Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,957All CVEsplus 19,141 rejected
- 218Last 24 hours3,184 in the last 7 days
- 16,907Last 30 days1,564 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 2 | 1 | 0 | 0 | 3 | 8 |
| 2025 | 0 | 2 | 3 | 0 | 0 | 5 | 5 |
| Title | ||
|---|---|---|
| CVE-2025-12886 | Oxygen <= 6.0.8 - Unauthenticated Server-Side Request Forgery via route_pathLaborator · Oxygen - WooCommerce WordPress Theme | High7.2 |
| CVE-2025-69299 | WordPress Oxygen theme <= 6.0.8 - Server Side Request Forgery (SSRF) vulnerabilityLaborator · Oxygen | High7.2 |
| CVE-2025-12895 | Kalium <= 3.29 - Missing Authorization to Unauthenticated Mail Relay via kalium_vc_contact_form_requestLaborator · Kalium 3 | Creative WordPress & WooCommerce Theme | Medium5.3 |
| CVE-2025-53349 | WordPress Kalium Theme <= 3.18.3 - Cross Site Scripting (XSS) VulnerabilityLaborator · Kalium | High7.1 |
| CVE-2025-49926 | WordPress Kalium theme <= 3.25 - Arbitrary Code Execution vulnerabilityLaborator · Kalium | High7.2 |
| CVE-2025-53348 | WordPress Kalium Theme <= 3.18.3 - Broken Access Control VulnerabilityLaborator · Kalium | Medium5.3 |
| CVE-2025-53347 | WordPress Kalium Theme <= 3.18.3 - Cross Site Request Forgery (CSRF) VulnerabilityLaborator · Kalium | Medium4.3 |
| CVE-2024-12781 | Aurum - WordPress & WooCommerce Shopping Theme <= 4.0.2 - Missing Authorization to Authenticated (Subscriber+) Demo Content ImportLaborator · Aurum - WordPress & WooCommerce Shopping Theme | Medium4.3 |