Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 401,334All CVEsplus 19,141 rejected
  • 442Last 24 hours2,720 in the last 7 days
  • 16,914Last 30 days1,562 of them critical
  • 1,769Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202631000419
202523300815
20242130067
20230100011

Latest CVEs

19 CVEs, newest first

CVEs, newest first
Title
CVE-2026-15982
Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit <= 2.8.4 - Unauthenticated Privilege Escalation via 'aiomatic_call_google_ai_function'CodeRevolution · Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit
Critical9.8
CVE-2026-57719
WordPress Aimogen Pro plugin <= 2.8.3 - Arbitrary File Upload vulnerabilityCodeRevolution · Aimogen Pro
Critical10.0
CVE-2026-9009
Crawlomatic Multipage Scraper Post Generator <= 2.7.2 - Authenticated (Author+) Remote Code Execution via 'callback_raw' Shortcode AttributeCodeRevolution · Crawlomatic Multipage Scraper Post Generator
High8.8
CVE-2026-4038
Aimogen Pro <= 2.7.5 - Unauthenticated Privilege Escalation via Arbitrary Function CallCodeRevolution · Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit
Critical9.8
CVE-2025-6206
Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.5.0 - Authenticated (Subscriber+) Arbitrary File UploadCodeRevolution · Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit
High7.5
CVE-2025-49312
WordPress Echo RSS Feed Post Generator Plugin for WordPress plugin <= 5.4.8.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCodeRevolution · Echo RSS Feed Post Generator Plugin for WordPress
High7.1
CVE-2025-49294
WordPress Crawlomatic Multisite Scraper Post Generator plugin <= 2.6.8.2 - Sensitive Data Exposure via Log Exposure vulnerabilityCodeRevolution · Crawlomatic Multisite Scraper Post Generator
Medium5.3
CVE-2025-49293
WordPress Crawlomatic Multisite Scraper Post Generator plugin <= 2.6.8.2 - Broken Access Control VulnerabilityCodeRevolution · Crawlomatic Multisite Scraper Post Generator
Medium4.3
CVE-2025-4391
Echo RSS Feed Post Generator <= 5.4.8.1 - Unauthenticated Arbitrary File UploadCodeRevolution · Echo RSS Feed Post Generator
Critical9.8
CVE-2025-4389
Crawlomatic Multipage Scraper Post Generator <= 2.6.8.1 - Unauthenticated Arbitrary File UploadCodeRevolution · Crawlomatic Multipage Scraper Post Generator
Critical9.8
CVE-2024-13882
Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.3.8 - Missing Authorization to Authenticated (Contributor+) Arbitrary File UploadCodeRevolution · Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit
High8.8
CVE-2024-13816
Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.3.6 - Missing Authorization to Authenticated (Subscriber+) Multiple Administrator ActionsCodeRevolution · Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit
Medium5.4
CVE-2024-51681
WordPress WP Pocket URLs plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerabilityCodeRevolution · WP Pocket URLs
Medium6.5
CVE-2024-9265
Echo RSS Feed Post Generator <= 5.4.6 - Unauthenticated Privilege EscalationCodeRevolution · Echo RSS Feed Post Generator
Critical9.8
CVE-2024-5969
AIomatic - Automatic AI Content Writer <= 2.0.5 - Unauthenticated Arbitrary Email SendingCodeRevolution · Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit
Medium5.8
CVE-2024-34435
WordPress Aiomatic plugin <= 1.9.3 - Broken Access Control vulnerabilityCodeRevolution · Aiomatic
Medium4.3
CVE-2024-31290
WordPress Demo My WordPress plugin <= 1.0.9.1 - Unauthenticated Privilege Escalation vulnerabilityCodeRevolution · Demo My WordPress
Critical9.8
CVE-2024-25917
WordPress WP Setup Wizard plugin <= 1.0.8.1 - Auth. Full Database Download VulnerabilityCodeRevolution · WP Setup Wizard
High8.8
CVE-2023-49176
WordPress WP Pocket URLs Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)CodeRevolution · WP Pocket URLs
High7.1