Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,944All CVEsplus 19,118 rejected
- 383Last 24 hours2,815 in the last 7 days
- 16,801Last 30 days1,547 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 2 | 6 | 0 | 0 | 10 | 76 |
| 2025 | 2 | 10 | 19 | 1 | 0 | 32 | 66 |
| 2024 | 1 | 9 | 21 | 0 | 0 | 31 | 34 |
| 2023 | 0 | 1 | 0 | 0 | 0 | 1 | 3 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2021 | 0 | 0 | 2 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-116392 | WordPress Accordion plugin <= 2.3.25 - PHP Object Injection vulnerabilityPickPlugins · Accordion | High7.2 |
| CVE-2024-11080 | Post Grid and Gutenberg Blocks – ComboBlocks 2.2.85 - 2.3.32 - Unauthenticated Hook Injectionpickplugins · Post Grid | Critical9.8 |
| CVE-2026-10207 | PickPlugins Question Answer <= 1.2.73 - Unauthenticated SQL Injection via 'id' Parameterpickplugins · PickPlugins Question Answer | High7.5 |
| CVE-2026-65456 | WordPress Product Slider for WooCommerce plugin <= 1.13.62 - Insecure Direct Object References (IDOR) vulnerabilityPickPlugins · Product Slider for WooCommerce | Medium4.3 |
| CVE-2026-10862 | Accordions <= 2.3.23 - Authenticated (Custom+) Stored Cross-Site Scripting via Accordion Body Fieldpickplugins · Accordions | Medium6.4 |
| CVE-2025-62745 | WordPress Team Showcase plugin <= 1.22.28 - Cross Site Scripting (XSS) vulnerabilityPickPlugins · Team Showcase | Medium6.5 |
| CVE-2026-7458 | User Verification by PickPlugins <= 2.0.46 - Unauthenticated Authentication Bypass via OTP Verification REST API Endpointpickplugins · User Verification by PickPlugins | Critical9.8 |
| CVE-2026-32497 | WordPress User Verification plugin <= 2.0.45 - Email Verification Bypass vulnerabilityPickPlugins · User Verification | Medium5.3 |
| CVE-2026-25455 | WordPress Product Slider for WooCommerce plugin <= 1.13.61 - Broken Access Control vulnerabilityPickPlugins · Product Slider for WooCommerce | Medium6.5 |
| CVE-2025-68000 | WordPress Testimonial Slider plugin <= 2.0.15 - Broken Access Control vulnerabilityPickPlugins · Testimonial Slider | Medium6.5 |
| CVE-2025-68605 | WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Cross Site Scripting (XSS) vulnerabilityPickPlugins · Post Grid and Gutenberg Blocks | Medium6.5 |
| CVE-2025-63043 | WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Insecure Direct Object References (IDOR) vulnerabilityPickPlugins · Post Grid and Gutenberg Blocks | Medium5.3 |
| CVE-2025-66058 | WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerabilityPickPlugins · Post Grid and Gutenberg Blocks | Medium6.5 |
| CVE-2025-12374 | Email Verification, Email OTP, Block Spam Email, Passwordless login, Hide Login, Magic Login – User Verification <= 2.0.44 - Authentication Bypass to Account Takeoverpickplugins · User Verification by PickPlugins | Critical9.8 |
| CVE-2025-62929 | WordPress Testimonial Slider plugin <= 2.0.15 - Broken Access Control vulnerabilityPickPlugins · Testimonial Slider | Medium6.5 |
| CVE-2025-62924 | WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerabilityPickPlugins · Post Grid and Gutenberg Blocks | Medium6.5 |
| CVE-2025-53421 | WordPress Accordion plugin <= 2.3.14 - Broken Access Control vulnerabilityPickPlugins · Accordion | Medium6.5 |
| CVE-2025-60162 | WordPress Job Board Manager Plugin <= 2.1.61 - Cross Site Scripting (XSS) VulnerabilityPickPlugins · Job Board Manager | Medium6.5 |
| CVE-2025-58678 | WordPress Accordion Plugin <= 2.3.15 - Broken Access Control VulnerabilityPickPlugins · Accordion | Medium6.5 |
| CVE-2025-58827 | WordPress Job Board Manager Plugin <= 2.1.61 - Content Injection VulnerabilityPickPlugins · Job Board Manager | Low3.8 |
| CVE-2025-54007 | WordPress Post Grid and Gutenberg Blocks Plugin <= 2.3.11 - PHP Object Injection VulnerabilityPickPlugins · Post Grid and Gutenberg Blocks | High8.8 |
| CVE-2025-49324 | WordPress Job Board Manager plugin <= 2.1.60 - Broken Access Control VulnerabilityPickPlugins · Job Board Manager | Medium5.3 |
| CVE-2025-49075 | WordPress Wishlist plugin <= 1.0.43 - Cross Site Scripting (XSS) vulnerabilityPickPlugins · Wishlist | Medium6.5 |
| CVE-2025-24655 | WordPress Wishlist Plugin <= 1.0.39 - Reflected Cross Site Scripting (XSS) vulnerabilityPickPlugins · Wishlist | High7.1 |
| CVE-2025-32646 | WordPress Question Answer plugin <= 1.2.70 - Reflected Cross Site Scripting (XSS) vulnerabilityPickPlugins · Question Answer | High7.1 |
| CVE-2025-32647 | WordPress Question Answer plugin <= 1.2.73 - PHP Object Injection vulnerabilityPickPlugins · Question Answer | High8.8 |
| CVE-2025-32618 | WordPress Wishlist plugin <= 1.0.46 - SQL Injection vulnerabilityPickPlugins · Wishlist | High8.5 |
| CVE-2025-32144 | WordPress Job Board Manager Plugin <= 2.1.61 - PHP Object Injection vulnerabilityPickPlugins · Job Board Manager | High8.8 |
| CVE-2025-32143 | WordPress Accordion plugin <= 2.3.11 - PHP Object Injection vulnerabilityPickPlugins · Accordion | High8.8 |
| CVE-2025-32272 | WordPress Wishlist plugin <= 1.0.46 - Cross Site Request Forgery (CSRF) vulnerabilityPickPlugins · Wishlist | Medium4.3 |
| CVE-2025-30889 | WordPress Testimonial Slider plugin <= 2.0.13 - PHP Object Injection vulnerabilityPickPlugins · Testimonial Slider | High8.8 |
| CVE-2025-31862 | WordPress Job Board Manager Plugin <= 2.1.61 - Broken Access Control vulnerabilityPickPlugins · Job Board Manager | Medium5.3 |
| CVE-2025-31810 | WordPress Question Answer plugin <= 1.2.73 - Broken Access Control vulnerabilityPickPlugins · Question Answer | Medium5.3 |
| CVE-2024-12634 | Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins <= 2.0.59 - Cross-Site Request Forgery to Stored Cross-Site Scriptingpickplugins · Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins | Medium6.1 |
| CVE-2024-12809 | Wishlist <= 1.0.43 - Authenticated (Contributor+) Stored Cross-Site Scriptingpickplugins · Wishlist | Medium6.4 |
| CVE-2024-13469 | Pricing Table by PickPlugins <= 1.12.10 - Authenticated (Contributor+) Stored Cross-Site Scriptingpickplugins · PickPlugins Pricing Table | Medium6.4 |
| CVE-2024-13796 | Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.6 - Unauthenticated User Information Exposurepickplugins · Post Grid | Medium5.3 |
| CVE-2025-26915 | WordPress Wishlist Plugin <= 1.0.41 - SQL Injection vulnerabilityPickPlugins · Wishlist | High8.5 |
| CVE-2024-13798 | Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.5 - Unauthenticated Paid Order Creationpickplugins · Post Grid | Medium5.3 |
| CVE-2025-22679 | WordPress Job Board Manager Plugin <= 2.1.61 - Reflected Cross Site Scripting (XSS) vulnerabilityPickPlugins · Job Board Manager | High7.1 |
| CVE-2025-24622 | WordPress Job Board Manager plugin <= 2.1.59 - Cross Site Request Forgery (CSRF) vulnerabilityPickPlugins · Job Board Manager | Medium5.4 |
| CVE-2024-9636 | Post Grid and Gutenberg Blocks 2.2.85 - 2.3.3 - Unauthenticated Privilege Escalationpickplugins · Post Grid and Gutenberg Blocks – ComboBlocks | Critical9.8 |
| CVE-2024-55993 | WordPress Job Board Manager plugin <= 2.1.61 - Broken Access Control vulnerabilityPickPlugins · Job Board Manager | Medium5.3 |
| CVE-2024-54273 | WordPress Mail Picker plugin <= 1.0.14 - PHP Object Injection vulnerabilityPickPlugins · Mail Picker | Critical9.8 |
| CVE-2024-10937 | Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins <= 2.0.58 - Sensitive Information Exposurepickplugins · Related Posts By PickPlugins | Medium5.3 |
| CVE-2024-53772 | WordPress Mail Picker plugin <= 1.0.15 - Cross Site Scripting (XSS) vulnerabilityPickPlugins · Mail Picker | Medium6.5 |
| CVE-2024-9111 | Product Designer <= 1.0.36 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadpickplugins · PickPlugins Product Designer for WooCommerce | Medium6.4 |
| CVE-2024-38726 | WordPress Product Designer plugin <= 1.0.33 - Arbitrary Content Deletion vulnerabilityPickPlugins · Product Designer | High7.5 |
| CVE-2024-50432 | WordPress Post Grid and Gutenberg Blocks plugin <= 2.2.93 - Cross Site Scripting (XSS) vulnerabilityPickPlugins · Post Grid and Gutenberg Blocks | Medium6.5 |
| CVE-2021-4450 | Post Grid <= 2.1.12 - Contributor+ SQL Injectionpickplugins · Post Grid | High8.8 |