Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,554All CVEsplus 18,890 rejected
- 407Last 24 hours3,025 in the last 7 days
- 17,428Last 30 days1,599 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 2 | 3 | 0 | 0 | 5 | 33 |
| 2025 | 0 | 1 | 3 | 0 | 0 | 4 | 28 |
| 2024 | 0 | 2 | 3 | 0 | 0 | 5 | 24 |
| 2023 | 0 | 2 | 9 | 6 | 0 | 17 | 19 |
| 2022 | 0 | 0 | 0 | 1 | 0 | 1 | 2 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2019 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2018 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2017 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-39772 | WordPress Captcha by BestWebSoft plugin <= 5.2.8 - Bypass Vulnerability vulnerabilitybestwebsoft · Captcha by BestWebSoft | Medium5.3 |
| CVE-2026-2497 | Gallery by BestWebSoft <= 4.7.9 - Authenticated (Editor+) SQL Injection via Gallery Image Order Array Keysbestwebsoft · Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress | High7.2 |
| CVE-2026-66456 | WordPress Profile Extra Fields by BestWebSoft plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerabilitybestwebsoft · Profile Extra Fields by BestWebSoft | Medium6.5 |
| CVE-2026-57642 | WordPress Gallery plugin <= 4.7.8 - SQL Injection vulnerabilitybestwebsoft · Gallery | High8.5 |
| CVE-2026-24598 | WordPress Multilanguage by BestWebSoft plugin <= 1.5.2 - Broken Access Control vulnerabilitybestwebsoft · Multilanguage by BestWebSoft | Medium4.3 |
| CVE-2025-63056 | WordPress Contact Form by BestWebSoft plugin <= 4.3.6 - Broken Access Control vulnerabilitybestwebsoft · Contact Form by BestWebSoft | Medium4.3 |
| CVE-2025-9950 | Error Log Viewer by BestWebSoft <= 1.1.6 - Authenticated (Administrator+) Arbitrary File Readbestwebsoft · Error Log Viewer by BestWebSoft | Medium4.9 |
| CVE-2024-13906 | Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress <= 4.7.3 - Authenticated (Administrator+) PHP Object Injectionbestwebsoft · Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress | High7.2 |
| CVE-2025-24628 | WordPress reCaptcha by BestWebSoft Plugin <= 1.78 - Captcha Bypass vulnerabilitybestwebsoft · Google Captcha | Medium5.3 |
| CVE-2024-35678 | WordPress Contact Form to DB by BestWebSoft plugin <= 1.7.2 - SQL Injection vulnerabilityBestWebSoft · Contact Form to DB by BestWebSoft | High8.5 |
| CVE-2024-31295 | WordPress Captcha by BestWebSoft plugin <= 5.2.0 - Captcha Bypass vulnerabilityBestWebSoft · Captcha by BestWebSoft | Medium5.3 |
| CVE-2024-2198 | Contact Form by BestWebSoft <= 4.2.8 - Reflected Cross-Site Scripting via cntctfrm_contact_addressbestwebsoft · Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress | Medium6.1 |
| CVE-2024-2200 | Contact Form by BestWebSoft <= 4.2.8 - Reflected Cross-Site Scripting via cntctfrm_contact_subjectbestwebsoft · Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress | Medium6.1 |
| CVE-2024-30439 | WordPress Limit Attempts by BestWebSoft plugin <= 1.2.9 - Reflected Cross Site Scripting (XSS) vulnerabilityBestWebSoft · Limit Attempts by BestWebSoft | High7.1 |
| CVE-2014-125109 | BestWebSoft Portfolio Plugin bws_menu.php bws_add_menu_render cross site scriptingBestWebSoft · Portfolio Plugin | Low3.5 |
| CVE-2012-10017 | BestWebSoft Portfolio Plugin cross-site request forgeryBestWebSoft · Portfolio Plugin | Medium4.3 |
| CVE-2023-29096 | WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.0 is vulnerable to SQL InjectionBestWebSoft · Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress | High8.5 |
| CVE-2023-36527 | WordPress Post to CSV by BestWebSoft Plugin <= 1.4.0 is vulnerable to CSV InjectionBestWebSoft · Post to CSV by BestWebSoft | Medium4.7 |
| CVE-2023-36508 | WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.1 is vulnerable to SQL InjectionBestWebSoft · Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress | High7.6 |
| CVE-2023-4469 | Profile Extra Fields by BestWebSoft <= 1.2.7 - Missing Authorization to Sensitive Information Exposurebestwebsoft · Profile Extra Fields by BestWebSoft | Medium5.3 |
| CVE-2023-28778 | WordPress Pagination by BestWebSoft Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)BestWebSoft · Pagination | Medium5.9 |
| CVE-2014-125103 | BestWebSoft Twitter Plugin twitter.php twttr_settings_page cross site scriptingBestWebSoft · Twitter Plugin | Low2.4 |
| CVE-2012-10015 | BestWebSoft Twitter Plugin Settings Page twitter.php twttr_settings_page cross-site request forgeryBestWebSoft · Twitter Plugin | Medium4.3 |
| CVE-2014-125102 | Bestwebsoft Relevant Plugin Thumbnail information disclosureBestwebsoft · Relevant Plugin | Medium4.3 |
| CVE-2014-125100 | BestWebSoft Job Board Plugin cross site scriptingBestWebSoft · Job Board Plugin | Low3.5 |
| CVE-2022-44734 | WordPress Car Rental by BestWebSoft Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)BestWebSoft · Car Rental by BestWebSoft | Medium4.8 |
| CVE-2014-125097 | BestWebSoft Facebook Like Button facebook-button-plugin.php fcbkbttn_settings_page cross site scriptingBestWebSoft · Facebook Like Button | Low3.5 |
| CVE-2012-10012 | BestWebSoft Facebook Like Button facebook-button-plugin.php fcbk_bttn_plgn_settings_page cross-site request forgeryBestWebSoft · Facebook Like Button | Medium4.3 |
| CVE-2014-125095 | BestWebSoft Contact Form Plugin bws_menu.php bws_add_menu_render cross site scriptingBestWebSoft · Contact Form Plugin | Low3.5 |
| CVE-2012-10010 | BestWebSoft Contact Form contact_form.php cntctfrm_settings_page cross-site request forgeryBestWebSoft · Contact Form | Medium4.3 |
| CVE-2013-10022 | BestWebSoft Contact Form Plugin contact_form.php cntctfrm_check_form cross site scriptingBestWebSoft · Contact Form Plugin | Low3.5 |
| CVE-2017-20055 | BestWebSoft Contact Form Plugin Stored cross site scritingBestWebSoft · Contact Form Plugin | Low3.5 |
| CVE-2017-2171 | Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact…BestWebSoft · Captcha | Medium6.1 |