Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,298All CVEsplus 19,140 rejected
- 453Last 24 hours2,723 in the last 7 days
- 16,917Last 30 days1,557 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 1 | 2 | 0 | 0 | 3 | 23 |
| 2025 | 1 | 8 | 3 | 0 | 0 | 12 | 20 |
| 2024 | 0 | 1 | 1 | 0 | 0 | 2 | 8 |
| 2023 | 0 | 3 | 3 | 0 | 0 | 6 | 6 |
| Title | ||
|---|---|---|
| CVE-2026-13353 | WP Ultimate CSV Importer <= 8.0.1 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution via 'MappedFields' Parametersmackcoders · WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel | High8.8 |
| CVE-2026-1317 | WP Import – Ultimate CSV XML Importer for WordPress <= 7.37 - Authenticated (Subscriber+) SQL Injection via File Namesmackcoders · WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress | Medium6.5 |
| CVE-2025-14627 | WP Import – Ultimate CSV XML Importer for WordPress <= 7.35 - Authenticated (Contributor+) Server-Side Request Forgery via Bitly Shortlink Bypasssmackcoders · WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress | Medium6.4 |
| CVE-2025-13606 | Export All Posts, Products, Orders, Refunds & Users <= 2.19 - Cross-Site Request Forgery to Sensitive Information Exposuresmackcoders · Export All Posts, Products, Orders, Refunds & Users | Medium6.5 |
| CVE-2025-13145 | WP Import – Ultimate CSV XML Importer for WordPress <= 7.33.1 - Authenticated (Administrator+) PHP Object Injection via CSV Importsmackcoders · WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress | High7.2 |
| CVE-2025-12732 | WP Import – Ultimate CSV XML Importer for WordPress <= 7.33 - Missing Authorization to Authenticated (Author+) Sensitive Information Exposuresmackcoders · WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress | Medium4.3 |
| CVE-2025-10057 | WP Import – Ultimate CSV XML Importer for WordPress 7.20 - 7.28 - Authenticated (Subscriber+) Remote Code Execution via Code Injectionsmackcoders · WP Import – Ultimate CSV XML Importer for WordPress | High8.8 |
| CVE-2025-10058 | WP Import – Ultimate CSV XML Importer for WordPress <= 7.27 - Authenticated (Subscriber+) Arbitrary File Deletionsmackcoders · WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress | High8.1 |
| CVE-2025-10040 | WP Import – Ultimate CSV XML Importer for WordPress <= 7.27 - Missing Authorization to Authenticated (Subscriber+) FTP/SFTP Credential Exposuresmackcoders · WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress | High7.7 |
| CVE-2025-9990 | WordPress Helpdesk Integration <= 5.8.10 - Unauthenticated Local File Inclusionsmackcoders · WordPress Helpdesk Integration | High8.1 |
| CVE-2025-5692 | Lead Form Data Collection to CRM <= 3.1 - Missing Authorization to Authenticated (Subscriber+) Many Actionssmackcoders · Lead Form Data Collection to CRM | Medium6.3 |
| CVE-2025-2008 | Import Export Suite for CSV and XML Datafeed <= 7.19 - Authenticated (Subscriber+) Arbitrary File Uploadsmackcoders · WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress | High8.8 |
| CVE-2025-2007 | Import Export Suite for CSV and XML Datafeed <= 7.19 - Authenticated (Subscriber+) Arbitrary File Deletionsmackcoders · WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress | High8.1 |
| CVE-2025-2332 | Export All Posts, Products, Orders, Refunds & Users <= 2.13 - Unauthenticated PHP Object Injectionsmackcoders · Export All Posts, Products, Orders, Refunds & Users | Critical9.8 |
| CVE-2024-12315 | Export All Posts, Products, Orders, Refunds & Users <= 2.9.3 - Information Disclosure Through Unprotected Directorysmackcoders · Export All Posts, Products, Orders, Refunds & Users | High7.5 |
| CVE-2024-9364 | SendGrid for WordPress <= 1.4 - Missing Authorization to Authenticated (Subscriber+) Log Deletionsmackcoders · SendGrid for WordPress | Medium4.3 |
| CVE-2024-43965 | WordPress SendGrid for WordPress plugin <= 1.4 - SQL Injection vulnerabilitySmackcoders · SendGrid for WordPress | High8.2 |
| CVE-2023-2487 | WordPress WP Ultimate Exporter Plugin <= 2.4.1 is vulnerable to Sensitive Data ExposureSmackcoders · Export All Posts, Products, Orders, Refunds & Users | Medium5.9 |
| CVE-2023-45066 | WordPress WP Ultimate Exporter Plugin <= 2.4.1 is vulnerable to Sensitive Data ExposureSmackcoders · Export All Posts, Products, Orders, Refunds & Users | Medium5.9 |
| CVE-2023-4142 | WP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) Remote Code Executionsmackcoders · WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress | High8.0 |
| CVE-2023-4141 | WP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) PHP File Creation to Remote Code Executionsmackcoders · WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress | High8.0 |
| CVE-2023-4139 | WP Ultimate CSV Importer <= 7.9.8 - Sensitive Information Exposure via Directory Listingsmackcoders · WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress | High7.5 |
| CVE-2023-4140 | WP Ultimate CSV Importer <= 7.9.8 - Arbitrary Usermeta Update to Authenticated (Author+) Privilege Escalationsmackcoders · WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress | Medium6.6 |