Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,313All CVEsplus 19,140 rejected
- 463Last 24 hours2,730 in the last 7 days
- 16,921Last 30 days1,560 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 2 | 6 | 0 | 0 | 8 | 57 |
| 2025 | 0 | 2 | 10 | 0 | 0 | 12 | 49 |
| 2024 | 0 | 6 | 29 | 0 | 0 | 35 | 37 |
| 2023 | 0 | 1 | 1 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-66622 | WordPress Depicter Slider plugin <= 4.8.0 - SQL Injection vulnerabilityaverta · Depicter Slider | High7.5 |
| CVE-2026-56014 | WordPress Master Slider plugin <= 3.11.5 - Cross Site Scripting (XSS) vulnerabilityAverta · Master Slider | High7.1 |
| CVE-2026-48968 | WordPress Master Slider plugin <= 3.10.8 - Cross Site Scripting (XSS) vulnerabilityAverta · Master Slider | Medium6.5 |
| CVE-2025-68558 | WordPress Depicter Slider plugin <= 4.0.4 - Broken Access Control vulnerabilityaverta · Depicter Slider | Medium6.5 |
| CVE-2025-12379 | Shortcodes and extra features for Phlox theme <= 2.17.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading Widgetaverta · Shortcodes and extra features for Phlox theme | Medium6.4 |
| CVE-2025-4776 | Phlox <= 2.17.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-caption` HTML Attributeaverta · Phlox | Medium6.4 |
| CVE-2025-13215 | Shortcodes and extra features for Phlox theme <= 2.17.13 - Unauthenticated Draft Posts Information Exposureaverta · Shortcodes and extra features for Phlox theme | Medium5.3 |
| CVE-2025-11370 | Depicter <= 4.0.7 - Missing Authorization to Unauthenticated Display Rule Updatesaverta · Depicter — Popup & Slider Builder | Medium5.3 |
| CVE-2025-63071 | WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.15 - Sensitive Data Exposure vulnerabilityaverta · Shortcodes and extra features for Phlox theme | Medium5.3 |
| CVE-2025-63045 | WordPress Master Slider Pro plugin <= 3.7.12 - Cross Site Scripting (XSS) vulnerabilityaverta · Master Slider Pro | Medium6.5 |
| CVE-2025-12497 | Premium Portfolio Features for Phlox theme <= 2.3.10 - Unauthenticated Local File Inclusion via args[extra_template_path]averta · Premium Portfolio Features for Phlox theme | High8.1 |
| CVE-2025-11373 | Popup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Safe File Type Uploadaverta · Depicter — Popup & Slider Builder | Medium4.3 |
| CVE-2025-8383 | Depicter <= 4.0.4 - Cross-Site Request Forgeryaverta · Depicter — Popup & Slider Builder | Medium4.3 |
| CVE-2025-58025 | WordPress Master Slider Plugin <= 3.11.0 - Cross Site Scripting (XSS) Vulnerabilityaverta · Master Slider | Medium6.5 |
| CVE-2025-5291 | Master Slider <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via masterslider_pb and ms_slide Shortcodesaverta · Master Slider – Responsive Touch Slider | Medium6.4 |
| CVE-2025-39412 | WordPress Master Slider plugin <= 3.11.0 - Broken Access Control vulnerabilityaverta · Master Slider | Medium4.3 |
| CVE-2025-2011 | Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection via 's' Parameteraverta · Depicter — Popup & Slider Builder | High7.5 |
| CVE-2024-11731 | Master Slider – Responsive Touch Slider <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_slider Shortcodeaverta · Master Slider – Responsive Touch Slider | Medium6.4 |
| CVE-2024-13757 | Master Slider – Responsive Touch Slider <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer Shortcodeaverta · Master Slider – Responsive Touch Slider | Medium6.4 |
| CVE-2024-50500 | WordPress Phlox Core Elements plugin <= 2.17.4 - Broken Access Control vulnerabilityaverta · Shortcodes and extra features for Phlox theme | Medium4.3 |
| CVE-2024-12588 | Shortcodes and extra features for Phlox theme <= 2.17.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Staff Widgetaverta · Shortcodes and extra features for Phlox theme | Medium6.4 |
| CVE-2024-9545 | Shortcodes and extra features for Phlox theme <= 2.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via aux_contact_box and aux_gmaps Shortcodesaverta · Shortcodes and extra features for Phlox theme | Medium6.4 |
| CVE-2024-4633 | Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.2.1- Authenticated (Author+) Stored Cross-Site Scriptingaverta · Depicter — Popup & Slider Builder | Medium6.4 |
| CVE-2024-47359 | WordPress Depicter plugin <= 3.2.2 - Broken Access Control vulnerabilityaverta · Depicter Slider | Medium5.3 |
| CVE-2024-47381 | WordPress Slider & Popup Builder by Depicter plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerabilityaverta · Depicter Slider | Medium5.9 |
| CVE-2024-8486 | Shortcodes and extra features for Phlox theme <= 2.16.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker Widgetsaverta · Shortcodes and extra features for Phlox theme | Medium6.4 |
| CVE-2024-1384 | Premium Portfolio Features for Phlox theme <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scriptingaverta · Premium Portfolio Features for Phlox theme | Medium6.4 |
| CVE-2024-6339 | Phlox PRO <= 5.16.4 - Reflected Cross-Site Scripting via Search Parametersaverta · Phlox PRO | Medium6.1 |
| CVE-2024-4389 | Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.1.1 - Authenticated (Contributor+) Arbitrary File Uploadaverta · Depicter — Popup & Slider Builder | High8.8 |
| CVE-2024-43161 | WordPress Slider & Popup Builder by Depicter plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerabilityAverta · Depicter Slider | Medium5.9 |
| CVE-2024-37414 | WordPress Depicter Slider plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerabilityAverta · Depicter Slider | Medium5.9 |
| CVE-2024-3587 | Premium Portfolio Features for Phlox theme <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ' Grid Portfolios'averta · Premium Portfolio Features for Phlox theme | Medium6.4 |
| CVE-2024-37222 | WordPress Master Slider plugin <= 3.10.0 - Reflected Cross Site Scripting (XSS) vulnerabilityAverta · Master Slider | High7.1 |
| CVE-2024-4390 | Depicter <= 3.0.2 - Authenticated (Contributor+) Arbitrary Nonce Generationaverta · Depicter — Popup & Slider Builder | Medium6.5 |
| CVE-2023-50900 | WordPress Master Slider plugin <= 3.9.10 - Cross Site Request Forgery (CSRF) vulnerabilityAverta · Master Slider | Medium4.3 |
| CVE-2024-4375 | Master Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer Shortcodeaverta · Master Slider – Responsive Touch Slider | Medium6.4 |
| CVE-2023-6382 | Master Slider - Responsive Touch Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scriptingaverta · Master Slider – Responsive Touch Slider | Medium6.4 |
| CVE-2024-4470 | Master Slider – Responsive Touch Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scriptingaverta · Master Slider – Responsive Touch Slider | Medium6.4 |
| CVE-2023-39163 | WordPress Phlox Shop plugin <= 2.0.0 - Unauthenticated Local File Inclusion vulnerabilityAverta · Phlox Shop | High8.6 |
| CVE-2023-38399 | WordPress Phlox Portfolio plugin <= 2.3.1 - Unauthenticated Local File Inclusion vulnerabilityAverta · Phlox Portfolio | High8.6 |
| CVE-2023-7064 | Shortcodes and extra features for Phlox theme <= 2.17.5 - Authenticated (Subscriber+) PHP Object Injection via auxin_template_control_importeraverta · Shortcodes and extra features for Phlox theme | High7.5 |
| CVE-2024-3517 | Shortcodes and extra features for Phlox theme <= 2.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Widgetaverta · Shortcodes and extra features for Phlox theme | Medium6.4 |
| CVE-2024-1533 | Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scriptingaverta · Shortcodes and extra features for Phlox theme | Medium6.4 |
| CVE-2024-1396 | Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag'averta · Shortcodes and extra features for Phlox theme | Medium6.4 |
| CVE-2024-3341 | Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_gmaps' Shortcodeaverta · Shortcodes and extra features for Phlox theme | Medium6.4 |
| CVE-2024-1348 | Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JSaverta · Shortcodes and extra features for Phlox theme | Medium6.4 |
| CVE-2024-32600 | WordPress Master Slider plugin <= 3.9.5 - PHP Object Injection vulnerabilityAverta · Master Slider | High8.3 |
| CVE-2024-32580 | WordPress Master Slider plugin <= 3.9.8 - Cross Site Scripting (XSS) vulnerabilityAverta · Master Slider | Medium6.5 |
| CVE-2024-1357 | Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_timeline' Shortcodeaverta · Shortcodes and extra features for Phlox theme | Medium6.4 |
| CVE-2024-31099 | WordPress Phlox Core Elements plugin <= 2.15.7 - Broken Access Control vulnerabilityAverta · Shortcodes and extra features for Phlox theme | Medium6.4 |