Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 10 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,974All CVEsplus 19,118 rejected
- 407Last 24 hours2,833 in the last 7 days
- 16,799Last 30 days1,544 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 19 | 16 | 0 | 0 | 37 | 71 |
| 2025 | 1 | 1 | 4 | 0 | 0 | 6 | 34 |
| 2024 | 1 | 3 | 19 | 0 | 0 | 23 | 28 |
| 2023 | 0 | 2 | 2 | 0 | 0 | 4 | 5 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2021 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-118081 | WordPress 10Web Social Photo Feed plugin <= 1.5.6 - PHP Object Injection vulnerability10Web · 10Web Social Photo Feed | High8.8 |
| CVE-2026-103896 | 10Web Booster <= 2.34.5 - Unauthenticated Limited File Write / Cache Poisoning via Query-string Parameter Traversal in Page-Cache Path10web · 10Web Booster – Website speed optimization, Cache & Page Speed optimizer | High7.5 |
| CVE-2026-18557 | Photo Gallery by 10Web <= 1.8.42 - Reflected Cross-Site Scripting via 'title' Parameter10web · Photo Gallery by 10Web – Mobile-Friendly Image Gallery | Medium6.1 |
| CVE-2026-108587 | 10Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' Parameter10web · 10Web Booster – Website speed optimization, Cache & Page Speed optimizer | Critical9.8 |
| CVE-2026-95808 | Form Maker by 10Web <= 1.15.48 - Unauthenticated SQL Injection via 'inputs' Parameter10web · Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder | High7.5 |
| CVE-2026-42715 | WordPress Photo Gallery by 10Web plugin <= 1.8.47 - Cross Site Scripting (XSS) vulnerability10Web · Photo Gallery by 10Web | High7.1 |
| CVE-2026-42711 | WordPress Slider by 10Web plugin <= 1.2.63 - Cross Site Scripting (XSS) vulnerability10Web · Slider by 10Web | High7.1 |
| CVE-2026-105885 | WordPress Slider by 10Web plugin <= 1.2.62 - PHP Object Injection vulnerability10Web · Slider by 10Web | High8.8 |
| CVE-2026-107742 | 10Web Booster <= 2.34.8 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name10web · 10Web Booster – Website speed optimization, Cache & Page Speed optimizer | High7.2 |
| CVE-2026-103998 | Form Maker by 10Web <= 1.15.48 - Reflected Cross-Site Scripting via 'inputs' Parameter Array Key10web · Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder | Medium6.1 |
| CVE-2026-42710 | WordPress Slider by 10Web plugin <= 1.2.63 - SQL Injection vulnerability10Web · Slider by 10Web | High7.6 |
| CVE-2026-39787 | WordPress 10Web Social Photo Feed plugin <= 1.4.35 - Broken Access Control vulnerability10Web · 10Web Social Photo Feed | Medium6.5 |
| CVE-2026-92974 | Photo Gallery by 10Web <= 1.8.46 - Reflected Cross-Site Scripting via 'thumb_url' Parameter10web · Photo Gallery by 10Web – Mobile-Friendly Image Gallery | Medium6.1 |
| CVE-2026-96813 | Form Maker by 10Web <= 1.15.47 - Unauthenticated Stored Cross-Site Scripting via Mark on Map Longitude/Latitude Fields10web · Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder | High7.2 |
| CVE-2026-102377 | WordPress Photo Gallery by 10Web plugin <= 1.8.46 - PHP Object Injection vulnerability10Web · Photo Gallery by 10Web | High8.8 |
| CVE-2026-94121 | WordPress 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin <= 2.33.6 - PHP Object Injection vulnerability10Web · 10Web Booster – Website speed optimization, Cache & Page Speed optimizer | High8.8 |
| CVE-2026-85652 | Photo Gallery by 10Web <= 1.8.44 - Authenticated (Author+) SQL Injection via 'album_id' Shortcode Attribute10web · Photo Gallery by 10Web – Mobile-Friendly Image Gallery | Medium6.5 |
| CVE-2026-86311 | Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.44 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes10web · Photo Gallery by 10Web – Mobile-Friendly Image Gallery | Medium6.4 |
| CVE-2026-85645 | Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.46 - Reflected Cross-Site Scripting10web · Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder | Medium6.1 |
| CVE-2026-66616 | WordPress Form Maker by 10Web plugin <= 1.15.49 - Cross Site Scripting (XSS) vulnerability10Web · Form Maker by 10Web | High7.1 |
| CVE-2026-66635 | WordPress Slider by 10Web plugin <= 1.2.63 - Cross Site Request Forgery (CSRF) vulnerability10Web · Slider by 10Web | High7.4 |
| CVE-2026-15993 | Form Maker by 10Web <= 1.15.44 - Authenticated (Subscriber+) SQL Injection via '{username}' Placeholder in Dynamic-Choice Field WHERE Clause10web · Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder | Medium5.3 |
| CVE-2026-11776 | Form Maker by 10Web <= 1.15.43 - Authenticated (Adminsitrator+) SQL Injection via 'groupids' Parameter10web · Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder | Medium4.9 |
| CVE-2026-11777 | Form Maker by 10Web <= 1.15.43 - Authenticated (Administrator+) SQL Injection via 'name' Parameter10web · Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder | Medium4.9 |
| CVE-2026-39502 | WordPress Form Maker by 10Web plugin <= 1.15.38 - SQL Injection vulnerability10Web · Form Maker by 10Web | Critical9.3 |
| CVE-2026-9829 | Photo Gallery by 10Web <= 1.8.41 - Authenticated (Contributor+) SQL Injection via 'compact_album_order_by' Shortcode Parameter10web · Photo Gallery by 10Web – Mobile-Friendly Image Gallery | Medium6.5 |
| CVE-2026-49771 | WordPress Photo Gallery by 10Web plugin <= 1.8.41 - SQL Injection vulnerability10Web · Photo Gallery by 10Web | High7.6 |
| CVE-2026-7048 | Photo Gallery by 10Web <= 1.8.40 - Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode Attribute10web · Photo Gallery by 10Web – Mobile-Friendly Image Gallery | Medium6.5 |
| CVE-2018-25346 | WordPress Form Maker Plugin 1.12.24 SQL Injection via admin-ajax.php10Web · Form Maker | High7.1 |
| CVE-2026-3359 | Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.42 - Unauthenticated SQL Injection via 'inputs'10web · Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder | High7.5 |
| CVE-2026-3330 | Form Maker by 10Web <= 1.15.40 - Authenticated (Administrator+) SQL Injection via 'ip_search' Parameter10web · Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder | Medium4.9 |
| CVE-2026-4388 | Form Maker by 10Web <= 1.15.40 - Unauthenticated Stored Cross-Site Scripting via Matrix Field Text Box10web · Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder | High7.2 |
| CVE-2026-32330 | WordPress Photo Gallery by 10Web plugin <= 1.8.37 - Cross Site Request Forgery (CSRF) vulnerability10Web · Photo Gallery by 10Web | Medium4.3 |
| CVE-2026-27360 | WordPress Photo Gallery by 10Web plugin <= 1.8.38 - Cross Site Scripting (XSS) vulnerability10Web · Photo Gallery by 10Web | Medium5.9 |
| CVE-2026-1058 | Form Maker by 10Web <= 1.15.35 - Unauthenticated Stored Cross-Site Scripting via Hidden Field10web · Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder | High7.1 |
| CVE-2026-1065 | Form Maker by 10Web <= 1.15.35 - Unauthenticated Stored Cross-Site Scripting via SVG file10web · Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder | High7.2 |
| CVE-2026-1036 | Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.36 - Missing Authorization to Unauthenticated Arbitrary Comment Deletion10web · Photo Gallery by 10Web – Mobile-Friendly Image Gallery | Medium5.3 |
| CVE-2025-13377 | 10Web Booster <= 2.32.7 - Authenticated (Subscriber+) Arbitrary Folder Deletion via two_clear_page_cache10web · 10Web Booster – Website speed optimization, Cache & Page Speed optimizer | Critical9.6 |
| CVE-2020-36853 | 10WebMapBuilder <= 1.0.63 - Unauthenticated Stored Cross-Site Scripting via Plugin Settings Change10web · 10Web Map Builder for Google Maps | High7.2 |
| CVE-2025-48341 | WordPress Form Maker by 10Web plugin <= 1.15.33 - Cross Site Scripting (XSS) Vulnerability10Web · Form Maker by 10Web | Medium5.9 |
| CVE-2025-2269 | Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.34 Reflected Cross-Site Scripting via 'image_id' Parameter10web · Photo Gallery by 10Web – Mobile-Friendly Image Gallery | Medium6.1 |
| CVE-2023-45272 | WordPress 10Web Map Builder for Google Maps plugin <= 1.0.73 - Notice Dismissal Vulnerability10Web · 10Web Map Builder for Google Maps | Medium5.4 |
| CVE-2023-47807 | WordPress 10WebAnalytics plugin <= 1.2.12 - Broken Access Control vulnerability10Web · 10WebAnalytics | Medium4.3 |
| CVE-2024-5020 | Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Libraryextendthemes · Colibri Page Builder | Medium6.4 |
| CVE-2024-10265 | Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.30 - Reflected Cross-Site Scripting via add_query_arg Parameter10web · Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder | Medium6.1 |
| CVE-2024-9878 | Photo Gallery by 10Web <= 1.8.30 - Authenticated (Administrator+) Stored Cross-Site Scripting10web · Photo Gallery by 10Web – Mobile-Friendly Image Gallery | Medium4.4 |
| CVE-2024-9607 | 10Web Social Post Feed <= 1.2.9 - Reflected Cross-Site Scripting10web · 10Web Social Post Feed | Medium6.1 |
| CVE-2024-44043 | WordPress Photo Gallery by 10Web plugin <= 1.8.27 - Cross Site Scripting (XSS) vulnerability10Web · Photo Gallery by 10Web | Medium5.9 |
| CVE-2024-8633 | Form Maker <= 1.15.27 - Authenticated (Administrator+) Stored Cross-Site Scripting10web · Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder | Medium5.5 |
| CVE-2024-7150 | Slider by 10Web – Responsive Image Slider <= 1.2.57 - Authenticated (Contributor+) SQL Injection via id Parameter10web · Slider by 10Web – Responsive Image Slider | High8.8 |