Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 405,479All CVEsplus 19,161 rejected
  • 614Last 24 hours4,919 in the last 7 days
  • 18,766Last 30 days1,593 of them critical
  • 1,779Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202600400410
20250020026
20240220044

Latest CVEs

10 CVEs, newest first

CVEs, newest first
Title
CVE-2026-9187
Abandoned Contact Form 7 <= 2.2 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'recover_id' Parameterzealopensource · Abandoned Contact Form 7
Medium5.3
CVE-2026-5693
Smart Appointment & Booking <= 1.0.8 - Missing Authorization to Unauthenticated Arbitrary Booking Cancellationzealopensource · Smart Appointment & Booking
Medium5.3
CVE-2026-0742
Smart Appointment & Booking <= 1.0.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via saab_save_form_data AJAX Actionzealopensource · Smart Appointment & Booking
Medium6.4
CVE-2025-12825
User Registration Using Contact Form 7 <= 2.5 - Authenticated (Subscriber+) Information Exposurezealopensource · User Registration Using Contact Form 7
Medium5.3
CVE-2025-12834
Accept Stripe Payments Using Contact Form 7 <= 3.1 - Reflected Cross-Site Scripting via failure_messagezealopensource · Accept Stripe Payments Using Contact Form 7
Medium6.1
CVE-2025-2883
Accept SagePay Payments Using Contact Form 7 <= 2.0 - Unauthenticated Information Exposurezealopensource · Accept SagePay Payments Using Contact Form 7
Medium5.3
CVE-2024-12250
Accept Authorize.NET Payments Using Contact Form 7 <= 2.2 - Unauthenticated Information Exposurezealopensource · Accept Authorize.NET Payments Using Contact Form 7
Medium5.3
CVE-2024-12255
Accept Stripe Payments Using Contact Form 7 <= 2.5 - Unauthenticated Information Exposurezealopensource · Accept Stripe Payments Using Contact Form 7
Medium5.3
CVE-2024-6316
Generate PDF using Contact Form 7 <= 4.1.2 - Cross-Site Request Forgery to Arbitrary File Uploadzealopensource · Generate PDF using Contact Form 7
High8.8
CVE-2024-6317
Generate PDF using Contact Form 7 <= 4.1.2 - Cross-Site Request Forgery to Arbitrary File Deletionzealopensource · Generate PDF using Contact Form 7
High8.8