Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,791All CVEsplus 19,141 rejected
- 649Last 24 hours3,086 in the last 7 days
- 17,142Last 30 days1,604 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 2 | 0 | 0 | 0 | 3 | 8 |
| 2025 | 0 | 0 | 1 | 0 | 0 | 1 | 5 |
| 2024 | 0 | 0 | 4 | 0 | 0 | 4 | 4 |
| Title | ||
|---|---|---|
| CVE-2026-93300 | EventON - Subscriber <= 1.4.5 - Unauthenticated SQL Injection via 'email' ParameterEventOn · EventON - Subscriber | High7.5 |
| CVE-2026-10033 | EventON Action User <= 2.5.14 - Missing Authorization to Unauthenticated Privilege Escalation via evoau_save_capability AJAX ActionEventON · EventON Action User | High7.3 |
| CVE-2026-9711 | EventON - WordPress Virtual Event Calendar Plugin <= 5.0.11 - Unauthenticated Blind SQL Injection via Search ParameterEventON · EventON (Pro) - WordPress Virtual Event Calendar Plugin | Critical9.8 |
| CVE-2025-3527 | EventON - WordPress Virtual Event Calendar Plugin <= 4.9.6 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site ScriptingEventON · EventON (Pro) - WordPress Virtual Event Calendar Plugin | Medium6.4 |
| CVE-2023-6243 | EventON PRO - WordPress Virtual Event Calendar Plugin <= 4.6.8 - Cross-Site Request Forgery via admin_test_emailEventON · EventON (Pro) - WordPress Virtual Event Calendar Plugin | Medium4.3 |
| CVE-2023-6242 | EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Cross-Site Request Forgery via evo_eventpost_update_metaashanjay · EventON – Events Calendar | Medium6.5 |
| CVE-2023-6244 | EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.8 (Free) - Cross-Site Request Forgery via save_virtual_event_settingsashanjay · EventON – Events Calendar | Medium6.5 |
| CVE-2023-6158 | EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Missing Authorization to Arbitrary Post Meta Update via evo_eventpost_update_metaashanjay · EventON – Events Calendar | Medium6.5 |