Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,903All CVEsplus 19,118 rejected
- 374Last 24 hours2,802 in the last 7 days
- 16,790Last 30 days1,548 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 20 | 0 | 0 | 0 | 20 | 61 |
| 2025 | 0 | 41 | 0 | 0 | 0 | 41 | 41 |
| Title | ||
|---|---|---|
| CVE-2026-28112 | WordPress AllInOne - Banner Rotator plugin <= 3.8 - Reflected Cross Site Scripting (XSS) vulnerabilityLambertGroup · AllInOne - Banner Rotator | High7.1 |
| CVE-2026-28110 | WordPress LambertGroup - AllInOne - Banner with Playlist plugin <= 3.8 - Reflected Cross Site Scripting (XSS) vulnerabilityLambertGroup · LambertGroup - AllInOne - Banner with Playlist | High7.1 |
| CVE-2026-28109 | WordPress LambertGroup - AllInOne - Content Slider plugin <= 3.8 - Reflected Cross Site Scripting (XSS) vulnerabilityLambertGroup · LambertGroup - AllInOne - Content Slider | High7.1 |
| CVE-2026-28108 | WordPress LambertGroup - AllInOne - Banner with Thumbnails plugin <= 3.8 - Reflected Cross Site Scripting (XSS) vulnerabilityLambertGroup · LambertGroup - AllInOne - Banner with Thumbnails | High7.1 |
| CVE-2026-28103 | WordPress LBG Zoominoutslider plugin <= 5.4.5 - Reflected Cross Site Scripting (XSS) vulnerabilityLambertGroup · LBG Zoominoutslider | High7.1 |
| CVE-2026-28102 | WordPress UberSlider Classic plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerabilityLambertGroup · UberSlider Classic | High7.1 |
| CVE-2026-28101 | WordPress UberSlider MouseInteraction plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerabilityLambertGroup · UberSlider MouseInteraction | High7.1 |
| CVE-2026-28100 | WordPress UberSlider PerpetuumMobile plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerabilityLambertGroup · UberSlider PerpetuumMobile | High7.1 |
| CVE-2026-28099 | WordPress UberSlider Ultra plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerabilityLambertGroup · UberSlider Ultra | High7.1 |
| CVE-2025-69053 | WordPress Universal Video Player plugin <= 3.8.4 - Reflected Cross Site Scripting (XSS) vulnerabilityLambertGroup · Universal Video Player | High7.1 |
| CVE-2025-69048 | WordPress Universal Video Player plugin <= 3.8.4 - Reflected Cross Site Scripting (XSS) vulnerabilityLambertGroup · Universal Video Player | High7.1 |
| CVE-2025-49066 | WordPress Accordion Slider PRO plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerabilityLambertGroup · Accordion Slider PRO | High7.1 |
| CVE-2025-49046 | WordPress xPromoter plugin <= 1.3.4 - Reflected Cross Site Scripting (XSS) vulnerabilityLambertGroup · xPromoter | High7.1 |
| CVE-2025-49043 | WordPress Magic Responsive Slider and Carousel WordPress plugin <= 1.6 - Reflected Cross Site Scripting (XSS) vulnerabilityLambertGroup · Magic Responsive Slider and Carousel WordPress | High7.1 |
| CVE-2025-48094 | WordPress Magic Slider plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerabilityLambertGroup · Magic Slider | High7.1 |
| CVE-2025-47666 | WordPress Image&Video FullScreen Background plugin <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerabilityLambertGroup · Image&Video FullScreen Background | High7.1 |
| CVE-2025-32123 | WordPress HTML5 Video Player with Playlist & Multiple Skins plugin <= 5.3.5 - Reflected Cross Site Scripting (XSS) vulnerabilityLambertGroup · HTML5 Video Player with Playlist & Multiple Skins | High7.1 |
| CVE-2025-27005 | WordPress HTML5 Video Player plugin <= 5.3.5 - Reflected Cross Site Scripting (XSS) vulnerabilityLambertGroup · HTML5 Video Player | High7.1 |
| CVE-2025-27004 | WordPress Famous - Responsive Image And Video Grid Gallery WordPress Plugin plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerabilityLambertGroup · Famous - Responsive Image And Video Grid Gallery WordPress Plugin | High7.1 |
| CVE-2025-27002 | WordPress CountDown With Image or Video Background plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerabilityLambertGroup · CountDown With Image or Video Background | High7.1 |
| CVE-2025-68056 | WordPress LBG Zoominoutslider plugin <= 5.4.4 - SQL Injection vulnerabilityLambertGroup · LBG Zoominoutslider | High8.5 |
| CVE-2025-68054 | WordPress CountDown With Image or Video Background plugin <= 1.5 - SQL Injection vulnerabilityLambertGroup · CountDown With Image or Video Background | High8.5 |
| CVE-2025-68053 | WordPress xPromoter plugin <= 1.3.4 - SQL Injection vulnerabilityLambertGroup · xPromoter | High8.5 |
| CVE-2025-62093 | WordPress Image&Video FullScreen Background plugin <= 1.6.7 - SQL Injection vulnerabilityLambertGroup · Image&Video FullScreen Background | High8.5 |
| CVE-2025-67518 | WordPress Accordion Slider PRO plugin <= 1.2 - SQL Injection vulnerabilityLambertGroup · Accordion Slider PRO | High8.5 |
| CVE-2025-60110 | WordPress AllInOne - Banner Rotator Plugin <= 3.8 - SQL Injection VulnerabilityLambertGroup · AllInOne - Banner Rotator | High8.5 |
| CVE-2025-60109 | WordPress LambertGroup - AllInOne - Content Slider Plugin <= 3.8 - SQL Injection VulnerabilityLambertGroup · LambertGroup - AllInOne - Content Slider | High8.5 |
| CVE-2025-60108 | WordPress LambertGroup - AllInOne - Banner with Thumbnails Plugin <= 3.8 - SQL Injection VulnerabilityLambertGroup · LambertGroup - AllInOne - Banner with Thumbnails | High8.5 |
| CVE-2025-60107 | WordPress LambertGroup - AllInOne - Banner with Playlist Plugin <= 3.8 - SQL Injection VulnerabilityLambertGroup · LambertGroup - AllInOne - Banner with Playlist | High8.5 |
| CVE-2025-48154 | WordPress Multimedia Playlist Slider Addon for WPBakery Page Builder Plugin <= 2.1 - Cross Site Scripting (XSS) VulnerabilityLambertGroup · Multimedia Playlist Slider Addon for WPBakery Page Builder | High7.1 |
| CVE-2025-48159 | WordPress Youtube Vimeo Video Player and Slider WP Plugin <= 3.8 - Cross Site Scripting (XSS) VulnerabilityLambertGroup · Youtube Vimeo Video Player and Slider WP Plugin | High7.1 |
| CVE-2025-48163 | WordPress SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support <= 3.5.4 - Cross Site Scripting (XSS) VulnerabilityLambertGroup · SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support | High7.1 |
| CVE-2025-48168 | WordPress Apollo - Sticky Full Width HTML5 Audio Player <= 3.4 - Cross Site Scripting (XSS) VulnerabilityLambertGroup · Apollo - Sticky Full Width HTML5 Audio Player | High7.1 |
| CVE-2025-48170 | WordPress Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Cross Site Scripting (XSS) VulnerabilityLambertGroup · Universal Video Player - Addon for WPBakery Page Builder | High7.1 |
| CVE-2025-53205 | WordPress Radio Player Shoutcast & Icecast <= 4.4.7 - Cross Site Scripting (XSS) VulnerabilityLambertGroup · Radio Player Shoutcast & Icecast | High7.1 |
| CVE-2025-53212 | WordPress Revolution Video Player With Bottom Playlist <= 2.9.2 - Cross Site Scripting (XSS) VulnerabilityLambertGroup · Revolution Video Player With Bottom Playlist | High7.1 |
| CVE-2025-53559 | WordPress Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Cross Site Scripting (XSS) VulnerabilityLambertGroup · Universal Video Player - Addon for WPBakery Page Builder | High7.1 |
| CVE-2025-53562 | WordPress Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Cross Site Scripting (XSS) VulnerabilityLambertGroup · Universal Video Player - Addon for WPBakery Page Builder | High7.1 |
| CVE-2025-53563 | WordPress Youtube Vimeo Video Player and Slider <= 3.8 - Cross Site Scripting (XSS) VulnerabilityLambertGroup · Youtube Vimeo Video Player and Slider | High7.1 |
| CVE-2025-53564 | WordPress HTML5 Radio Player - WPBakery Page Builder Addon <= 2.5 - Cross Site Scripting (XSS) VulnerabilityLambertGroup · HTML5 Radio Player - WPBakery Page Builder Addon | High7.1 |
| CVE-2025-54056 | WordPress Responsive HTML5 Audio Player PRO With Playlist <= 3.5.8 - Cross Site Scripting (XSS) VulnerabilityLambertGroup · Responsive HTML5 Audio Player PRO With Playlist | High7.1 |
| CVE-2025-30626 | WordPress Multimedia Playlist Slider Addon for WPBakery Page Builder <= 2.1 - Cross Site Scripting (XSS) VulnerabilityLambertGroup · Multimedia Playlist Slider Addon for WPBakery Page Builder | High7.1 |
| CVE-2025-31070 | WordPress HTML5 Radio Player - WPBakery Page Builder Addon plugin <= 2.5 - Arbitrary File Download vulnerabilityLambertGroup · HTML5 Radio Player - WPBakery Page Builder Addon | High7.5 |
| CVE-2025-31057 | WordPress Universal Video Player plugin <= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerabilityLambertGroup · Universal Video Player | High7.1 |
| CVE-2025-31058 | WordPress Revolution Video Player plugin <= 2.9.2 - Reflected Cross Site Scripting (XSS) vulnerabilityLambertGroup · Revolution Video Player | High7.1 |
| CVE-2025-31426 | WordPress Sticky Radio Player plugin <= 3.4 - Reflected Cross Site Scripting (XSS) vulnerabilityLambertGroup · Sticky Radio Player | High7.1 |
| CVE-2025-31635 | WordPress CLEVER plugin <= 2.6 - Arbitrary File Download VulnerabilityLambertGroup · CLEVER | High7.5 |
| CVE-2025-31917 | WordPress Universal Video Player plugin <= 3.8.3 - Reflected Cross Site Scripting (XSS) vulnerabilityLambertGroup · Universal Video Player | High7.1 |
| CVE-2025-31925 | WordPress SHOUT plugin <= 3.5.3 - Reflected Cross Site Scripting (XSS) vulnerabilityLambertGroup · SHOUT | High7.1 |
| CVE-2025-31637 | WordPress SHOUT plugin <= 3.5.3 - SQL Injection VulnerabilityLambertGroup · SHOUT | High8.5 |