Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,943All CVEsplus 19,118 rejected
- 383Last 24 hours2,817 in the last 7 days
- 16,800Last 30 days1,547 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 5 | 2 | 0 | 0 | 7 | 17 |
| 2025 | 1 | 3 | 1 | 0 | 0 | 5 | 10 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| 2021 | 0 | 0 | 5 | 0 | 0 | 5 | 5 |
| Title | ||
|---|---|---|
| CVE-2026-57786 | WordPress WorkScout-Core plugin <= 1.7.08 - Cross Site Request Forgery (CSRF) to Broken Authentication vulnerabilitypurethemes · WorkScout-Core | High8.8 |
| CVE-2026-52716 | WordPress WorkScout-Core plugin <= 1.7.11 - Arbitrary File Deletion vulnerabilitypurethemes · WorkScout-Core | Medium6.5 |
| CVE-2025-14938 | Listeo-Core - Directory Plugin by Purethemes <= 2.0.27 - Unauthenticated Arbitrary Media Uploadpurethemes · Listeo-Core - Directory Plugin by Purethemes | Medium5.3 |
| CVE-2026-25461 | WordPress Listeo Core plugin <= 2.0.21 - Reflected Cross Site Scripting (XSS) vulnerabilitypurethemes · Listeo Core | High7.1 |
| CVE-2025-67960 | WordPress WorkScout-Core plugin <= 1.7.06 - Cross Site Scripting (XSS) vulnerabilitypurethemes · WorkScout-Core | High7.1 |
| CVE-2025-67959 | WordPress WorkScout theme <= 4.1.07 - Cross Site Scripting (XSS) vulnerabilitypurethemes · WorkScout | High7.1 |
| CVE-2025-67932 | WordPress Listeo Core plugin < 2.0.19 - Cross Site Scripting (XSS) vulnerabilitypurethemes · Listeo Core | High7.1 |
| CVE-2025-8413 | Listeo <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via soundcloud Shortcodepurethemes · Listeo - Directory & Listings With Booking - WordPress Theme | Medium6.4 |
| CVE-2025-59571 | WordPress WorkScout-Core plugin < 1.7.06 - Cross Site Scripting (XSS) vulnerabilitypurethemes · WorkScout-Core | High7.1 |
| CVE-2025-59572 | WordPress WorkScout-Core Plugin < 1.7.06 - Cross Site Request Forgery (CSRF) Vulnerabilitypurethemes · WorkScout-Core | High8.8 |
| CVE-2025-49404 | WordPress Listeo-Core Plugin < 2.0.7 - SQL Injection Vulnerabilitypurethemes · Listeo Core | High8.5 |
| CVE-2025-2232 | Realteo - Real Estate Plugin by Purethemes <= 1.2.8 - Authentication Bypass via 'do_register_user'PureThemes · Realteo | Critical9.8 |
| CVE-2021-24318 | Listeo < 1.6.11 - Multiple Authenticated IDOR Vulnerabilitiespurethemes · Listeo | Medium6.5 |
| CVE-2021-24317 | Listeo < 1.6.11 - Multiple XSS & XFS vulnerabilitiespurethemes · Listeo | Medium6.1 |
| CVE-2021-24246 | WorkScout Core < 1.3.4 - Authenticated Stored XSS & XFSPureThemes · Workscout Core | Medium5.4 |
| CVE-2021-24238 | Realteo < 1.2.4 - Arbitrary Property Deletion via IDORPureThemes · Realteo | Medium6.5 |
| CVE-2021-24237 | Realteo < 1.2.4 - Unauthenticated Reflected Cross-Site Scripting (XSS)PureThemes · Realteo | Medium6.1 |