Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,973All CVEsplus 19,118 rejected
- 406Last 24 hours2,834 in the last 7 days
- 16,810Last 30 days1,544 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 1 | 8 | 0 | 0 | 9 | 33 |
| 2025 | 1 | 6 | 8 | 0 | 0 | 15 | 24 |
| 2024 | 1 | 2 | 2 | 0 | 0 | 5 | 9 |
| 2023 | 0 | 3 | 0 | 0 | 0 | 3 | 4 |
| 2022 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-27054 | WordPress Penci Soledad Data Migrator plugin <= 1.3.1 - Reflected Cross Site Scripting (XSS) vulnerabilityPenciDesign · Penci Soledad Data Migrator | High7.1 |
| CVE-2026-27069 | WordPress Soledad theme <= 8.7.2 - Cross Site Scripting (XSS) vulnerabilityPenciDesign · Soledad | Medium6.5 |
| CVE-2026-27059 | WordPress Penci Recipe plugin <= 4.1 - Cross Site Scripting (XSS) vulnerabilityPenciDesign · Penci Recipe | Medium6.5 |
| CVE-2026-27058 | WordPress Penci Podcast plugin <= 1.7 - Cross Site Scripting (XSS) vulnerabilityPenciDesign · Penci Podcast | Medium6.5 |
| CVE-2026-27057 | WordPress Penci Filter Everything plugin <= 1.7 - Cross Site Scripting (XSS) vulnerabilityPenciDesign · Penci Filter Everything | Medium6.5 |
| CVE-2026-27055 | WordPress Penci AI SmartContent Creator plugin <= 2.0 - Broken Access Control vulnerabilityPenciDesign · Penci AI SmartContent Creator | Medium4.3 |
| CVE-2026-24601 | WordPress Penci Pay Writer plugin <= 1.5 - Cross Site Scripting (XSS) vulnerabilityPenciDesign · Penci Pay Writer | Medium6.5 |
| CVE-2026-24600 | WordPress Penci Review plugin <= 3.5 - Cross Site Scripting (XSS) vulnerabilityPenciDesign · Penci Review | Medium6.5 |
| CVE-2026-24354 | WordPress Penci Shortcodes & Performance plugin <= 6.1 - Cross Site Scripting (XSS) vulnerabilityPenciDesign · Penci Shortcodes & Performance | Medium6.5 |
| CVE-2025-64223 | WordPress PenNews theme < 6.7.3 - Local File Inclusion vulnerabilityPenciDesign · PenNews | High8.1 |
| CVE-2025-64188 | WordPress Soledad theme <= 8.6.9 - Privilege Escalation vulnerabilityPenciDesign · Soledad | Critical9.8 |
| CVE-2025-68066 | WordPress Soledad theme <= 8.7.0 - Local File Inclusion vulnerabilityPenciDesign · Soledad | High7.5 |
| CVE-2025-67572 | WordPress PenNews theme < 6.7.4 - Broken Access Control vulnerabilityPenciDesign · PenNews | Medium5.3 |
| CVE-2025-49909 | WordPress Penci Bookmark & Follow plugin < 2.4 - Cross Site Scripting (XSS) vulnerabilityPenciDesign · Penci Bookmark & Follow | High7.1 |
| CVE-2025-59583 | WordPress Penci Filter Everything Plugin < 1.7 - Cross Site Scripting (XSS) VulnerabilityPenciDesign · Penci Filter Everything | Medium6.5 |
| CVE-2025-59584 | WordPress Penci Podcast Plugin <= 1.6 - Cross Site Scripting (XSS) VulnerabilityPenciDesign · Penci Podcast | Medium6.5 |
| CVE-2025-59585 | WordPress Penci Recipe Plugin <= 4.0 - Cross Site Scripting (XSS) VulnerabilityPenciDesign · Penci Recipe | Medium6.5 |
| CVE-2025-59586 | WordPress Penci Portfolio Plugin <= 3.5 - Cross Site Scripting (XSS) VulnerabilityPenciDesign · Penci Portfolio | Medium6.5 |
| CVE-2025-59587 | WordPress Penci Shortcodes & Performance Plugin < 6.1 - Cross Site Scripting (XSS) VulnerabilityPenciDesign · Penci Shortcodes & Performance | Medium6.5 |
| CVE-2025-59588 | WordPress Soledad Theme <= 8.6.8 - Local File Inclusion VulnerabilityPenciDesign · Soledad | High7.5 |
| CVE-2025-59589 | WordPress Soledad Theme <= 8.6.8 - Cross Site Scripting (XSS) VulnerabilityPenciDesign · Soledad | Medium6.5 |
| CVE-2025-8143 | Soledad <= 8.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pcsml_smartlists_h'pencidesign · Soledad | Medium6.4 |
| CVE-2025-8105 | Soledad <= 8.6.7 - Unauthenticated Arbitrary Shortcode Executionpencidesign · Soledad | High7.3 |
| CVE-2025-8142 | Soledad <= 8.6.7 - Authenticated (Contributor+) Local File Inclusion via 'header_layout'pencidesign · Soledad | High8.8 |
| CVE-2024-11289 | Soledad <= 8.5.9 - Unauthenticated Limited Local File Inclusionpencidesign · Soledad | High8.1 |
| CVE-2024-3551 | Penci Soledad Data Migrator <= 1.3.0 - Unauthenticated Local File Inclusionpencidesign · Penci Soledad Data Migrator | Critical9.8 |
| CVE-2024-31369 | WordPress Soledad theme <= 8.4.2 - Cross Site Request Forgery (CSRF) vulnerabilityPenciDesign · Soledad | Medium5.4 |
| CVE-2024-31368 | WordPress Soledad theme <= 8.4.2 - Unauthenticated Broken Access Control vulnerabilityPenciDesign · Soledad | Medium6.5 |
| CVE-2024-31367 | WordPress Soledad theme <= 8.4.2 - Authenticated Broken Access Control vulnerabilityPenciDesign · Soledad | High7.1 |
| CVE-2023-49826 | WordPress Soledad Theme <= 8.4.1 is vulnerable to PHP Object InjectionPenciDesign · Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme | High8.1 |
| CVE-2023-49825 | WordPress Soledad Theme <= 8.4.1 is vulnerable to SQL InjectionPenciDesign · Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme | High8.5 |
| CVE-2023-49827 | WordPress Soledad Theme <= 8.4.1 is vulnerable to Cross Site Scripting (XSS)PenciDesign · Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme | High7.1 |
| CVE-2022-41788 | WordPress Soledad premium theme <= 8.2.5 - Auth. Cross-Site Scripting (XSS) vulnerabilityPenciDesign · Soledad (WordPress theme) | Medium5.4 |