Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 401,673All CVEsplus 19,141 rejected
  • 692Last 24 hours2,975 in the last 7 days
  • 17,156Last 30 days1,607 of them critical
  • 1,769Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202610100210
20251220058
20241110033

Latest CVEs

10 CVEs, newest first

CVEs, newest first
Title
CVE-2026-32558
WordPress Affiliate Pro - Affiliate Program for WooCommerce & WordPress plugin <= 8.9.1 - Privilege Escalation vulnerabilityRedefiningTheWeb · Affiliate Pro - Affiliate Program for WooCommerce & WordPress
Critical9.8
CVE-2026-7559
Affilia <= 3.3.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Status Modificationredefiningtheweb · Affiliate Program & Referral Tracking for WooCommerce & WordPress – Affilia
Medium4.3
CVE-2025-64231
WordPress WordPress Contact Form 7 PDF, Google Sheet & Database plugin <= 3.0.0 - Arbitrary File Upload vulnerabilityRedefiningTheWeb · WordPress Contact Form 7 PDF, Google Sheet & Database
Critical9.9
CVE-2025-48342
WordPress Dynamic Pricing & Discounts Lite for WooCommerce plugin <= 2.0.3 - Cross Site Request Forgery (CSRF) vulnerabilityRedefiningTheWeb · Dynamic Pricing & Discounts Lite for WooCommerce
Medium5.4
CVE-2025-39518
WordPress BMA Lite plugin <= 1.4.2 - SQL Injection vulnerabilityRedefiningTheWeb · BMA Lite
High7.6
CVE-2025-31850
WordPress PDF Generator Addon for Elementor Page Builder plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerabilityRedefiningTheWeb · PDF Generator Addon for Elementor Page Builder
Medium6.5
CVE-2025-24569
WordPress PDF Generator Addon for Elementor Page Builder plugin <= 1.7.5 - Arbitrary File Read vulnerabilityRedefiningTheWeb · PDF Generator Addon for Elementor Page Builder
High7.5
CVE-2024-9935
PDF Generator Addon for Elementor Page Builder <= 2.0.0 - Unauthenticated Arbitrary File Downloadredefiningtheweb · PDF Generator for WordPress Elementor
High7.5
CVE-2024-50449
WordPress PDF Generator Addon for Elementor Page Builder plugin <= 1.7.4 - Cross Site Scripting (XSS) vulnerabilityRedefiningTheWeb · PDF Generator Addon for Elementor Page Builder
Medium6.5
CVE-2024-9289
WordPress & WooCommerce Affiliate Program <= 8.4.1 - Authentication Bypass to Account Takeover and Privilege EscalationRedefiningTheWeb · WordPress & WooCommerce Affiliate Program
Critical9.8