Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,273All CVEsplus 19,140 rejected
- 462Last 24 hours2,741 in the last 7 days
- 16,922Last 30 days1,555 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 0 | 1 | 0 | 0 | 2 | 25 |
| 2025 | 0 | 0 | 2 | 0 | 0 | 2 | 23 |
| 2024 | 1 | 2 | 3 | 0 | 0 | 6 | 21 |
| 2023 | 6 | 2 | 7 | 0 | 0 | 15 | 15 |
| Title | ||
|---|---|---|
| CVE-2026-13447 | MStore API <= 4.20.0 - Unauthenticated Authentication Bypass via 'id_token' Parameter JWT Forgeryinspireui · MStore API – Create Native Android & iOS Apps On The Cloud | Critical9.8 |
| CVE-2026-3568 | MStore API <= 4.18.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Meta Updateinspireui · MStore API – Create Native Android & iOS Apps On The Cloud | Medium4.3 |
| CVE-2025-4683 | MStore API – Create Native Android & iOS Apps On The Cloud <= 4.17.5 - Missing Authorization to Authenticated (Subscriber+) Posts Creationinspireui · MStore API – Create Native Android & iOS Apps On The Cloud | Medium4.3 |
| CVE-2025-3438 | MStore API – Create Native Android & iOS Apps On The Cloud <= 4.17.4 - Unauthenticated Limited Privilege Escalationinspireui · MStore API – Create Native Android & iOS Apps On The Cloud | Medium6.5 |
| CVE-2024-12042 | MStore API – Create Native Android & iOS Apps On The Cloud <= 4.16.4 - Authenticated (Subscriber+) HTML File Upload (Stored Cross-Site Scripting)inspireui · MStore API – Create Native Android & iOS Apps On The Cloud | Medium5.4 |
| CVE-2024-11179 | MStore API <= 4.15.7 - Authenticated (Subscriber+) SQL Injectioninspireui · MStore API – Create Native Android & iOS Apps On The Cloud | Medium6.5 |
| CVE-2024-8242 | MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Authenticated (Subscriber+) Limited Arbitrary File Uploadinspireui · MStore API – Create Native Android & iOS Apps On The Cloud | Medium4.3 |
| CVE-2024-8269 | MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Unauthorized User Registrationinspireui · MStore API – Create Native Android & iOS Apps On The Cloud | High7.3 |
| CVE-2024-7628 | MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.2 - Authentication Bypass to Account Takeoverinspireui · MStore API – Create Native Android & iOS Apps On The Cloud | High8.1 |
| CVE-2024-6328 | MStore API – Create Native Android & iOS Apps On The Cloud <= 4.14.7 - Authentication Bypassinspireui · MStore API – Create Native Android & iOS Apps On The Cloud | Critical9.8 |
| CVE-2023-50878 | WordPress MStore API Plugin <= 4.10.1 is vulnerable to Cross Site Request Forgery (CSRF)InspireUI · MStore API | Medium5.4 |
| CVE-2023-45055 | WordPress MStore API Plugin <= 4.0.6 is vulnerable to SQL InjectionInspireUI · MStore API | High8.5 |
| CVE-2023-3277 | MStore API <= 4.10.7 - Unauthorized Account Access and Privilege Escalationinspireui · MStore API – Create Native Android & iOS Apps On The Cloud | Critical9.8 |
| CVE-2023-3202 | MStore API <= 3.9.6 - Cross-Site Request Forgery to Firebase Server Key Updateinspireui · MStore API – Create Native Android & iOS Apps On The Cloud | Medium4.3 |
| CVE-2023-3199 | MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Title Updateinspireui · MStore API – Create Native Android & iOS Apps On The Cloud | Medium4.3 |
| CVE-2023-3197 | MStore API <= 4.0.1 - Unauthenticated SQL Injectioninspireui · MStore API – Create Native Android & iOS Apps On The Cloud | Critical9.8 |
| CVE-2022-47614 | WordPress MStore API Plugin <= 3.9.7 is vulnerable to SQL InjectionInspireUI · MStore API | High7.5 |
| CVE-2023-3201 | MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Title Updateinspireui · MStore API – Create Native Android & iOS Apps On The Cloud | Medium4.3 |
| CVE-2023-3198 | MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Status Updateinspireui · MStore API – Create Native Android & iOS Apps On The Cloud | Medium4.3 |
| CVE-2023-3200 | MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Message Updateinspireui · MStore API – Create Native Android & iOS Apps On The Cloud | Medium4.3 |
| CVE-2023-3203 | MStore API <= 3.9.6 - Cross-Site Request Forgery to Product Limit Updateinspireui · MStore API – Create Native Android & iOS Apps On The Cloud | Medium4.3 |
| CVE-2020-36713 | MStore API <= 2.1.5 - Authentication Bypassinspireui · MStore API – Create Native Android & iOS Apps On The Cloud | Critical9.8 |
| CVE-2023-2732 | MStore API <= 3.9.2 - Authentication Bypassinspireui · MStore API – Create Native Android & iOS Apps On The Cloud | Critical9.8 |
| CVE-2023-2733 | MStore API <= 3.9.0 - Authentication Bypassinspireui · MStore API – Create Native Android & iOS Apps On The Cloud | Critical9.8 |
| CVE-2023-2734 | MStore API <= 3.9.1 - Authentication Bypassinspireui · MStore API – Create Native Android & iOS Apps On The Cloud | Critical9.8 |