blocks <= 2.4.0 - Missing Authorization to Authenticated (Subscriber+) Settings Modificationkodezen · aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder | Medium5.4 |
| CVE-2025-12099 | Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.3.8 - Authenticated (Administrator+) PHP Object Injection via 'import_all_courses'kodezen · Academy LMS – WordPress LMS Plugin for Complete eLearning Solution | High7.2 |
| CVE-2025-9216 | StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File UploadPublic exploitkodezen · StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More | High8.8 |
| CVE-2025-9215 | StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File DownloadPublic exploitkodezen · StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More | Medium6.5 |
| CVE-2024-13465 | aBlocks – WordPress Gutenberg Blocks <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scriptingkodezen · aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder | Medium6.4 |
| CVE-2024-1505 | Academy LMS – eLearning and online course solution for WordPress <= 1.9.19 - Authenticated (Subscriber+) Privilege Escalationkodezen · Academy LMS – WordPress LMS Plugin for Complete eLearning Solution | High8.8 |