Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read just now.
At a glance
Published CVEs; rejected ones are not counted.
- 400,995All CVEsplus 19,118 rejected
- 427Last 24 hours2,853 in the last 7 days
- 16,815Last 30 days1,543 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 3 | 18 | 21 | 0 | 0 | 42 | 120 |
| 2025 | 1 | 14 | 45 | 0 | 0 | 60 | 78 |
| 2024 | 0 | 8 | 6 | 0 | 0 | 14 | 18 |
| 2023 | 1 | 1 | 2 | 0 | 0 | 4 | 4 |
| Title | ||
|---|---|---|
| CVE-2026-119481 | WordPress JetFormBuilder plugin <= 3.6.7.1 - Privilege Escalation vulnerabilityCrocoblock · JetFormBuilder | Critical9.8 |
| CVE-2026-119480 | WordPress JetFormBuilder plugin <= 3.6.7.1 - Attachment Deletion Via Media-Field Preset vulnerabilityCrocoblock · JetFormBuilder | Medium6.5 |
| CVE-2026-119479 | WordPress JetFormBuilder plugin <= 3.6.7.1 - Content Injection vulnerabilityCrocoblock · JetFormBuilder | Medium5.3 |
| CVE-2026-119482 | WordPress JetFormBuilder plugin <= 3.6.7.1 - Broken Access Control vulnerabilityCrocoblock · JetFormBuilder | Medium5.3 |
| CVE-2026-39737 | WordPress JetElements For Elementor plugin <= 2.9.2.6 - Cross Site Scripting (XSS) vulnerabilityCrocoblock · JetElements For Elementor | Medium6.5 |
| CVE-2026-39736 | WordPress JetEngine plugin <= 3.9.0.1 - SQL Injection vulnerabilityCrocoblock · JetEngine | High8.5 |
| CVE-2026-116857 | WordPress JetSmartFilters plugin <= 3.8.6.2 - Cross Site Scripting (XSS) vulnerabilityCrocoblock · JetSmartFilters | Medium6.5 |
| CVE-2026-39735 | WordPress JetEngine plugin <= 3.9.0.1 - Broken Access Control vulnerabilityCrocoblock · JetEngine | Medium6.5 |
| CVE-2026-114708 | WordPress JetSmartFilters plugin <= 3.8.6.1 - Cross Site Scripting (XSS) vulnerabilityCrocoblock · JetSmartFilters | Medium6.5 |
| CVE-2026-114707 | WordPress JetElements For Elementor plugin <= 2.9.2.5 - Cross Site Scripting (XSS) vulnerabilityCrocoblock · JetElements For Elementor | Medium6.5 |
| CVE-2026-115608 | WordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerabilityCrocoblock · JetEngine | High8.5 |
| CVE-2026-111414 | WordPress JetElements For Elementor plugin <= 2.9.2.4 - Cross Site Scripting (XSS) vulnerabilityCrocoblock · JetElements For Elementor | Medium6.5 |
| CVE-2026-110890 | WordPress JetSmartFilters plugin <= 3.8.6 - Cross Site Scripting (XSS) vulnerabilityCrocoblock · JetSmartFilters | Medium6.5 |
| CVE-2026-107870 | WordPress JetEngine plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerabilityCrocoblock · JetEngine | High7.1 |
| CVE-2026-107867 | WordPress JetProductTables plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerabilityCrocoblock · JetProductTables | High7.1 |
| CVE-2026-107431 | WordPress JetFormBuilder plugin <= 3.6.6 - Broken Access Control vulnerabilityCrocoblock · JetFormBuilder | High7.5 |
| CVE-2026-107865 | WordPress JetMenu plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerabilityCrocoblock · JetMenu | Medium6.5 |
| CVE-2026-107866 | WordPress JetElements For Elementor plugin <= 2.9.2.3 - Cross Site Scripting (XSS) vulnerabilityCrocoblock · JetElements For Elementor | Medium6.5 |
| CVE-2026-94667 | WordPress JetReviews plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerabilityCrocoblock · JetReviews | Medium6.5 |
| CVE-2026-94661 | WordPress JetBlog plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerabilityCrocoblock · JetBlog | High7.1 |
| CVE-2026-62049 | WordPress JetBlocks For Elementor plugin <= 1.5.2.1 - Cross Site Scripting (XSS) vulnerabilityCrocoblock · JetBlocks For Elementor | Medium6.5 |
| CVE-2026-105879 | WordPress JetElements For Elementor plugin <= 2.9.2.2 - Cross Site Scripting (XSS) vulnerabilityCrocoblock · JetElements For Elementor | Medium6.5 |
| CVE-2026-93875 | JetAppointment <= 2.5.2.1 - Unauthenticated Stored Cross-Site Scripting via 'friendlyTime' ParameterCrocoblock · JetAppointment | High7.2 |
| CVE-2026-97237 | WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerabilityCrocoblock · JetEngine | High7.1 |
| CVE-2026-84817 | WordPress JetFormBuilder plugin <= 3.6.5.1 - Cross Site Scripting (XSS) vulnerabilityCrocoblock · JetFormBuilder | High7.1 |
| CVE-2026-27347 | WordPress JetPopup plugin <= 2.0.20.2 - Broken Access Control vulnerabilityCrocoblock · JetPopup | Medium5.3 |
| CVE-2026-81760 | WordPress JetEngine plugin <= 3.8.14.2 - Cross Site Scripting (XSS) vulnerabilityCrocoblock · JetEngine | High7.1 |
| CVE-2026-61977 | WordPress JetSearch plugin <= 3.6.1.2 - Sensitive Data Exposure vulnerabilityCrocoblock · JetSearch | Medium5.3 |
| CVE-2026-61976 | WordPress JetBlocks For Elementor plugin <= 1.5.0 - Sensitive Data Exposure vulnerabilityCrocoblock · JetBlocks For Elementor | Medium5.3 |
| CVE-2026-61975 | WordPress JetReviews plugin <= 3.0.1 - Sensitive Data Exposure vulnerabilityCrocoblock · JetReviews | Medium5.3 |
| CVE-2026-49076 | WordPress JetEngine plugin <= 3.8.9.1 - SQL Injection vulnerabilityCrocoblock · JetEngine | Critical9.3 |
| CVE-2026-12360 | JetEngine <= 3.8.10.1 - Unauthenticated SQL Injection via Listing Grid Load More AJAX EndpointCrocoblock · JetEngine | High7.5 |
| CVE-2026-42774 | WordPress JetEngine plugin <= 3.8.8.1 - SQL Injection vulnerabilityCrocoblock · JetEngine | Critical9.3 |
| CVE-2026-4352 | JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via '_cct_search' ParameterCrocoblock · JetEngine | High7.5 |
| CVE-2026-4662 | JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via Listing Grid 'filtered_query' ParameterCrocoblock · JetEngine | High7.5 |
| CVE-2026-32355 | WordPress JetEngine plugin < 3.8.4.1 - Deserialization of untrusted data vulnerabilityCrocoblock · JetEngine | High8.8 |
| CVE-2026-3496 | JetBooking <= 4.0.3 - Unauthenticated SQL Injection via 'check_in_date' ParameterCrocoblock · JetBooking | High7.5 |
| CVE-2026-28134 | WordPress JetEngine plugin <= 3.7.2 - Remote Code Execution (RCE) vulnerabilityCrocoblock · JetEngine | High8.5 |
| CVE-2025-68495 | WordPress JetEngine plugin <= 3.8.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCrocoblock · JetEngine | High7.1 |
| CVE-2026-24958 | WordPress JetElements For Elementor plugin <= 2.7.12.2 - Cross Site Scripting (XSS) vulnerabilityCrocoblock · JetElements For Elementor | Medium6.5 |
| CVE-2025-67923 | WordPress JetEngine plugin <= 3.7.7 - Cross Site Scripting (XSS) vulnerabilityCrocoblock · JetEngine | High7.1 |
| CVE-2025-69333 | WordPress JetEngine plugin <= 3.8.1.1 - Broken Access Control vulnerabilityCrocoblock · JetEngine | Medium4.3 |
| CVE-2025-68498 | WordPress JetTabs plugin <= 2.2.12 - Broken Access Control vulnerabilityCrocoblock · JetTabs | Medium6.5 |
| CVE-2025-68499 | WordPress JetTabs plugin <= 2.2.12 - Cross Site Scripting (XSS) vulnerabilityCrocoblock · JetTabs | Medium6.5 |
| CVE-2025-68502 | WordPress JetPopup plugin <= 2.0.20.1 - Insecure Direct Object References (IDOR) vulnerabilityCrocoblock · JetPopup | Medium4.3 |
| CVE-2025-68503 | WordPress JetBlog plugin <= 2.4.7 - Broken Access Control vulnerabilityCrocoblock · JetBlog | Medium6.5 |
| CVE-2025-68504 | WordPress JetSearch plugin <= 3.5.16 - Cross Site Scripting (XSS) vulnerabilityCrocoblock · JetSearch | Medium6.5 |
| CVE-2025-64355 | WordPress JetElements For Elementor plugin <= 2.7.12 - Cross Site Scripting (XSS) vulnerabilityCrocoblock · JetElements For Elementor | Medium6.5 |
| CVE-2025-49939 | WordPress JetElements For Elementor plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerabilityCrocoblock · JetElements For Elementor | Medium6.5 |
| CVE-2025-49938 | WordPress JetEngine plugin <= 3.7.3 - Cross Site Scripting (XSS) vulnerabilityCrocoblock · JetEngine | Medium6.5 |