Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,293All CVEsplus 19,140 rejected
- 449Last 24 hours2,721 in the last 7 days
- 16,914Last 30 days1,557 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 4 | 1 | 0 | 0 | 6 | 14 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 8 |
| 2024 | 0 | 1 | 5 | 0 | 0 | 6 | 8 |
| 2023 | 0 | 2 | 0 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-57816 | WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.8 - Cross Site Scripting (XSS) vulnerabilityFunnelKit · Funnel Builder by FunnelKit | High7.1 |
| CVE-2026-57635 | WordPress FunnelKit Payment Gateway for Stripe WooCommerce plugin <= 1.14.0.3 - Cross Site Request Forgery (CSRF) vulnerabilityFunnelKit · FunnelKit Payment Gateway for Stripe WooCommerce | Medium6.5 |
| CVE-2026-56052 | WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.5 - SQL Injection vulnerabilityFunnelKit · Funnel Builder by FunnelKit | High7.6 |
| CVE-2026-48966 | WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.2 - Cross Site Scripting (XSS) vulnerabilityFunnelKit · Funnel Builder by FunnelKit | High7.1 |
| CVE-2026-42381 | WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.1 - SQL Injection vulnerabilityFunnelKit · Funnel Builder by FunnelKit | Critical9.3 |
| CVE-2026-47100 | Funnel Builder for WooCommerce Checkout < 3.15.0.3 Missing Authorization via AJAXFunnelKit · Funnel Builder for WooCommerce Checkout | High8.7 |
| CVE-2024-1056 | Funnel Kit Funnel Builder PRO <= 3.4.5 Authenticated(Contributor+) Stored Cross-Site Scripting via allow_iframe_tag_in_postFunnelKit · FunnelKit Funnel Builder Pro | Medium6.4 |
| CVE-2024-38684 | WordPress SlingBlocks plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerabilityFunnelKit · SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) | Medium6.5 |
| CVE-2023-51670 | WordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Arbitrary Plugin Activation vulnerabilityFunnelKit · FunnelKit Checkout | Medium4.3 |
| CVE-2023-51671 | WordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Plugin Settings Change vulnerabilityFunnelKit · FunnelKit Checkout | Medium5.4 |
| CVE-2023-51672 | WordPress FunnelKit Checkout plugin <= 3.10.3 - Unauthenticated Arbitrary Post/Page Deletion vulnerabilityFunnelKit · FunnelKit Checkout | High7.5 |
| CVE-2024-2580 | WordPress Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin <= 2.8.2 - Cross Site Scripting (XSS) vulnerabilityFunnelKit · Automation By Autonami | Medium6.5 |
| CVE-2023-50856 | WordPress Funnel Builder for WordPress by FunnelKit Plugin <= 2.14.3 is vulnerable to SQL InjectionFunnelKit · Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels & Maximize Profits | High7.6 |
| CVE-2023-50857 | WordPress Automation By Autonami Plugin <= 2.6.1 is vulnerable to SQL InjectionFunnelKit · Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit | High7.6 |