Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,772All CVEsplus 19,170 rejected
- 394Last 24 hours4,883 in the last 7 days
- 16,928Last 30 days1,491 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 4 | 1 | 0 | 0 | 7 | 15 |
| 2025 | 0 | 1 | 3 | 0 | 0 | 4 | 8 |
| 2024 | 0 | 3 | 1 | 0 | 0 | 4 | 4 |
| Title | ||
|---|---|---|
| CVE-2026-9253 | WP Cost Estimation & Payment Forms Builder (E&P Forms) <= 10.5.97 - Unauthenticated Stored Cross-Site Scripting via 'customerInfos' Parameterloopus · WP Cost Estimation & Payment Forms Builder | High7.2 |
| CVE-2026-24363 | WordPress WP Cost Estimation & Payment Forms Builder plugin < 10.3.0 - Broken Access Control vulnerabilityloopus · WP Cost Estimation & Payment Forms Builder | High7.5 |
| CVE-2026-28115 | WordPress WP Attractive Donations System - Easy Stripe & Paypal donations plugin <= 1.25 - SQL Injection vulnerabilityloopus · WP Attractive Donations System - Easy Stripe & Paypal donations | Critical9.3 |
| CVE-2025-22725 | WordPress WP Virtual Assistant plugin <= 3.1 - Cross Site Scripting (XSS) vulnerabilityloopus · WP Virtual Assistant | High7.1 |
| CVE-2025-22715 | WordPress WP Attractive Donations System - Easy Stripe & Paypal donations plugin <= 1.25 - Arbitrary Content Deletion vulnerabilityloopus · WP Attractive Donations System - Easy Stripe & Paypal donations | High7.5 |
| CVE-2019-25296 | WP Cost Estimation <= 9.642 - Missing Authorization to Arbitrary File Upload/DeletePublic exploitloopus · WP Cost Estimation & Payment Forms Builder | Critical9.8 |
| CVE-2019-25295 | WP Cost Estimation < 9.660 - Upload Directory Traversalloopus · WP Cost Estimation & Payment Forms Builder | Medium6.5 |
| CVE-2025-58999 | WordPress WP Attractive Donations System - Easy Stripe & Paypal donations plugin <= 1.25 - Cross Site Request Forgery (CSRF) vulnerabilityloopus · WP Attractive Donations System - Easy Stripe & Paypal donations | Medium4.3 |
| CVE-2025-60155 | WordPress WP Virtual Assistant Plugin <= 3.0 - Broken Access Control Vulnerabilityloopus · WP Virtual Assistant | Medium5.3 |
| CVE-2025-58956 | WordPress WP Attractive Donations System Plugin < 1.29 - Cross Site Request Forgery (CSRF) Vulnerabilityloopus · WP Attractive Donations System | High7.1 |
| CVE-2025-31921 | WordPress WP Ultimate Tours Builder plugin <= 1.055 - Cross Site Request Forgery (CSRF) Vulnerabilityloopus · WP Ultimate Tours Builder | Medium4.3 |
| CVE-2024-35737 | WordPress WP Visitors Tracker plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerabilityLoopus · WP Visitors Tracker | High7.1 |
| CVE-2024-32510 | WordPress WP Cost Estimation & Payment Forms Builder plugin <= 10.1.75 - Reflected Cross Site Scripting (XSS) vulnerabilityLoopus · WP Cost Estimation & Payment Forms Builder | High7.1 |
| CVE-2024-32509 | WordPress WP Cost Estimation & Payment Forms Builder plugin <= 10.1.76 - Broken Access Control vulnerabilityLoopus · WP Cost Estimation & Payment Forms Builder | Medium6.5 |
| CVE-2024-30489 | WordPress WP Cost Estimation & Payment Forms Builder plugin <= 10.1.75 - SQL Injection vulnerabilityloopus · WP Cost Estimation & Payment Forms Builder | High8.5 |