Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,854All CVEsplus 19,116 rejected
- 457Last 24 hours2,910 in the last 7 days
- 16,803Last 30 days1,547 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 6 | 9 | 0 | 0 | 15 | 32 |
| 2025 | 0 | 4 | 2 | 0 | 0 | 6 | 17 |
| 2024 | 0 | 2 | 3 | 0 | 0 | 5 | 11 |
| 2023 | 0 | 1 | 2 | 0 | 0 | 3 | 6 |
| 2022 | 0 | 0 | 2 | 0 | 0 | 2 | 3 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2019 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2018 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-109984 | FV Flowplayer Video Player <= 7.5.55.7212 - Unauthenticated Stored Cross-Site Scripting via 'ad' Shortcode Attribute in Commentsfoliovision · FV Flowplayer Video Player | Medium5.4 |
| CVE-2026-110533 | FV Flowplayer Video Player <= 7.5.55.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Shortcode Attributesfoliovision · FV Flowplayer Video Player | Medium6.4 |
| CVE-2026-110001 | FV Flowplayer Video Player <= 7.5.55.7212 - Unauthenticated Stored Cross-Site Scripting via 'align' Shortcode Attributefoliovision · FV Flowplayer Video Player | Medium5.4 |
| CVE-2026-118079 | WordPress FV Flowplayer Video Player plugin <= 7.5.56.7212 - PHP Object Injection vulnerabilityFolioVision · FV Flowplayer Video Player | High7.2 |
| CVE-2026-86461 | FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Arbitrary File Upload via 'video_url' Parameterfoliovision · FV Flowplayer Video Player | High8.8 |
| CVE-2026-97398 | FV Flowplayer Video Player <= 7.5.54.7212 - Unauthenticated Stored Cross-Site Scripting via 'synopsis' Shortcode Attributefoliovision · FV Flowplayer Video Player | High7.2 |
| CVE-2026-95807 | FV Player 8 <= 8.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'synopsis' Shortcode Attributefoliovision · FV Player 8 | Medium6.4 |
| CVE-2026-54868 | WordPress FV Simpler SEO plugin <= 1.9.7 - Cross Site Scripting (XSS) vulnerabilityFolioVision · FV Simpler SEO | Medium6.5 |
| CVE-2026-42699 | WordPress FV Player 8 plugin <= 8.1.8 - Cross Site Scripting (XSS) vulnerabilityFolioVision · FV Player 8 | High7.1 |
| CVE-2026-83526 | FV Player 8 <= 8.1.7 - Authenticated (Subscriber+) Arbitrary File Upload via videos[].fv_wp_flowplayer_field_src Parameterfoliovision · FV Player 8 | High8.8 |
| CVE-2026-97630 | FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Unquoted popup Shortcode Attributefoliovision · FV Flowplayer Video Player | Medium6.4 |
| CVE-2026-42695 | WordPress FV Flowplayer Video Player plugin <= 7.5.54.7212 - Cross Site Scripting (XSS) vulnerabilityFolioVision · FV Flowplayer Video Player | Medium6.5 |
| CVE-2026-12135 | FV Flowplayer Video Player <= 7.5.51.7212 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'video_player' Shortcodefoliovision · FV Flowplayer Video Player | Medium6.4 |
| CVE-2026-49773 | WordPress FV Flowplayer Video Player plugin < 7.5.51.7212 - Cross Site Scripting (XSS) vulnerabilityFolioVision · FV Flowplayer Video Player | Medium6.5 |
| CVE-2026-7556 | FV Flowplayer Video Player <= 7.5.49.7212 - Unauthenticated Stored Cross-Site Scripting via Comment Textfoliovision · FV Flowplayer Video Player | High7.2 |
| CVE-2025-68579 | WordPress FV Simpler SEO plugin <= 1.9.6 - Broken Access Control vulnerabilityFolioVision · FV Simpler SEO | Medium5.3 |
| CVE-2025-66102 | WordPress FV Antispam plugin <= 2.7 - Cross Site Scripting (XSS) vulnerabilityFolioVision · FV Antispam | High7.1 |
| CVE-2025-32610 | WordPress Foliopress WYSIWYG plugin <= 2.6.18 - CSRF to Stored XSS vulnerabilityFolioVision · Foliopress WYSIWYG | High7.1 |
| CVE-2025-22628 | WordPress Filled In Plugin <= 1.9.2 - CSRF to Stored XSS vulnerabilityFolioVision · Filled In | High7.1 |
| CVE-2025-24613 | WordPress FV Thoughtful Comments plugin <= 0.3.5 - Broken Access Control vulnerabilityFolioVision · FV Thoughtful Comments | Medium4.3 |
| CVE-2024-56032 | WordPress FV Descriptions plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerabilityFolioVision · FV Descriptions | High7.1 |
| CVE-2024-5020 | Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Libraryextendthemes · Colibri Page Builder | Medium6.4 |
| CVE-2024-6338 | FV Player <= 7.5.46.7212 - Authenticated (Subscriber+) SQL Injection via exclude Parameterfoliovision · FV Flowplayer Video Player | High8.8 |
| CVE-2024-35631 | WordPress FV Flowplayer Video Player plugin <= 7.5.45.7212 - Cross Site Scripting (XSS) vulnerabilityFoliovision · FV Flowplayer Video Player | High7.1 |
| CVE-2024-32078 | WordPress FV Player plugin <= 7.5.44.7212 - Unvalidated Redirects and Forwards vulnerabilityFoliovision · FV Flowplayer Video Player | Medium4.1 |
| CVE-2024-32955 | WordPress FV Flowplayer Video Player plugin <= 7.5.43.7212 - Server Side Request Forgery (SSRF) vulnerabilityFoliovision · FV Flowplayer Video Player | Medium4.9 |
| CVE-2023-4520 | FV Flowplayer Video Player <= 7.5.37.7212 - Insufficient Input Validation to Unauthenticated Stored Cross-Site Scripting and Arbitrary Usermeta Updatefoliovision · FV Flowplayer Video Player | Medium5.4 |
| CVE-2023-30499 | WordPress FV Flowplayer Video Player Plugin <= 7.5.32.7212 is vulnerable to Cross Site Scripting (XSS)FolioVision · FV Flowplayer Video Player | High7.1 |
| CVE-2023-25066 | WordPress FV Flowplayer Video Player Plugin <= 7.5.30.7212 is vulnerable to Cross Site Request Forgery (CSRF)FolioVision · FV Flowplayer Video Player | Medium4.3 |
| CVE-2022-25613 | WordPress FV Flowplayer Video Player plugin <= 7.5.18.727 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilityFolioVision · FV Flowplayer Video Player (WordPress plugin) | Medium4.1 |
| CVE-2022-25607 | WordPress FV Flowplayer Video Player plugin <= 7.5.15.727 - SQL Injection (SQLi) vulnerabilityFolioVision · FV Flowplayer Video Player (WordPress plugin) | Medium6.6 |
| CVE-2018-0642 | Cross-site scripting vulnerability in FV Flowplayer Video Player 6.1.2 to 6.6.4 allows remote attackers to inject arbitrary web script or HTML via unspecified…Foliovision · FV Flowplayer Video Player | Medium6.1 |