Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,292All CVEsplus 19,140 rejected
- 451Last 24 hours2,724 in the last 7 days
- 16,915Last 30 days1,557 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 2 | 2 | 0 | 0 | 5 | 12 |
| 2025 | 1 | 1 | 5 | 0 | 0 | 7 | 7 |
| Title | ||
|---|---|---|
| CVE-2026-73387 | WordPress Resido theme <= 1.5 - Local File Inclusion vulnerabilitySmartDataSoft · Resido | High8.1 |
| CVE-2025-12882 | Clasifico Listing <= 2.0 - Unauthenticated Privilege EscalationSmartDataSoft · Clasifico Listing | Critical9.8 |
| CVE-2020-36972 | SmartBlog 2.0.1 - 'id_post' Blind SQL injectionsmartdatasoft · SmartBlog | High8.8 |
| CVE-2026-22358 | WordPress Electrician - Electrical Service WordPress theme <= 5.6 - Server Side Request Forgery (SSRF) vulnerabilitySmartDataSoft · Electrician - Electrical Service WordPress | Medium5.4 |
| CVE-2025-62741 | WordPress Pool Services theme <= 3.3 - Server Side Request Forgery (SSRF) vulnerabilitySmartDataSoft · Pool Services | Medium5.4 |
| CVE-2025-58004 | WordPress DriCub Theme <= 2.9 - Broken Access Control VulnerabilitySmartDataSoft · DriCub | Medium5.3 |
| CVE-2025-58005 | WordPress DriCub Theme <= 2.9 - Server Side Request Forgery (SSRF) VulnerabilitySmartDataSoft · DriCub | Medium5.4 |
| CVE-2025-6994 | Reveal Listing <= 3.3 - Unauthenticated Privilege EscalationSmartDataSoft · Reveal Listing | Critical9.8 |
| CVE-2025-30997 | WordPress Car Repair Services theme <= 5.0 - Server Side Request Forgery (SSRF) VulnerabilitySmartDataSoft · Car Repair Services | Medium5.4 |
| CVE-2025-1285 | Resido - Real Estate WordPress Theme <= 3.6 - Missing Authorization to Unauthenticated Server-Side Request Forgery and API Key Settings UpdateSmartDataSoft · Resido - Real Estate WordPress Theme | Medium5.3 |
| CVE-2025-23857 | WordPress Essential WP Real Estate Plugin <= 1.1.3 - Reflected Cross Site Scripting (XSS) vulnerabilitySmartDataSoft · Essential WP Real Estate | High7.1 |
| CVE-2024-13318 | Essential WP Real Estate <= 1.1.3 - Missing Authorization to Arbitrary Post/Page Deletionsmartdatasoft · Essential WP Real Estate | Medium5.3 |