Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 10 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 401,367All CVEsplus 19,141 rejected
  • 471Last 24 hours2,753 in the last 7 days
  • 16,918Last 30 days1,566 of them critical
  • 1,769Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202602200413
20250010019
20241010028
20231320066

Latest CVEs

13 CVEs, newest first

CVEs, newest first
Title
CVE-2026-84777
WordPress Really Simple SSL plugin <= 9.8.0 - 2FA Bypass vulnerabilityReally Simple Plugins · Really Simple SSL
High7.4
CVE-2026-84775
WordPress Really Simple SSL plugin <= 9.8.0 - Denial of Service Attack vulnerabilityReally Simple Plugins · Really Simple SSL
Medium5.3
CVE-2026-48970
WordPress Really Simple SSL plugin <= 9.5.10 - Broken Authentication vulnerabilityReally Simple Plugins · Really Simple SSL
High8.1
CVE-2026-32461
WordPress Really Simple SSL plugin <= 9.5.7 - Broken Access Control vulnerabilityReally Simple Plugins · Really Simple SSL
Medium4.3
CVE-2025-24623
WordPress Really Simple Security plugin <= 9.1.4 - Cross Site Request Forgery (CSRF) vulnerabilityReally Simple Plugins · Really Simple SSL
Medium4.3
CVE-2024-10924
Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication BypassReally Simple Plugins · Really Simple Security Pro multisite
Critical9.8
CVE-2024-31229
WordPress Really Simple SSL plugin <= 7.2.3 - Server Side Request Forgery (SSRF) vulnerabilityReally Simple Plugins · Really Simple SSL
Medium5.5
CVE-2023-52180
WordPress Recipe Maker For Your Food Blog from Zip Recipes Plugin <= 8.1.0 is vulnerable to SQL InjectionReally Simple Plugins · Recipe Maker For Your Food Blog from Zip Recipes
High7.6
CVE-2023-5761
The Burst Statistics – Privacy-Friendly Analytics for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'url' parameter in versions 1.4.0…rogierlankhorst · Burst Statistics – Privacy-Friendly Analytics for WordPress
Critical9.8
CVE-2023-33333
WordPress Complianz and Complianz Premium plugins - Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS)Really Simple Plugins · Complianz
High7.1
CVE-2023-34030
WordPress Complianz and Complianz Premium plugins - Cross Site Request Forgery (CSRF)Really Simple Plugins · Complianz
Medium6.5
CVE-2023-31076
WordPress Recipe Maker For Your Food Blog from Zip Recipes Plugin <= 8.0.6 is vulnerable to Cross Site Scripting (XSS)Really Simple Plugins · Recipe Maker For Your Food Blog from Zip Recipes
High7.1
CVE-2023-35089
WordPress Recipe Maker For Your Food Blog from Zip Recipes Plugin <= 8.0.7 is vulnerable to Cross Site Request Forgery (CSRF)Really Simple Plugins · Recipe Maker For Your Food Blog from Zip Recipes
Medium4.3