Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 405,439All CVEsplus 19,159 rejected
  • 675Last 24 hours4,925 in the last 7 days
  • 18,820Last 30 days1,596 of them critical
  • 1,779Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
20260311001429
202501400515
202402600810
20230010012
20220010011

Latest CVEs

29 CVEs, newest first

CVEs, newest first
Title
CVE-2026-73186
WordPress Enable Media Replace plugin <= 4.2.2 - PHP Object Injection vulnerabilityShortPixel · Enable Media Replace
High8.8
CVE-2026-85655
Enable Media Replace <= 4.2.2 - Missing Authorization to Authenticated (Author+) Post Content Modification via Media Replacement Workflowshortpixel · Enable Media Replace
Medium4.3
CVE-2026-103070
WordPress ShortPixel Image Optimizer plugin <= 6.5.6 - Cross Site Scripting (XSS) vulnerabilityShortPixel · ShortPixel Image Optimizer
Medium6.5
CVE-2026-97246
WordPress ShortPixel Image Optimizer plugin <= 6.5.5 - PHP Object Injection vulnerabilityShortPixel · ShortPixel Image Optimizer
Medium4.9
CVE-2026-17086
ShortPixel Image Optimizer <= 6.5.5 - Authenticated (Author+) PHP Object Injection via Nested JSON Post Contentshortpixel · ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF
High8.8
CVE-2026-15345
ShortPixel Adaptive Images <= 3.11.5 - Missing Authorization to Authenticated (Subscriber+) Third-Party Plugin Option Modification via 'causer' Parametershortpixel · ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization
Medium4.3
CVE-2026-57342
WordPress ShortPixel Adaptive Images plugin <= 3.11.3 - Cross Site Scripting (XSS) vulnerabilityShortPixel · ShortPixel Adaptive Images
Medium6.5
CVE-2026-57722
WordPress Enable Media Replace plugin <= 4.2.1 - Cross Site Scripting (XSS) vulnerabilityShortPixel · Enable Media Replace
Medium5.9
CVE-2026-56066
WordPress ShortPixel Adaptive Images plugin <= 3.11.4 - Arbitrary File Deletion vulnerabilityShortPixel · ShortPixel Adaptive Images
Medium5.8
CVE-2026-39471
WordPress ShortPixel Image Optimizer plugin <= 6.4.3 - PHP Object Injection vulnerabilityShortPixel · ShortPixel Image Optimizer
High7.2
CVE-2026-5714
Enable Media Replace <= 4.1.8 - Authenticated (Author+) Stored Cross-Site Scripting via 'location_dir' Parametershortpixel · Enable Media Replace
Medium6.4
CVE-2026-4335
ShortPixel Image Optimizer <= 6.4.3 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Titleshortpixel · ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF
Medium5.4
CVE-2026-2732
Enable Media Replace <= 4.1.7 - Improper Authorization to Authenticated (Author+) Arbitrary Attachment Change via Background Replaceshortpixel · Enable Media Replace
Medium5.4
CVE-2026-1246
ShortPixel Image Optimizer <= 6.4.2 - Authenticated (Editor+) Arbitrary File Read via 'loadFile' Parametershortpixel · ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF
Medium4.9
CVE-2025-11378
ShortPixel Image Optimizer <= 6.3.4 - Authenticated (Contributor+) Settings Import/Exportshortpixel · ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF
Medium5.4
CVE-2025-9496
Enable Media Replace <= 4.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via file_modified Shortcodeshortpixel · Enable Media Replace
Medium6.4
CVE-2025-6626
ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization <= 3.10.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via API URLshortpixel · ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization
Medium4.4
CVE-2025-31081
WordPress Enable Media Replace plugin <= 4.1.5 - Reflected Cross Site Scripting (XSS) vulnerabilityShortPixel · Enable Media Replace
High7.1
CVE-2025-30853
WordPress ShortPixel Adaptive Images plugin <= 3.10.0 - Broken Authentication vulnerabilityShortPixel · ShortPixel Adaptive Images
Medium5.4
CVE-2024-48044
WordPress ShortPixel Image Optimizer plugin <= 5.6.3 - Broken Access Control vulnerabilityShortPixel · ShortPixel Image Optimizer
Medium5.4
CVE-2024-48043
WordPress ShortPixel Image Optimizer plugin <= 5.6.3 - SQL Injection vulnerabilityShortPixel · ShortPixel Image Optimizer
High7.6
CVE-2024-5945
WP SVG Images <= 4.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVGshortpixel · WP SVG Images
Medium6.4
CVE-2024-35172
WordPress ShortPixel Adaptive Images plugin <= 3.8.3 - Server Side Request Forgery (SSRF) vulnerabilityShortPixel · ShortPixel Adaptive Images
Medium4.4
CVE-2024-4689
WordPress ShortPixel Adaptive Images plugin <= 3.8.3 - Cross Site Request Forgery (CSRF) vulnerabilityShortPixel · ShortPixel Adaptive Images
Medium4.3
CVE-2024-32810
WordPress ShortPixel Critical CSS plugin <= 1.0.2 - Broken Access Control vulnerabilityShortPixel · ShortPixel Critical CSS
High7.6
CVE-2024-31230
WordPress ShortPixel Adaptive Images plugin <= 3.8.2 - Broken Access Control vulnerabilityShortPixel · ShortPixel Adaptive Images
Medium5.3
CVE-2023-6737
Enable Media Replace <= 4.1.4 - Reflected Cross-Site Scriptingshortpixel · Enable Media Replace
Medium4.7
CVE-2023-32512
WordPress ShortPixel Adaptive Images Plugin <= 3.7.1 is vulnerable to Cross Site Request Forgery (CSRF)ShortPixel · ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization
Medium4.3
CVE-2022-29417
WordPress ShortPixel Adaptive Images plugin <= 3.3.1 - Subscriber+ Plugin Settings Update vulnerabilityShortPixel · ShortPixel Adaptive Images (WordPress plugin)
Medium4.3