Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 400,995All CVEsplus 19,118 rejected
  • 427Last 24 hours2,851 in the last 7 days
  • 16,813Last 30 days1,542 of them critical
  • 1,768Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202603200522
2025047001117
20243300066

Latest CVEs

22 CVEs, newest first

CVEs, newest first
Title
CVE-2026-42414
WordPress ListingPro plugin <= 2.9.12 - SQL Injection vulnerabilityCridioStudio · ListingPro
High8.5
CVE-2026-65478
WordPress ListingPro plugin <= 2.9.10 - Broken Access Control vulnerabilityCridioStudio · ListingPro
Medium5.4
CVE-2026-56046
WordPress ListingPro theme <= 2.9.11 - Cross Site Scripting (XSS) vulnerabilityCridioStudio · ListingPro
Medium6.5
CVE-2026-28122
WordPress ListingPro plugin <= 2.9.8 - Reflected Cross Site Scripting (XSS) vulnerabilityCridioStudio · ListingPro
High7.1
CVE-2025-69051
WordPress ListingPro Reviews theme <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerabilityCridioStudio · ListingPro Reviews
High7.1
CVE-2025-64378
WordPress ListingPro theme < 2.9.10 - Broken Access Control vulnerabilityCridioStudio · ListingPro
High7.1
CVE-2025-64377
WordPress ListingPro theme < 2.9.10 - Local File Inclusion vulnerabilityCridioStudio · ListingPro
High8.1
CVE-2025-64376
WordPress ListingPro theme < 2.9.10 - Cross Site Scripting (XSS) vulnerabilityCridioStudio · ListingPro
High7.1
CVE-2025-63039
WordPress ListingPro theme <= 2.9.9 - Broken Access Control vulnerabilityCridioStudio · ListingPro
Medium6.5
CVE-2025-63049
WordPress ListingPro Lead Form plugin <= 1.0.7 - Broken Access Control vulnerabilityCridioStudio · ListingPro Lead Form
Medium5.3
CVE-2025-63048
WordPress ListingPro Lead Form plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerabilityCridioStudio · ListingPro Lead Form
Medium6.5
CVE-2025-63047
WordPress ListingPro theme <= 2.9.9 - Broken Access Control vulnerabilityCridioStudio · ListingPro
Medium5.3
CVE-2025-63046
WordPress ListingPro plugin <= 2.9.9 - Cross Site Scripting (XSS) vulnerabilityCridioStudio · ListingPro
Medium6.5
CVE-2025-60103
WordPress ListingPro plugin <= 2.9.8 - Broken Access Control vulnerabilityCridioStudio · ListingPro
Medium5.4
CVE-2025-58667
WordPress ListingPro Reviews plugin < 2.9.11 - Broken Access Control vulnerabilityCridioStudio · ListingPro Reviews
Medium5.4
CVE-2024-39623
WordPress ListingPro theme <= 2.9.4 - Cross Site Request Forgery (CSRF) to Account Takeover vulnerabilityCridioStudio · ListingPro
High8.8
CVE-2024-39622
WordPress ListingPro theme <= 2.9.4 - Unauthenticated SQL Injection vulnerabilityCridioStudio · ListingPro
Critical9.3
CVE-2024-39620
WordPress ListingPro plugin <= 2.9.4 - SQL Injection vulnerabilityCridioStudio · ListingPro
High8.5
CVE-2024-38795
WordPress ListingPro plugin <= 2.9.4 - Unauthenticated SQL Injection vulnerabilityCridioStudio · ListingPro
Critical9.3
CVE-2024-39619
WordPress ListingPro plugin <= 2.9.4 - Unauthenticated Local File Inclusion vulnerabilityCridioStudio · ListingPro
Critical9.0
CVE-2024-39621
WordPress ListingPro plugin <= 2.9.4 - Local File Inclusion vulnerabilityCridioStudio · ListingPro
High8.0
CVE-2024-39624
WordPress ListingPro theme <= 2.9.4 - Local File Inclusion vulnerabilityCridioStudio · ListingPro
High8.5