Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read just now.
At a glance
Published CVEs; rejected ones are not counted.
- 401,097All CVEsplus 19,119 rejected
- 495Last 24 hours2,830 in the last 7 days
- 16,880Last 30 days1,551 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 3 | 4 | 0 | 0 | 7 | 23 |
| 2025 | 0 | 1 | 3 | 0 | 0 | 4 | 16 |
| 2024 | 0 | 0 | 9 | 0 | 0 | 9 | 12 |
| 2023 | 0 | 1 | 2 | 0 | 0 | 3 | 3 |
| Title | ||
|---|---|---|
| CVE-2026-96570 | Schema & Structured Data for WP & AMP <= 1.67 - Unauthenticated Stored Cross-Site Scripting via 'saswp_review_text' Parametermagazine3 · Schema & Structured Data for WP & AMP | High7.2 |
| CVE-2026-97291 | WordPress Schema & Structured Data for WP & AMP plugin <= 1.66 - PHP Object Injection vulnerabilityMagazine3 · Schema & Structured Data for WP & AMP | High8.8 |
| CVE-2026-15731 | WP Multilang – Translation and Multilingual Plugin <= 2.4.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Contentmagazine3 · WP Multilang – Translation and Multilingual Plugin | Medium6.4 |
| CVE-2026-73342 | WordPress WP Multilang plugin <= 2.4.31 - Cross Site Scripting (XSS) vulnerabilityMagazine3 · WP Multilang | High7.1 |
| CVE-2026-32343 | WordPress Easy Table of Contents plugin <= 2.0.80 - Cross Site Request Forgery (CSRF) vulnerabilityMagazine3 · Easy Table of Contents | Medium4.3 |
| CVE-2025-13738 | Easy Table of Contents <= 2.0.78 - Authenticated (Contributor+) Stored Cross-Site Scriptingmagazine3 · Easy Table of Contents | Medium6.4 |
| CVE-2025-14069 | Schema & Structured Data for WP & AMP <= 1.54 - Authenticated (Contributor+) Stored Cross-Site Scripting via User Custom Schemamagazine3 · Schema & Structured Data for WP & AMP | Medium6.4 |
| CVE-2025-11502 | Schema & Structured Data for WP & AMP <= 1.51 - Authenticated (Contributor+) Stored Cross-Site Scriptingmagazine3 · Schema & Structured Data for WP & AMP | Medium6.4 |
| CVE-2025-49307 | WordPress WP Multilang plugin <= 2.4.19 - Local File Inclusion VulnerabilityMagazine3 · WP Multilang | High7.5 |
| CVE-2024-13575 | Web Stories Enhancer – Level Up Your Web Stories <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scriptingmagazine3 · Web Stories Enhancer – Level Up Your Web Stories | Medium6.4 |
| CVE-2024-38751 | WordPress AdsforWP plugin <= 1.9.28 - Cross Site Request Forgery (CSRF) vulnerabilityMagazine3 · Google Adsense & Banner Ads by AdsforWP | Medium4.3 |
| CVE-2023-25469 | WordPress Easy Table of Contents plugin <= 2.0.45.2 - Broken Access Control vulnerabilityMagazine3 · Easy Table of Contents | Medium5.4 |
| CVE-2024-47318 | WordPress PWA for WP & AMP plugin <= 1.7.72 - Broken Access Control vulnerabilityMagazine3 · PWA for WP & AMP | Medium4.3 |
| CVE-2024-49683 | WordPress Schema & Structured Data for WP & AMP plugin <= 1.3.5 - Sensitive Data Exposure vulnerabilityMagazine3 · Schema & Structured Data for WP & AMP | Medium5.3 |
| CVE-2024-5582 | Schema & Structured Data for WP & AMP <= 1.33 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Attributemagazine3 · Schema & Structured Data for WP & AMP | Medium6.4 |
| CVE-2024-3491 | Schema & Structured Data for WP & AMP <= 1.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via How To and FAQ Blocksmagazine3 · Schema & Structured Data for WP & AMP | Medium6.4 |
| CVE-2024-1288 | Schema & Structured Data for WP & AMP <= 1.26 - Missing Authorization to reCaptcha Key Modificationmagazine3 · Schema & Structured Data for WP & AMP | Medium4.3 |
| CVE-2024-1586 | Schema & Structured Data for WP & AMP <= 1.26 - Authenticated (Custom) Stored Cross-Site Scriptingmagazine3 · Schema & Structured Data for WP & AMP | Medium6.4 |
| CVE-2023-51677 | WordPress Schema & Structured Data for WP & AMP Plugin <= 1.23 is vulnerable to Cross Site Scripting (XSS)Magazine3 · Schema & Structured Data for WP & AMP | Medium6.5 |
| CVE-2024-22146 | WordPress Schema & Structured Data for WP & AMP Plugin <= 1.25 is vulnerable to Cross Site Scripting (XSS)Magazine3 · Schema & Structured Data for WP & AMP | Medium6.5 |
| CVE-2023-35883 | WordPress Core Web Vitals & PageSpeed Booster Plugin <= 1.0.12 is vulnerable to Open RedirectionMagazine3 · Core Web Vitals & PageSpeed Booster | Medium4.7 |
| CVE-2021-4366 | PWA for WP & AMP < = 1.7.32 - Missing Authorizationmagazine3 · PWA for WP – Progressive Web Apps Made Simple | Medium6.3 |
| CVE-2021-4354 | PWA for WP & AMP <= 1.7.32 - Arbitrary File Uploadmagazine3 · PWA for WP – Progressive Web Apps Made Simple | High8.8 |