Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read just now.
At a glance
Published CVEs; rejected ones are not counted.
- 400,905All CVEsplus 19,118 rejected
- 348Last 24 hours2,786 in the last 7 days
- 16,766Last 30 days1,547 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 7 | 2 | 0 | 0 | 0 | 9 | 19 |
| 2025 | 3 | 5 | 2 | 0 | 0 | 10 | 10 |
| Title | ||
|---|---|---|
| CVE-2026-112822 | WordPress Workreap Core plugin < 3.4.4 - SQL Injection vulnerabilityAmentoTech · Workreap Core | High8.5 |
| CVE-2026-39773 | WordPress Doctreat Core plugin <= 1.7.0 - Privilege Escalation vulnerabilityAmentoTech · Doctreat Core | Critical10.0 |
| CVE-2026-39770 | WordPress Doctreat theme <= 1.7.0 - Arbitrary File Upload vulnerabilityAmentoTech · Doctreat | Critical10.0 |
| CVE-2026-39759 | WordPress Workreap Core plugin <= 3.4.5 - Arbitrary File Upload vulnerabilityAmentoTech · Workreap Core | Critical9.9 |
| CVE-2026-39757 | WordPress Taskbot plugin <= 6.6 - Arbitrary File Upload vulnerabilityAmentoTech · Taskbot | Critical9.9 |
| CVE-2026-39753 | WordPress Taskbot plugin <= 6.6 - Privilege Escalation vulnerabilityAmentoTech · Taskbot | Critical9.8 |
| CVE-2025-6254 | Doctreat Core <= 1.6.8 - Unauthenticated Privilege EscalationAmentoTech · Doctreat Core | Critical9.8 |
| CVE-2025-69101 | WordPress Workreap Core plugin <= 3.4.1 - Broken Authentication vulnerabilityAmentoTech · Workreap Core | Critical9.8 |
| CVE-2025-22728 | WordPress Workreap (theme's plugin) plugin <= 3.3.6 - SQL Injection vulnerabilityAmentoTech · Workreap (theme's plugin) | High8.5 |
| CVE-2025-64235 | WordPress Tuturn plugin < 3.6 - Arbitrary File Download vulnerabilityAmentoTech · Tuturn | Medium6.5 |
| CVE-2025-64236 | WordPress Tuturn plugin < 3.6 - Broken Authentication vulnerabilityAmentoTech · Tuturn | Critical9.8 |
| CVE-2025-59566 | WordPress Workreap (theme's plugin) plugin <= 3.3.5 - Arbitrary File Deletion vulnerabilityAmentoTech · Workreap (theme's plugin) | High7.7 |
| CVE-2025-58971 | WordPress Doctreat theme <= 1.6.7 - Cross Site Scripting (XSS) VulnerabilityAmentoTech · Doctreat | High7.1 |
| CVE-2025-58970 | WordPress Doctreat theme <= 1.6.7 - Content Injection vulnerabilityAmentoTech · Doctreat | Medium6.3 |
| CVE-2025-58959 | WordPress Taskbot plugin <= 6.4 - Arbitrary File Deletion vulnerabilityAmentoTech · Taskbot | High7.7 |
| CVE-2025-4973 | Workreap <= 3.3.1 - Authentication Bypass via 'workreap_verify_user_account'AmentoTech · Workreap | Critical9.8 |
| CVE-2025-5012 | Workreap <= 3.3.2 - Authenticated (Subscriber+) Arbitrary File Upload via 'workreap_temp_upload_to_media'AmentoTech · Workreap | High8.8 |
| CVE-2025-31920 | WordPress WP Guppy plugin <= 4.3.3 - SQL Injection VulnerabilityAmentoTech · WP Guppy | High8.5 |
| CVE-2024-13446 | Workreap <= 3.2.5 - Unauthenticated Privilege Escalation via Account TakeoverAmentoTech · Workreap | Critical9.8 |