Skip to content
CVE Tracker

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 400,111All CVEsplus 18,873 rejected
  • 792Last 24 hours3,268 in the last 7 days
  • 17,396Last 30 days1,568 of them critical
  • 1,767Known exploitedin the CISA KEV catalog

CVEs published per day

In the last 90 days, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
4 Nov 202600000019,289
3 Nov 20260016001619,289
2 Nov 202600000019,273
1 Nov 202611100319,273
31 Oct 202600000019,270
30 Oct 202661933005819,270
29 Oct 20262840580012619,212
28 Oct 20263143002019,086
27 Oct 202610000119,066
26 Oct 20260339104319,065
25 Oct 202600000019,022
24 Oct 2026496001919,022
23 Oct 20261382002319,003
22 Oct 20263923003518,980
21 Oct 20263106001918,945
20 Oct 20260110001118,926
19 Oct 20262314001918,915
18 Oct 2026384001518,896
17 Oct 202603100418,881
16 Oct 20262510001718,877
15 Oct 20266924003918,860
14 Oct 20262176002518,821
13 Oct 20260226002818,796
12 Oct 20260224102718,768
11 Oct 202600000018,741
10 Oct 20266385120016018,741
9 Oct 202674923007918,581
8 Oct 20260618002418,502
7 Oct 202621111002418,478
6 Oct 20261888240013018,454
5 Oct 202621542005918,324
4 Oct 202615100718,265
3 Oct 202603000318,258
2 Oct 20260111101318,255
1 Oct 202621922004318,242
30 Sept 2026881601015018,199
29 Sept 202600000018,049
28 Sept 202600000018,049
27 Sept 202600000018,049
26 Sept 202600000018,049
25 Sept 202601000118,049
24 Sept 202600000018,048
23 Sept 202612029005018,048
22 Sept 202602000217,998
21 Sept 202600000017,996
20 Sept 202600000017,996
19 Sept 202600000017,996
18 Sept 202601000117,996
17 Sept 202631319003517,995
16 Sept 202601000117,960
15 Sept 202600000017,959
14 Sept 202600000017,959
13 Sept 202600000017,959
12 Sept 202600000017,959
11 Sept 20262615002317,959
10 Sept 202611511002717,936
9 Sept 202600000017,909
8 Sept 2026082001017,909
7 Sept 202600000017,899
6 Sept 202600000017,899
5 Sept 202600000017,899
4 Sept 202601500617,899
3 Sept 202662021004717,893
2 Sept 202621311002617,846
1 Sept 202600000017,820
31 Aug 20267147002817,820
30 Aug 202600000017,792
29 Aug 202600000017,792
28 Aug 2026156001217,792
27 Aug 20267166002917,780
26 Aug 202600000017,751
25 Aug 202600000017,751
24 Aug 2026132911005317,751
23 Aug 202600000017,698
22 Aug 202600000017,698
21 Aug 202600000017,698
20 Aug 202619267005217,698
19 Aug 202610121002317,646
18 Aug 20261949360010417,623
17 Aug 202600000017,519
16 Aug 202600000017,519
15 Aug 202600000017,519
14 Aug 202600000017,519
13 Aug 20262058290010717,519
12 Aug 202610000117,412
11 Aug 202600000017,411
10 Aug 202600100117,411
9 Aug 202600000017,410
8 Aug 202600000017,410
7 Aug 202600000017,410
6 Aug 2026244627009717,410

Latest CVEs

1,976 CVEs published in the last 90 days, newest first

CVEs, newest first
Title
CVE-2026-119509
WordPress ClickCease Click Fraud Protection plugin <= 3.3.0 - Broken Access Control vulnerabilityeranfl · ClickCease Click Fraud Protection
Medium5.3
CVE-2026-97072
WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerabilitymyCred · myCred
Medium4.3
CVE-2026-114187
WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerabilityWPVibes · AnyWhere Elementor
Medium5.3
CVE-2026-103077
WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerabilitymyCred · myCred
Medium4.3
CVE-2026-114185
WordPress AnyWhere Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerabilityWPVibes · AnyWhere Elementor
Medium6.5
CVE-2026-119485
WordPress Dokan plugin <= 5.3.2 - Broken Access Control vulnerabilityweDevs · Dokan
Medium5.3
CVE-2026-39777
WordPress WCFM Membership plugin <= 2.12.0 - Broken Access Control vulnerabilityWC Lovers · WCFM Membership
Medium4.3
CVE-2026-119487
WordPress Dokan plugin <= 5.3.2 - Broken Access Control vulnerabilityweDevs · Dokan
Medium5.3
CVE-2026-120843
WordPress Posts Table with Search & Sort plugin <= 1.4.14 - Cross Site Scripting (XSS) vulnerabilityBarn2 Plugins · Posts Table with Search & Sort
Medium6.5
CVE-2026-114183
WordPress AnyWhere Elementor plugin <= 1.3.0 - Sensitive Data Exposure vulnerabilityWPVibes · AnyWhere Elementor
Medium6.5
CVE-2026-116859
WordPress Forminator plugin <= 1.58.3 - Broken Access Control vulnerabilityWPMU DEV · Forminator
Medium5.3
CVE-2026-116858
WordPress Forminator plugin <= 1.58.3 - Content Injection vulnerabilityWPMU DEV · Forminator
Medium4.3
CVE-2026-39743
WordPress WCFM Membership plugin <= 2.12.0 - Broken Access Control vulnerabilityWC Lovers · WCFM Membership
Medium5.3
CVE-2026-120846
WordPress Uncanny Automator plugin <= 7.7.1 - Broken Access Control vulnerabilityUncanny Owl · Uncanny Automator
Medium5.3
CVE-2026-119521
WordPress Paid Member Subscriptions plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerabilityCozmoslabs · Paid Member Subscriptions
Medium6.5
CVE-2026-119495
WordPress Better Search plugin <= 4.5.2 - Broken Access Control vulnerabilityWebberZone · Better Search
Medium5.3
CVE-2026-66570
WordPress WordPress File Upload plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerabilityNickboss · WordPress File Upload
High7.1
CVE-2026-119480
WordPress JetFormBuilder plugin <= 3.6.7.1 - Attachment Deletion Via Media-Field Preset vulnerabilityCrocoblock · JetFormBuilder
Medium6.5
CVE-2026-62048
WordPress BookIt plugin <= 2.6.0.6 - SQL Injection vulnerabilityLiquid Web / StellarWP · BookIt
Critical9.3
CVE-2026-118090
WordPress MasterStudy LMS plugin <= 3.7.55 - PHP Object Injection vulnerabilityStylemix · MasterStudy LMS
High8.8
CVE-2026-118089
WordPress Product Feed Manager plugin <= 7.14.1 - PHP Object Injection vulnerabilityRexTheme · Product Feed Manager
High7.2
CVE-2026-118086
WordPress WP BASE Booking plugin <= 6.5.2 - Privilege Escalation vulnerabilityHakan Ozevin · WP BASE Booking
High8.8
CVE-2026-116862
WordPress WP REST Cache plugin <= 2026.3.1 - Broken Access Control vulnerabilityAcato · WP REST Cache
High7.5
CVE-2026-116861
WordPress Flexible Chat plugin <= 1.1.0 - Sensitive Data Exposure vulnerabilitywpdesk · Flexible Chat
High7.5
CVE-2026-116854
WordPress WP Customer Area plugin <= 8.4.0 - Cross Site Scripting (XSS) vulnerabilityAguila Technologies · WP Customer Area
Medium6.5
CVE-2026-116853
WordPress GiveWP plugin <= 4.19.0.1 - Broken Access Control vulnerabilityNexcess · GiveWP
Medium6.5
CVE-2026-116852
WordPress Widget Options plugin <= 4.2.5 - Remote Code Execution (RCE) vulnerabilityMarketing Fire · Widget Options
Critical9.1
CVE-2026-116851
WordPress eCommerce Product Catalog plugin <= 3.6.5 - Cross Site Scripting (XSS) vulnerabilityimpleCode · eCommerce Product Catalog
High7.1
CVE-2026-116847
WordPress Mang Board WP plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerabilityKitae Park · Mang Board WP
High7.1
CVE-2026-116410
WordPress Masteriyo - LMS plugin <= 3.4.3 - Arbitrary Content Deletion vulnerabilitymasteriyo · Masteriyo - LMS
Medium6.5
CVE-2026-116405
WordPress VikRentCar plugin <= 1.4.9 - Cross Site Scripting (XSS) vulnerabilitye4jvikwp · VikRentCar
High7.1
CVE-2026-116401
WordPress HUSKY plugin <= 1.4.6 - Broken Access Control vulnerabilityRealMag777 · HUSKY
High7.5
CVE-2026-116386
WordPress SMS Alert Order Notifications plugin <= 4.0.2 - Privilege Escalation vulnerabilityCozy Vision Technologies Pvt. Ltd. · SMS Alert Order Notifications
Critical9.8
CVE-2026-115947
WordPress HUSKY plugin <= 1.4.6 - Sensitive Data Exposure vulnerabilityRealMag777 · HUSKY
Medium6.5
CVE-2026-115604
WordPress SureDash plugin <= 1.12.3 - Arbitrary File Deletion vulnerabilityBrainstorm Force · SureDash
Medium5.0
CVE-2026-114711
WordPress MultiVendorX plugin <= 5.0.20 - Cross Site Scripting (XSS) vulnerabilityMultiVendorX · MultiVendorX
Medium6.5
CVE-2026-107868
WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Bypass Vulnerability vulnerabilityYITHEMES · YITH WooCommerce Product Add-Ons
Medium5.3
CVE-2026-105077
WordPress Ad Inserter plugin <= 2.8.19 - Cross Site Scripting (XSS) vulnerabilitySpacetime · Ad Inserter
High7.1
CVE-2026-94175
WordPress All In One Login plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerabilitySaad Iqbal · All In One Login
High7.1
CVE-2026-90888
WordPress LeadSnap plugin <= 1.25 - PHP Object Injection vulnerabilityleadsnap · LeadSnap
Critical9.8
CVE-2026-78527
WordPress GS Testimonial Slider plugin <= 3.3.10 - PHP Object Injection vulnerabilityGS Plugins · GS Testimonial Slider
High8.8
CVE-2026-73186
WordPress Enable Media Replace plugin <= 4.2.2 - PHP Object Injection vulnerabilityShortPixel · Enable Media Replace
High8.8
CVE-2026-54855
WordPress Profile Builder plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerabilityCozmoslabs · Profile Builder
High7.1
CVE-2026-54854
WordPress Profile Builder plugin <= 4.0.5 - Privilege Escalation vulnerabilityCozmoslabs · Profile Builder
Medium6.3
CVE-2026-54850
WordPress Booking and Rental Manager plugin <= 2.8.2 - Broken Access Control vulnerabilitymagepeopleteam · Booking and Rental Manager
Medium6.5
CVE-2026-48201
WordPress Fast Velocity Minify plugin <= 3.5.7 - Cross Site Scripting (XSS) vulnerabilityRaul P. · Fast Velocity Minify
High7.1
CVE-2026-39786
WordPress BA Book Everything plugin <= 1.8.33 - Cross Site Scripting (XSS) vulnerabilitybookingalgorithms · BA Book Everything
High7.1
CVE-2026-39738
WordPress FunnelKit Automations plugin <= 3.8.6.1 - PHP Object Injection vulnerabilityAman · FunnelKit Automations
Critical9.8
CVE-2026-39734
WordPress WP EasyPay plugin <= 4.5.4 - Path Traversal vulnerabilitySaad Iqbal · WP EasyPay
High7.5
CVE-2026-39732
WordPress Transliterator plugin <= 2.5.13 - SQL Injection vulnerabilityIvijan-Stefan Stipic · Transliterator
Critical9.3