Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,974All CVEsplus 19,118 rejected
- 407Last 24 hours2,833 in the last 7 days
- 16,806Last 30 days1,544 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 5 | 0 | 0 | 5 | 19 |
| 2025 | 0 | 2 | 5 | 0 | 0 | 7 | 14 |
| 2024 | 0 | 1 | 5 | 0 | 0 | 6 | 7 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2019 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2018 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2025-14945 | Events Manager - Calendar, Bookings, Tickets, and more! <= 7.3.3 - Unauthenticated Stored Cross-Site Scripting via Event Attributesnetweblogic · Events Manager – Calendar, Bookings, Tickets, and more! | Medium5.4 |
| CVE-2026-14280 | Events Manager <= 7.3.7.4 - Authenticated (Administrator+) Local File Inclusion via 'dbem_data[updates]' Array Keysnetweblogic · Events Manager – Calendar, Bookings, Tickets, and more! | Medium6.6 |
| CVE-2026-17089 | Events Manager <= 7.4.0.1 - Reflected Cross-Site Scripting via 'header_format' Parameternetweblogic · Events Manager – Calendar, Bookings, Tickets, and more! | Medium6.1 |
| CVE-2026-10627 | Events Manager <= 7.4.0 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'status', 'private', and 'private_only' Parametersnetweblogic · Events Manager – Calendar, Bookings, Tickets, and more! | Medium5.3 |
| CVE-2026-15023 | Events Manager <= 7.4.0 - Authenticated (Contributor+) SQL Injection via 'meta_key' Parameter in Event/Location Duplicate Actionnetweblogic · Events Manager – Calendar, Bookings, Tickets, and more! | Medium6.5 |
| CVE-2025-12976 | Events Manager <= 7.2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'events_list_grouped' Shortcodenetweblogic · Events Manager – Calendar, Bookings, Tickets, and more! | Medium6.4 |
| CVE-2025-12407 | Events Manager – Calendar, Bookings, Tickets, and more! <= 7.2.2.2 - Cross-Site Request Forgery to Location Deletionnetweblogic · Events Manager – Calendar, Bookings, Tickets, and more! | Medium4.3 |
| CVE-2025-12408 | Events Manager <= 7.2.2.2 - Unauthenticated Information Exposurenetweblogic · Events Manager – Calendar, Bookings, Tickets, and more! | Medium5.3 |
| CVE-2025-6976 | Events Manager <= 7.0.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Plugin Shortcodesnetweblogic · Events Manager – Calendar, Bookings, Tickets, and more! | Medium6.4 |
| CVE-2025-6975 | Event Manager <= 7.0.3 - Reflected Cross-Site Scripting via `calendar_header` Parameternetweblogic · Events Manager – Calendar, Bookings, Tickets, and more! | Medium6.1 |
| CVE-2025-6970 | Events Manager <= 7.0.3 - Unauthenticated SQL Injection via `orderby` Parameternetweblogic · Events Manager – Calendar, Bookings, Tickets, and more! | High7.5 |
| CVE-2024-11260 | Events Manager – Calendar, Bookings, Tickets, and more! <= 6.6.3 - Unauthenticated SQL Injection via Event Status Parameternetweblogic · Events Manager – Calendar, Bookings, Tickets, and more! | High7.5 |
| CVE-2024-5889 | Events Manager <= 6.4.8 - Reflected Cross-Site Scriptingnetweblogic · Events Manager – Calendar, Bookings, Tickets, and more! | Medium6.1 |
| CVE-2024-3492 | Events Manager – Calendar, Bookings, Tickets, and more! <= 6.4.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via event, location, and event_category Shortcodesnetweblogic · Events Manager – Calendar, Bookings, Tickets, and more! | Medium6.4 |
| CVE-2024-2110 | Events Manager <= 6.4.7.1 - Cross-Site Request Forgerynetweblogic · Events Manager – Calendar, Bookings, Tickets, and more! | Medium4.3 |
| CVE-2024-1770 | Meta Tag Manager <= 3.0.2 - Authenticated (Subscriber+) PHP Object Injectionnetweblogic · Meta Tag Manager | High8.8 |
| CVE-2024-2111 | Events Manager <= 6.4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scriptingnetweblogic · Events Manager – Calendar, Bookings, Tickets, and more! | Medium6.4 |
| CVE-2024-0614 | Events Manager <= 6.4.6.4 - Authenticated(Administator+) Stored Cross-Site Scripting via settingsnetweblogic · Events Manager – Calendar, Bookings, Tickets, and more! | Medium4.4 |
| CVE-2018-0576 | Cross-site scripting vulnerability in Events Manager plugin prior to version 5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML…NetWebLogic · Events Manager | Medium5.4 |