Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,937All CVEsplus 19,118 rejected
- 378Last 24 hours2,817 in the last 7 days
- 16,798Last 30 days1,547 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 3 | 0 | 0 | 0 | 5 | 28 |
| 2025 | 0 | 0 | 2 | 0 | 0 | 2 | 23 |
| 2024 | 3 | 6 | 5 | 0 | 0 | 14 | 21 |
| 2023 | 0 | 3 | 4 | 0 | 0 | 7 | 7 |
| Title | ||
|---|---|---|
| CVE-2026-68566 | WordPress BookingPress Appointment Booking Pro plugin <= 6.0.2 - SQL Injection vulnerabilityRepute Infosystems · BookingPress Appointment Booking Pro | Critical9.3 |
| CVE-2026-27060 | WordPress ARMember Premium plugin < 7.6 - PHP Object Injection vulnerabilityRepute Infosystems · ARMember Premium | High8.8 |
| CVE-2026-11823 | BookingPress Appointment Booking Pro <= 5.7.1 - Unauthenticated SQL Injection via 'store_service_date' ParameterRepute Infosystems · BookingPress Appointment Booking Pro | High7.5 |
| CVE-2026-57338 | WordPress ARForms plugin <= 7.1.2 - Reflected Cross Site Scripting (XSS) vulnerabilityRepute InfoSystems · ARForms | High7.1 |
| CVE-2026-6960 | BookingPress Pro <= 5.6 - Unauthenticated Arbitrary File Upload via Signature Custom FieldRepute Infosystems · BookingPress Appointment Booking Pro | Critical9.8 |
| CVE-2022-47425 | WordPress ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin <= 3.4.10 - Broken Access ControlRepute Infosystems · ARMember | Medium4.3 |
| CVE-2023-39994 | WordPress ARMember Premium plugin <= 5.9.2 - Broken Access ControlRepute InfoSystems · ARMember Premium | Medium4.3 |
| CVE-2022-47424 | WordPress ARMember plugin <= 4.0.5 - Cross Site Request Forgery (CSRF)Repute InfoSystems · ARMember | Medium5.4 |
| CVE-2024-37920 | WordPress ARForms Form Builder plugin <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerabilityRepute InfoSystems · ARForms Form Builder | High7.1 |
| CVE-2024-34799 | WordPress BookingPress plugin <= 1.0.82 - Appointment Duration Manipulation vulnerabilityRepute Infosystems · BookingPress | Medium6.5 |
| CVE-2023-47837 | WordPress ARMember plugin <= 4.0.10 - Membership Plan Bypass vulnerabilityRepute Infosystems · ARMember | High8.3 |
| CVE-2023-51356 | WordPress ARMember plugin <= 4.0.10 - Privilege Escalation vulnerabilityRepute Infosystems · ARMember | High8.8 |
| CVE-2024-31270 | WordPress ARForms Form Builder plugin <= 1.6.1 - Broken Access Control vulnerabilityRepute InfoSystems · ARForms Form Builder | High7.6 |
| CVE-2023-51405 | WordPress BookingPress plugin <= 1.0.74 - Booking Price Manipulation vulnerabilityRepute Infosystems · BookingPress | High8.2 |
| CVE-2024-32948 | WordPress ARMember – Membership Plugin plugin <= 4.0.28 - Broken Access Control vulnerabilityRepute Infosystems · ARMember | Critical9.1 |
| CVE-2024-31272 | WordPress ARForms Form Builder plugin <= 1.6.1 - Cross Site Request Forgery (CSRF) vulnerabilityRepute InfoSystems · ARForms Form Builder | Medium6.3 |
| CVE-2024-31296 | WordPress BookingPress plugin <= 1.0.81 - Insecure Direct Object References (IDOR) vulnerabilityRepute Infosystems · BookingPress | Medium4.3 |
| CVE-2024-30222 | WordPress ARMember plugin <= 4.0.26 - PHP Object Injection vulnerabilityRepute Infosystems · ARMember | High8.5 |
| CVE-2024-30223 | WordPress ARMember plugin <= 4.0.26 - Unauthenticated PHP Object Injection vulnerabilityRepute Infosystems · ARMember | Critical9.0 |
| CVE-2024-27995 | WordPress ARMember plugin <= 4.0.23 - Cross Site Scripting (XSS) vulnerabilityRepute Infosystems · ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup | Medium5.9 |
| CVE-2023-52200 | WordPress ARMember Plugin <= 4.0.22 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object InjectionRepute Infosystems · ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup | Critical9.6 |
| CVE-2023-50841 | WordPress BookingPress Plugin <= 1.0.72 is vulnerable to SQL InjectionRepute Infosystems · BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin | High8.5 |
| CVE-2023-36507 | WordPress BookingPress Plugin <= 1.0.64 is vulnerable to Sensitive Data ExposureRepute Infosystems · BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin | Medium5.3 |
| CVE-2022-46808 | WordPress ARMember Plugin <= 3.4.11 is vulnerable to SQL InjectionRepute Infosystems · ARMember | High8.2 |
| CVE-2022-47421 | WordPress ARMember (free) and ARMember (premium) plugins - vulnerable to Auth. Stored Cross Site Scripting (XSS)Repute InfoSystems · ARMember (free) | Medium5.9 |
| CVE-2023-33323 | WordPress ARMember Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)Repute InfoSystems · ARMember | Medium5.9 |
| CVE-2022-47140 | WordPress ARMember Plugin <= 4.0.1 is vulnerable to Cross Site Scripting (XSS)Repute InfoSystems · ARMember | High7.1 |
| CVE-2022-45838 | WordPress ARForms Form Builder Plugin <= 1.5.5 is vulnerable to Cross Site Scripting (XSS)Repute InfoSystems · ARForms Form Builder | Medium6.1 |