Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,058All CVEsplus 19,119 rejected
- 491Last 24 hours2,911 in the last 7 days
- 16,876Last 30 days1,544 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 4 | 1 | 0 | 0 | 5 | 17 |
| 2025 | 1 | 0 | 4 | 0 | 0 | 5 | 12 |
| 2024 | 0 | 0 | 4 | 0 | 0 | 4 | 7 |
| 2023 | 0 | 2 | 1 | 0 | 0 | 3 | 3 |
| Title | ||
|---|---|---|
| CVE-2026-118089 | WordPress Product Feed Manager plugin <= 7.14.1 - PHP Object Injection vulnerabilityRexTheme · Product Feed Manager | High7.2 |
| CVE-2026-66580 | WordPress Product Feed Manager plugin <= 7.12.0 - SQL Injection vulnerabilityRexTheme · Product Feed Manager | High8.5 |
| CVE-2026-59553 | WordPress Product Feed Manager plugin <= 7.6.1 - Cross Site Scripting (XSS) vulnerabilityRexTheme · Product Feed Manager | High7.1 |
| CVE-2026-15306 | Product Feed Manager For WooCommerce <= 7.6.1 - Reflected Cross-Site Scripting via 's' Search Parameterrextheme · Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces | Medium6.1 |
| CVE-2026-57417 | WordPress Cart Lift plugin <= 3.1.57 - Cross Site Scripting (XSS) vulnerabilityRexTheme · Cart Lift | High7.1 |
| CVE-2025-62885 | WordPress WP VR plugin <= 8.5.48 - Cross Site Scripting (XSS) vulnerabilityRexTheme · WP VR | Medium6.5 |
| CVE-2025-12005 | WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress <= 8.5.41 - Improper Authorization to Authenticated (Contributor+) Plugin Settings Updaterextheme · WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress | Medium4.3 |
| CVE-2025-6350 | WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress <= 8.5.32 - Authenticated (Contributor+) Stored Cross-Site Scriptingrextheme · WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress | Medium6.4 |
| CVE-2025-47452 | WordPress WP VR plugin <= 8.5.26 - Arbitrary File Upload VulnerabilityRexTheme · WP VR | Critical9.9 |
| CVE-2025-24730 | WordPress WP VR plugin <= 8.5.14 - Cross Site Scripting (XSS) vulnerabilityRexTheme · WP VR | Medium6.5 |
| CVE-2023-34376 | WordPress Change WooCommerce Add To Cart Button Text plugin <= 1.3 - Broken Access Control vulnerabilityRextheme · Change WooCommerce Add To Cart Button Text | Medium5.4 |
| CVE-2024-49680 | WordPress WP VR plugin <= 8.5.5 - Broken Access Control vulnerabilityRexTheme · WP VR | Medium4.3 |
| CVE-2024-49293 | WordPress WP VR plugin <= 8.5.4 - Broken Access Control vulnerabilityRexTheme · WP VR | Medium4.3 |
| CVE-2023-52144 | WordPress Product Feed Manager plugin <= 7.3.15 - Directory Traversal vulnerabilityRexTheme · Product Feed Manager | Medium5.5 |
| CVE-2023-40663 | WordPress WP VR Plugin <= 8.3.4 is vulnerable to Cross Site Scripting (XSS)Rextheme · WP VR | High7.1 |
| CVE-2022-47449 | WordPress Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD Plugin <= 3.1.5 is vulnerable to Cross Site Scripting (XSS)RexTheme · Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD | High7.1 |
| CVE-2023-25708 | WordPress WP VR – 360 Panorama and Virtual Tour Builder For WordPress Plugin <= 8.2.7 is vulnerable to Cross Site Request Forgery (CSRF)Rextheme · WP VR – 360 Panorama and Virtual Tour Builder For WordPress | Medium4.3 |