Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read just now.

At a glance

Published CVEs; rejected ones are not counted.

  • 405,491All CVEsplus 19,165 rejected
  • 602Last 24 hours4,931 in the last 7 days
  • 18,768Last 30 days1,596 of them critical
  • 1,779Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202600100110
20251040059
20241100024
20230100012
20221000011

Latest CVEs

10 CVEs, newest first

CVEs, newest first
Title
CVE-2026-120855
WordPress TI WooCommerce Wishlist plugin <= 2.14.0 - Cross Site Scripting (XSS) vulnerabilityTemplateInvaders · TI WooCommerce Wishlist
Medium6.5
CVE-2025-67929
WordPress TI WooCommerce Wishlist plugin <= 2.10.0 - Broken Access Control vulnerabilitytemplateinvaders · TI WooCommerce Wishlist
Medium5.3
CVE-2025-9207
TI WooCommerce Wishlist <= 2.10.0 - Unauthenticated HTML Injectiontemplateinvaders · TI WooCommerce Wishlist
Medium5.3
CVE-2025-58247
WordPress TI WooCommerce Wishlist plugin <= 2.10.0 - Broken Access Control vulnerabilitytemplateinvaders · TI WooCommerce Wishlist
Medium5.3
CVE-2025-47577
WordPress TI WooCommerce Wishlist plugin <= 2.9.2 - Arbitrary File Upload VulnerabilityPublic exploittemplateinvaders · TI WooCommerce Wishlist
Critical10.0
CVE-2025-32920
WordPress TI WooCommerce Wishlist plugin <= 2.10.0 - Cross Site Scripting (XSS) vulnerabilitytemplateinvaders · TI WooCommerce Wishlist
Medium6.5
CVE-2024-10567
TI WooCommerce Wishlist <= 2.9.1 - Missing Authorization to Unauthenticated Plugin Setup Wizard Accesstemplateinvaders · TI WooCommerce Wishlist
High7.5
CVE-2024-43917
WordPress TI WooCommerce Wishlist plugin <= 2.8.2 - SQL Injection vulnerabilityPublic exploitTemplateInvaders · TI WooCommerce Wishlist
Critical9.3
CVE-2020-36725
TI WooCommerce Wishlist <= 1.21.11 and TI WooCommerce Wishlist Pro <= 1.21.4 - Arbitrary Options UpdateTemplateInvaders · TI WooCommerce Wishlist Pro
High8.8
CVE-2022-0412
TI WooCommerce Wishlist < 1.40.1 - Unauthenticated Blind SQL InjectionPublic exploitTemplateInvaders · TI WooCommerce Wishlist
Critical9.8