Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,965All CVEsplus 19,118 rejected
- 398Last 24 hours2,831 in the last 7 days
- 16,815Last 30 days1,547 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 1 | 6 | 0 | 0 | 7 | 31 |
| 2025 | 0 | 4 | 11 | 0 | 0 | 15 | 24 |
| 2024 | 0 | 0 | 5 | 0 | 0 | 5 | 9 |
| 2023 | 0 | 1 | 3 | 0 | 0 | 4 | 4 |
| Title | ||
|---|---|---|
| CVE-2026-16601 | CM Map Locations <= 2.1.8 - Authenticated (Subscriber+) Arbitrary File Upload via cmloc_route_image_upload AJAX Actioncreativemindssolutions · CM Map Locations – Visualize and share your locations in a few clicks | High8.8 |
| CVE-2026-8892 | CM Business Directory <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Business Address Meta Fieldscreativemindssolutions · CM Business Directory – Optimise and showcase local business | Medium6.4 |
| CVE-2026-9236 | CM Ad Changer <= 2.0.7 - Cross-Site Request Forgery to Campaign Deletion via Campaign Managementcreativemindssolutions · CM Ad Changer – A simple tool to control and optimize your site's banners | Medium4.3 |
| CVE-2026-2432 | CM Custom Reports <= 1.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Labelscreativemindssolutions · CM Custom Reports – Flexible reporting to track what matters most | Medium4.4 |
| CVE-2026-2431 | CM Custom Reports <= 1.2.7 - Reflected Cross-Site Scripting via 'date_from' and 'date_to' Parameterscreativemindssolutions · CM Custom Reports – Flexible reporting to track what matters most | Medium6.1 |
| CVE-2026-25004 | WordPress CM Business Directory plugin <= 1.5.3 - Cross Site Scripting (XSS) vulnerabilityCreativeMindsSolutions · CM Business Directory | Medium5.9 |
| CVE-2026-0691 | CM E-Mail Blacklist <= 1.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'black_email' Parametercreativemindssolutions · CM E-Mail Blacklist – Simple email filtering for safer registration | Medium4.4 |
| CVE-2025-54045 | WordPress CM On Demand Search And Replace plugin <= 1.5.5 - Broken Access Control vulnerabilityCreativeMindsSolutions · CM On Demand Search And Replace | Medium4.3 |
| CVE-2025-11167 | CM Registration – Tailored tool for seamless login and invitation-based registrations <= 2.5.6 - Open Redirectcreativemindssolutions · CM Registration – Tailored tool for seamless login and invitation-based registrations | Medium4.7 |
| CVE-2025-10178 | CM Business Directory <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scriptingcreativemindssolutions · CM Business Directory – Optimise and showcase local business | Medium6.4 |
| CVE-2025-48151 | WordPress CM Map Locations <= 2.1.6 - Cross Site Scripting (XSS) VulnerabilityCreativeMindsSolutions · CM Map Locations | High7.1 |
| CVE-2025-54727 | WordPress CM On Demand Search And Replace Plugin <= 1.5.2 - Cross Site Scripting (XSS) VulnerabilityCreativeMindsSolutions · CM On Demand Search And Replace | Medium5.9 |
| CVE-2025-54728 | WordPress CM On Demand Search And Replace Plugin <= 1.5.2 - Cross Site Request Forgery (CSRF) VulnerabilityCreativeMindsSolutions · CM On Demand Search And Replace | Medium4.3 |
| CVE-2025-54018 | WordPress CM Pop-Up banners plugin <= 1.8.4 - Broken Access Control VulnerabilityCreativeMindsSolutions · CM Pop-Up banners | Medium4.3 |
| CVE-2025-46246 | WordPress CM Answers plugin <= 3.3.3 - Cross Site Request Forgery (CSRF) VulnerabilityCreativeMindsSolutions · CM Answers | Medium4.3 |
| CVE-2025-46245 | WordPress CM Ad Changer plugin <= 2.0.5 - Cross Site Request Forgery (CSRF) VulnerabilityCreativeMindsSolutions · CM Ad Changer | Medium4.3 |
| CVE-2025-32210 | WordPress CM Registration and Invitation Codes plugin <= 2.5.6 - Broken Access Control vulnerabilityCreativeMindsSolutions · CM Registration and Invitation Codes | Medium6.5 |
| CVE-2025-31091 | WordPress CM Header and Footer plugin <= 1.2.4 - Cross Site Scripting (XSS) VulnerabilityCreativeMindsSolutions · CM Header and Footer | Medium6.5 |
| CVE-2025-30910 | WordPress CM Download Manager plugin <= 2.9.6 - Arbitrary File Deletion vulnerabilityCreativeMindsSolutions · CM Download Manager | High8.6 |
| CVE-2025-2166 | CM FAQ – Simplify support with an intuitive FAQ management tool <= 1.2.5 - Reflected Cross-Site Scriptingcreativemindssolutions · CM FAQ – Simplify support with an intuitive FAQ management tool | Medium6.1 |
| CVE-2025-24758 | WordPress CM Map Locations plugin <= 2.0.8 - Reflected Cross Site Scripting (XSS) vulnerabilityCreativeMindsSolutions · CM Map Locations | High7.1 |
| CVE-2025-24694 | WordPress CM Pop-Up Banners plugin <= 1.7.6 - Reflected Cross Site Scripting (XSS) vulnerabilityCreativeMindsSolutions · CM Pop-Up banners | High7.1 |
| CVE-2024-54267 | WordPress CM Answers plugin <= 3.2.6 - Broken Access Control vulnerabilityCreativeMindsSolutions · CM Answers | Medium4.3 |
| CVE-2024-11202 | Multiple Plugins <= (Various Versions) - Reflected Cross-Site Scripting via cminds_free_guide Shortcodecreativemindssolutions · CM Header and Footer – Add custom scripts and styles to your header and footer with ease | Medium6.1 |
| CVE-2024-48041 | WordPress CM Tooltip Glossary plugin <= 4.3.9 - Stored Cross-Site Scripting vulnerabilityCreativeMindsSolutions · CM Tooltip Glossary | Medium6.5 |
| CVE-2024-43149 | WordPress CM Tooltip Glossary Plugin <= 4.3.7 - Cross Site Scripting (XSS) vulnerabilityCreativeMindsSolutions · CM Tooltip Glossary | Medium6.5 |
| CVE-2024-4086 | CM Tooltip Glossary – Powerful Glossary Plugin <= 4.2.11 - Cross-Site Request Forgerycreativemindssolutions · CM Tooltip Glossary | Medium4.3 |
| CVE-2023-30750 | WordPress CM Pop-Up banners Plugin <= 1.5.10 is vulnerable to SQL InjectionCreativeMindsSolutions · CM Popup Plugin for WordPress | High8.5 |
| CVE-2023-28749 | WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Request Forgery (CSRF)CreativeMindsSolutions · CM On Demand Search And Replace | Medium4.3 |
| CVE-2023-31228 | WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)CreativeMindsSolutions · CM On Demand Search And Replace | Medium5.9 |
| CVE-2023-25992 | WordPress CM Answers Plugin <= 3.1.9 is vulnerable to Cross Site Scripting (XSS)CreativeMindsSolutions · CM Answers | Medium5.9 |