Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,334All CVEsplus 19,141 rejected
- 442Last 24 hours2,720 in the last 7 days
- 16,914Last 30 days1,562 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 2 | 9 | 0 | 0 | 11 | 15 |
| 2025 | 0 | 0 | 1 | 0 | 0 | 1 | 4 |
| 2024 | 0 | 1 | 0 | 0 | 0 | 1 | 3 |
| 2023 | 0 | 0 | 2 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-105077 | WordPress Ad Inserter plugin <= 2.8.19 - Cross Site Scripting (XSS) vulnerabilitySpacetime · Ad Inserter | High7.1 |
| CVE-2026-102905 | Ad Inserter <= 2.8.19 - Unauthenticated Arbitrary Shortcode Execution via 's' Search Parameterspacetime · Ad Inserter – Ad Manager & AdSense Ads | Medium6.5 |
| CVE-2026-89097 | Ad Inserter <= 2.8.18 - Authenticated (Subscriber+) Sensitive Information Disclosure in 'ai-debug-processing-fe' & 'ai-debug-meta' URL Parametersspacetime · Ad Inserter – Ad Manager & AdSense Ads | Medium4.3 |
| CVE-2026-89427 | Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via 's' Search Parameterspacetime · Ad Inserter – Ad Manager & AdSense Ads | Medium6.1 |
| CVE-2026-19902 | Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via {search-query} Dynamic Tag (Referer Header)spacetime · Ad Inserter – Ad Manager & AdSense Ads | Medium6.1 |
| CVE-2026-97077 | WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerabilitySpacetime · Ad Inserter | High7.1 |
| CVE-2026-11984 | Ad Inserter <= 2.8.16 - Missing Authorization to Unauthenticated Header/Footer Code Disclosure via 'ai-debug-code' Parameterspacetime · Ad Inserter – Ad Manager & AdSense Ads | Medium5.3 |
| CVE-2026-11983 | Ad Inserter <= 2.8.16 - Missing Authorization to Block Visibility Bypass via ai_ajaxspacetime · Ad Inserter – Ad Manager & AdSense Ads | Medium5.3 |
| CVE-2026-57693 | WordPress Ad Inserter plugin <= 2.8.11 - Cross Site Scripting (XSS) vulnerabilitySpacetime · Ad Inserter | Medium6.5 |
| CVE-2026-11900 | Ad Inserter <= 2.8.16 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Post Content Disclosure via 'data' Shortcode Attributespacetime · Ad Inserter – Ad Manager & AdSense Ads | Medium4.3 |
| CVE-2026-9280 | Ad Inserter <= 2.8.15 - Reflected Cross-Site Scripting via URL Parameters in iframe Modespacetime · Ad Inserter – Ad Manager & AdSense Ads | Medium6.1 |
| CVE-2025-11745 | Ad Inserter <= 2.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Fieldspacetime · Ad Inserter – Ad Manager & AdSense Ads | Medium6.4 |
| CVE-2024-49248 | WordPress Ad Inserter plugin <= 2.7.37 - Reflected Cross Site Scripting (XSS) vulnerabilitySpacetime · Ad Inserter | High7.1 |
| CVE-2023-4668 | Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai-debug-processing-fespacetime · Ad Inserter – Ad Manager & AdSense Ads | Medium5.3 |
| CVE-2023-4645 | Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai_ajaxspacetime · Ad Inserter – Ad Manager & AdSense Ads | Medium5.3 |