Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,211All CVEsplus 19,120 rejected
- 494Last 24 hours2,787 in the last 7 days
- 16,887Last 30 days1,542 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 4 | 6 | 1 | 0 | 12 | 24 |
| 2025 | 0 | 0 | 3 | 0 | 0 | 3 | 12 |
| 2024 | 0 | 2 | 6 | 0 | 0 | 8 | 9 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2022 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-109883 | WordPress Elementor Website Builder plugin <= 4.3.5 - Cross Site Scripting (XSS) vulnerabilityElementor · Elementor Website Builder | High7.1 |
| CVE-2026-109884 | WordPress Elementor Website Builder plugin <= 4.3.5 - Cross Site Scripting (XSS) vulnerabilityElementor · Elementor Website Builder | High7.1 |
| CVE-2026-62062 | WordPress Elementor Website Builder plugin <= 4.3.1 - Cross Site Request Forgery (CSRF) vulnerabilityElementor · Elementor Website Builder | High8.8 |
| CVE-2026-84759 | WordPress Activity Log plugin <= 2.13.1 - Cross Site Request Forgery (CSRF) vulnerabilityElementor · Activity Log | High7.1 |
| CVE-2026-32475 | WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerabilityElementor · Elementor Pro | Critical9.0 |
| CVE-2026-57619 | WordPress Elementor Website Builder plugin <= 4.1.3 - Sensitive Data Exposure vulnerabilityElementor · Elementor Website Builder | Medium6.5 |
| CVE-2026-49782 | WordPress Elementor Website Builder plugin <= 4.1.0 - Broken Access Control vulnerabilityElementor · Elementor Website Builder | Medium5.4 |
| CVE-2026-32445 | WordPress Elementor Website Builder plugin <= 3.35.5 - Broken Access Control vulnerabilityElementor · Elementor Website Builder | Low2.7 |
| CVE-2026-32352 | WordPress Elementor Website Builder plugin <= 3.35.5 - Cross Site Scripting (XSS) vulnerabilityElementor · Elementor Website Builder | Medium6.5 |
| CVE-2024-50555 | WordPress Elementor Website Builder plugin <= 3.29.0 - Cross Site Scripting (XSS) vulnerabilityElementor · Elementor Website Builder | Medium6.5 |
| CVE-2026-25387 | WordPress Image Optimizer by Elementor plugin <= 1.7.1 - Broken Access Control vulnerabilityElementor · Image Optimizer by Elementor | Medium4.3 |
| CVE-2026-25386 | WordPress Ally plugin <= 4.0.2 - Broken Access Control vulnerabilityElementor · Ally | Medium5.3 |
| CVE-2025-67588 | WordPress Elementor Website Builder plugin <= 3.33.0 - Broken Access Control vulnerabilityElementor · Elementor Website Builder | Medium4.3 |
| CVE-2025-32640 | WordPress One Click Accessibility plugin <= 3.1.0 - Cross-Site Scripting (XSS) vulnerabilityElementor · Ally | Medium5.9 |
| CVE-2024-54444 | WordPress Elementor plugin <= 3.25.10 - Cross Site Scripting (XSS) vulnerabilityElementor · Elementor Website Builder | Medium6.5 |
| CVE-2024-35656 | WordPress Elementor Pro <= 3.21.2 - Reflected Cross Site Scripting (XSS) vulnerabilityElementor · Elementor Pro | High7.1 |
| CVE-2024-37437 | WordPress Elementor Website Builder plugin <= 3.22.1 - Arbitrary SVG File Download vulnerabilityElementor · Elementor Website Builder | Medium5.5 |
| CVE-2023-35050 | WordPress Elementor Pro plugin <= 3.13.0 - Auth. Broken Access Control vulnerabilityElementor · Elementor Pro | Medium5.4 |
| CVE-2023-33922 | WordPress Elementor plugin <= 3.13.2 - Broken Access Control vulnerabilityElementor · Elementor Website Builder | Medium4.3 |
| CVE-2024-24934 | WordPress Elementor plugin <= 3.19.0 - Arbitrary File Deletion and Phar Deserialization vulnerabilityElementor · Elementor Website Builder | High8.5 |
| CVE-2023-47504 | WordPress Elementor plugin <= 3.16.4 - Auth. Arbitrary Attachment Read vulnerabilityElementor · Elementor Website Builder | Medium6.5 |
| CVE-2024-31289 | WordPress Hello Elementor theme <= 3.0.0 - Cross Site Request Forgery (CSRF) vulnerabilityElementor · Hello Elementor | Medium4.3 |
| CVE-2024-23523 | WordPress Elementor Pro plugin <= 3.19.2 - Contributor+ Arbitrary User Meta Data Retrieval vulnerabilityElementor · Elementor Pro | Medium6.5 |
| CVE-2022-29455 | WordPress Elementor plugin <= 3.5.5 - Unauthenticated DOM-based Reflected Cross-Site Scripting (XSS) vulnerabilityElementor · Elementor Website Builder (WordPress plugin) | Medium4.7 |