Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read just now.

At a glance

Published CVEs; rejected ones are not counted.

  • 401,094All CVEsplus 19,119 rejected
  • 503Last 24 hours2,831 in the last 7 days
  • 16,881Last 30 days1,552 of them critical
  • 1,768Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202600000021
20252127002121

Latest CVEs

21 CVEs, newest first

CVEs, newest first
Title
CVE-2025-30967
WordPress WPJobBoard plugin < 5.11.1 - CSRF to Remote Code Execution (RCE) vulnerabilityNotFound · WPJobBoard
Critical9.6
CVE-2025-30966
WordPress WPJobBoard plugin < 5.11.1 - Path Traversal vulnerabilityNotFound · WPJobBoard
Medium5.4
CVE-2025-27008
WordPress Unlimited Timeline < 1.6.1 - Broken Access Control VulnerabilityNotFound · Unlimited Timeline
High7.5
CVE-2025-26730
WordPress Macro Calculator with Admin Email Optin & Data plugin <= 1.0 - Multiple Vulnerabilities vulnerabilityNotFound · Macro Calculator with Admin Email Optin & Data
High7.5
CVE-2025-22263
WordPress Global Gallery plugin <= 8.8.0 - Reflected Cross Site Scripting (XSS) vulnerabilityNotFound · Global Gallery
High7.1
CVE-2025-30965
WordPress WPJobBoard plugin < 5.11.1 - Multiple Cross Site Request Forgery (CSRF) vulnerabilities vulnerabilityNotFound · WPJobBoard
Medium4.3
CVE-2025-31409
WordPress Bridge Core plugin < 3.3.1 - Cross Site Scripting (XSS) vulnerabilityNotFound · Bridge Core
Medium6.5
CVE-2025-26972
WordPress PrivateContent plugin <= 8.11.5 - Reflected Cross Site Scripting (XSS) vulnerabilityNotFound · PrivateContent
High7.1
CVE-2025-26940
WordPress Pie Register Premium plugin <= 3.8.3.2 - Path Traversal to Non-Arbitrary File Deletion vulnerabilityNotFound · Pie Register Premium
Medium6.3
CVE-2025-25129
WordPress Callback Request plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerabilityNotFound · Callback Request
High7.1
CVE-2025-26948
WordPress Pie Register Premium plugin <= 3.8.3.2 - Broken Access Control vulnerabilityNotFound · Pie Register Premium
Medium4.3
CVE-2025-26776
WordPress Chaty Pro Plugin <= 3.3.3 - Arbitrary File Upload vulnerabilityNotFound · Chaty Pro
Critical10.0
CVE-2025-22680
WordPress Ad Inserter Pro plugin <= 2.7.39 - Reflected Cross Site Scripting (XSS) vulnerabilityNotFound · Ad Inserter Pro
High7.1
CVE-2024-43333
WordPress Admin and Site Enhancements (ASE) Pro Plugin <= 7.6.2.1 - Privilege Escalation vulnerabilityNotFound · Admin and Site Enhancements (ASE) Pro
High7.5
CVE-2025-24781
WordPress WPJobBoard plugin <= 5.10.1 - Reflected Cross Site Scripting (XSS) vulnerabilityNotFound · WPJobBoard
High7.1
CVE-2025-24744
WordPress Bridge Core plugin <= 3.3 - Broken Access Control vulnerabilityNotFound · Bridge Core
Medium4.3
CVE-2025-24653
WordPress Admin and Site Enhancements (ASE) Pro Plugin <= 7.6.1.1 - Broken Access Control vulnerabilityNotFound · Admin and Site Enhancements (ASE) Pro
Medium4.3
CVE-2025-22763
WordPress Brizy Pro Plugin <= 2.6.1 - Reflected Cross Site Scripting (XSS) vulnerabilityNotFound · Brizy Pro
High7.1
CVE-2024-49333
WordPress Hero Menu plugin <= 1.16.5 - SQL Injection vulnerabilityNotFound · Hero Mega Menu - Responsive WordPress Menu Plugin
High8.5
CVE-2024-49303
WordPress Hero Menu plugin <= 1.16.5 - SQL Injection vulnerabilityNotFound · Hero Mega Menu - Responsive WordPress Menu Plugin
High8.5
CVE-2024-49300
WordPress Hero Menu plugin <= 1.16.5 - Cross Site Scripting (XSS) vulnerabilityNotFound · Hero Mega Menu - Responsive WordPress Menu Plugin
High7.1