Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,321All CVEsplus 19,140 rejected
- 467Last 24 hours2,737 in the last 7 days
- 16,929Last 30 days1,560 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 5 | 4 | 0 | 0 | 9 | 21 |
| 2025 | 0 | 1 | 0 | 0 | 0 | 1 | 12 |
| 2024 | 0 | 1 | 3 | 0 | 0 | 4 | 11 |
| 2023 | 2 | 1 | 4 | 0 | 0 | 7 | 7 |
| Title | ||
|---|---|---|
| CVE-2026-42697 | WordPress Social Share Icons & Social Share Buttons plugin <= 3.7.5 - Cross Site Scripting (XSS) vulnerabilityInisev · Social Share Icons & Social Share Buttons | High7.1 |
| CVE-2026-89424 | Duplicate Post <= 1.5.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'noti_token' Parameterinisev · Duplicate Post | Medium6.4 |
| CVE-2026-89047 | Social Media Share Buttons & Social Sharing Icons <= 3.0.1 - Reflected DOM-Based Cross-Site Scripting via URLinisev · Social Media Share Buttons & Social Sharing Icons | Medium6.1 |
| CVE-2026-66623 | WordPress Social Media & Share Icons plugin <= 2.9.9 - Cross Site Scripting (XSS) vulnerabilityInisev · Social Media & Share Icons | High7.1 |
| CVE-2026-7693 | Backup Migration <= 2.1.5.1 - Authenticated (Administrator+) OS Command Injection via 'file' Parameterinisev · Backup Migration | High7.2 |
| CVE-2024-31435 | WordPress Social Media Share Buttons & Social Sharing Icons plugin <= 2.8.6 - Broken Access Control vulnerabilityInisev · Social Media & Share Icons | Medium4.3 |
| CVE-2026-39480 | WordPress Backup Migration plugin <= 2.1.1 - Sensitive Data Exposure vulnerabilityInisev · Backup Migration | High7.5 |
| CVE-2026-53738 | Copy & Delete Posts through 1.5.4 Privilege Escalation via cdp_action_handling HandlerInisev · Copy & Delete Posts | High7.2 |
| CVE-2025-14944 | Backup Migration <= 2.0.0 - Missing Authorization to Unauthenticated Backup Upload to Offline Storageinisev · BackupBliss – Backup & Migration with Free Cloud Storage | Medium5.3 |
| CVE-2024-10932 | Backup Migration <= 1.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialize_replace'inisev · BackupBliss – Backup & Migration with Free Cloud Storage | High8.8 |
| CVE-2023-34009 | WordPress Social Media Share Buttons & Social Sharing Icons plugin <= 2.8.1 - Broken Access Control + CSRFInisev · Social Media & Share Icons | Medium4.3 |
| CVE-2024-37552 | WordPress Social Media Share Buttons & Social Sharing Icons plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerabilityInisev · Social Media & Share Icons | Medium5.9 |
| CVE-2024-32686 | WordPress Backup Migration plugin <= 1.4.3 - Sensitive Data Exposure via Log vulnerabilityInisev · Backup Migration | Medium5.3 |
| CVE-2023-6266 | Backup Migration <= 1.3.6 - Unauthenticated Arbitrary Backup Download to Sensitive Information Exposureinisev · BackupBliss – Backup & Migration with Free Cloud Storage | High7.5 |
| CVE-2023-7002 | Backup Migration <= 1.3.9 - Authenticated (Admin+) OS Command Injection via urlinisev · BackupBliss – Backup & Migration with Free Cloud Storage | High7.2 |
| CVE-2023-6972 | Backup Migration <= 1.3.9 - Unauthenticated Path Traversal to Arbitrary File Deletioninisev · BackupBliss – Backup & Migration with Free Cloud Storage | Critical9.8 |
| CVE-2023-6553 | Backup Migration <= 1.3.7 - Unauthenticated Remote Code Executioninisev · BackupBliss – Backup & Migration with Free Cloud Storage | Critical9.8 |
| CVE-2023-5070 | Social Media Share Buttons & Social Sharing Icons <= 2.8.5 - Information Exposureinisev · Social Media Share Buttons & Social Sharing Icons | Medium6.5 |
| CVE-2023-5602 | Social Media Share Buttons & Social Sharing Icons <= 2.8.5 - Cross-Site Request Forgeryinisev · Social Media Share Buttons & Social Sharing Icons | Medium4.3 |
| CVE-2023-0958 | Inisev Plugins (Various Versions) - Missing Authorization on handle_installation functioninisev · Redirection | Medium4.3 |
| CVE-2023-3977 | Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation functioninisev · Redirection | Medium4.3 |