Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,644All CVEsplus 19,141 rejected
- 674Last 24 hours2,957 in the last 7 days
- 17,129Last 30 days1,607 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 10 | 3 | 0 | 0 | 15 | 20 |
| 2025 | 1 | 2 | 2 | 0 | 0 | 5 | 5 |
| Title | ||
|---|---|---|
| CVE-2026-103039 | Gravity Forms <= 3.1.2 - Unauthenticated PHP Object Injection via Post Custom FieldGravity Forms · Gravity Forms | Critical9.8 |
| CVE-2026-97645 | Gravity Forms <= 3.1.2 - Unauthenticated Stored Cross-Site Scripting via List FieldGravity Forms · Gravity Forms | High7.2 |
| CVE-2026-90437 | Gravity Forms <= 3.1.1 - Unauthenticated Stored Cross-Site Scripting via Post Excerpt / Post Custom Field / Rich-Text Paragraph Field ValuesGravity Forms · Gravity Forms | High7.2 |
| CVE-2026-84434 | Gravity Forms <= 3.1.0.4 - Unauthenticated Arbitrary File Upload via Hidden File Upload FieldGravity Forms · Gravity Forms | Critical9.8 |
| CVE-2026-16649 | Gravity Forms <= 2.10.5 - Unauthenticated Stored Cross-Site Scripting via Post Body Field ValueGravity Forms · Gravity Forms | High7.2 |
| CVE-2026-19513 | Gravity Forms <= 3.0.2 - Unauthenticated Arbitrary File Upload via State/Chunk Hash ConfusionGravity Forms · Gravity Forms | High8.1 |
| CVE-2026-12997 | Gravity Forms <= 2.10.4 - Unauthenticated Arbitrary File Read via 'gform_uploaded_files' ParameterGravity Forms · Gravity Forms | High7.5 |
| CVE-2026-5110 | Gravity Forms <= 2.10.0 - Unauthenticated Stored Cross-Site Scripting via Single Product Field Inside RepeaterGravity Forms · Gravity Forms | High7.2 |
| CVE-2026-5111 | Gravity Forms <= 2.10.0 - Unauthenticated Stored Cross-Site Scripting via Hidden Product Field in RepeaterGravity Forms · Gravity Forms | High7.2 |
| CVE-2026-5109 | Gravity Forms <= 2.10.0 - Unauthenticated Stored Cross-Site Scripting via Product OptionGravity Forms · Gravity Forms | High7.2 |
| CVE-2026-5112 | Gravity Forms <= 2.10.0 - Unauthenticated Stored Cross-Site Scripting via Calculation Product Field in RepeaterGravity Forms · Gravity Forms | High7.2 |
| CVE-2026-5113 | Gravity Forms <= 2.10.0 - Unauthenticated Stored Cross-Site Scripting via Consent Field Hidden InputGravity Forms · Gravity Forms | High7.2 |
| CVE-2026-4394 | Gravity Forms <= 2.9.30 - Unauthenticated Stored Cross-Site Scripting via Credit Card 'Card Type' Sub-FieldGravity Forms · Gravity Forms | Medium6.1 |
| CVE-2026-4406 | Gravity Forms <= 2.9.30 - Reflected Cross-Site Scripting via 'form_ids' ParameterGravity Forms · Gravity Forms | Medium4.7 |
| CVE-2026-3492 | Gravity Forms <= 2.9.28.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Form TitleGravity Forms · Gravity Forms | Medium6.4 |
| CVE-2025-12974 | Gravity Forms <= 2.9.21.1 - Unauthenticated Arbitrary File Upload via Legacy Chunked UploadGravity Forms · Gravity Forms | High8.1 |
| CVE-2025-12352 | Gravity Forms <= 2.9.20 - Unauthenticated Arbitrary File Upload via 'copy_post_image'Gravity Forms · Gravity Forms | Critical9.8 |
| CVE-2024-13845 | Gravity Forms WebHooks <= 1.6.0 - Authenticated (Admin+) Server-Side Request Forgery via WebhookGravity Forms · Gravity Forms WebHooks | Medium5.5 |
| CVE-2024-13378 | GravityForms 2.9.0.1 - 2.9.1.3 - Unauthenticated Stored Cross-Site Scripting via 'style_settings' parameterGravity Forms · Gravity Forms | Medium5.4 |
| CVE-2024-13377 | GravityForms <= 2.9.1.3 - Unauthenticated Stored Cross-Site Scripting via 'alt' parameterGravity Forms · Gravity Forms | High7.2 |