Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 406,521All CVEsplus 19,172 rejected
  • 755Last 24 hours5,191 in the last 7 days
  • 16,860Last 30 days1,479 of them critical
  • 1,781Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
20260111001224
202505100612
20241230066

Latest CVEs

24 CVEs, newest first

CVEs, newest first
Title
CVE-2026-104768
AutomatorWP <= 6.0.4 - Unauthenticated Privilege Escalation to Insufficient Role Validation in Anonymous Automation 'Role' Optionrubengc · AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI
High7.5
CVE-2026-121792
GamiPress <= 8.1.1 - Authenticated (Subscriber+) SQL Injection via 'Gravity Forms Name/List Field' Parameterrubengc · GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI
Medium6.5
CVE-2026-104728
AutomatorWP <= 5.8.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via wp_ajax_automatorwp_fluentform_get_forms AJAX Actionrubengc · AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI
Medium4.3
CVE-2026-14379
GamiPress <= 7.9.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'video_id' Parameterrubengc · GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI
Medium6.4
CVE-2026-15439
GamiPress <= 7.9.7 - Authenticated (Subscriber+) SQL Injectionrubengc · GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI
Medium6.5
CVE-2026-76074
AutomatorWP <= 5.8.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via automatorwp_campaign_monitor_get_lists AJAX Actionrubengc · AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress
Medium4.3
CVE-2026-76057
AutomatorWP <= 5.8.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via automatorwp_convertkit_get_forms AJAX Actionrubengc · AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress
Medium4.3
CVE-2026-16091
GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gamipress_rank' Shortcoderubengc · GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress
Medium6.4
CVE-2026-16090
GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via gamipress_achievement Shortcoderubengc · GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress
Medium6.4
CVE-2026-15730
GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'heading_size' Shortcode Attributerubengc · GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress
Medium6.4
CVE-2026-13450
GamiPress <= 7.9.4 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'access' Parameterrubengc · GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress
Medium5.3
CVE-2025-13812
GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.6.1 - Missing Authorization to Authenticated (Subscriber+) Information Exposurerubengc · GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress
Medium4.3
CVE-2025-9539
AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress <= 5.3.6 - Missing Authorization To Authenticated (Subscriber+) Remote Code Execution via Automation Creationrubengc · AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress
High8.0
CVE-2025-9542
AutomatorWP <= 5.3.7 - Authenticated (Subscriber+) Missing Authorization to Multiple Functionsrubengc · AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress
Medium5.4
CVE-2025-5487
AutomatorWP <= 5.2.5 - Authenticated (Administrator+) SQL Injection via field_conditionsrubengc · AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress
High7.2
CVE-2024-13496
GamiPress <= 7.3.1 - Unauthenticated SQL Injection via orderby ParameterPublic exploitrubengc · GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress
High7.5
CVE-2024-13499
GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_do_shortcode() Functionrubengc · GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress
High7.3
CVE-2024-13495
GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_ajax_get_logs Functionrubengc · GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress
High7.3
CVE-2024-12626
AutomatorWP <= 5.0.9 - Reflected Cross-Site Scripting via a-0-o-search_field_valuerubengc · AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress
Critical9.6
CVE-2024-11036
GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.1.5 - Unauthenticated Arbitrary Shortcode Execution via gamipress_get_user_earningsrubengc · GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress
High7.3
CVE-2024-5536
GamiPress – Link <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scriptingrubengc · GamiPress – Link
Medium6.4
CVE-2024-2783
GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 6.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcoderubengc · GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress
Medium6.4
CVE-2024-1799
GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 6.8.6 - Authenticated (Contributor+) SQL Injection via Shortcoderubengc · GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress
High8.8
CVE-2024-2460
GamiPress – Button <= 1.0.7 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcoderubengc · GamiPress – Button
Medium6.4