Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,334All CVEsplus 19,141 rejected
- 442Last 24 hours2,720 in the last 7 days
- 16,914Last 30 days1,562 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 3 | 1 | 0 | 0 | 4 | 12 |
| 2025 | 0 | 1 | 0 | 0 | 0 | 1 | 8 |
| 2024 | 0 | 1 | 1 | 0 | 0 | 2 | 7 |
| 2023 | 0 | 0 | 1 | 0 | 0 | 1 | 5 |
| 2022 | 0 | 0 | 3 | 0 | 0 | 3 | 4 |
| 2021 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-18443 | Smart Manager <= 8.97.0 - Authenticated (Subscriber+) SQL Injection to Privilege Escalation via 'access_privileges' Parameterstoreapps · Smart Manager – WooCommerce Bulk Edit: Products, Orders, Users & More (Spreadsheet) | High8.8 |
| CVE-2026-57704 | WordPress Smart Manager plugin <= 8.90.0 - Cross Site Scripting (XSS) vulnerabilityStoreApps · Smart Manager | High7.1 |
| CVE-2026-45216 | WordPress Smart Manager plugin <= 8.85.0 - Privilege Escalation vulnerabilityStoreApps · Smart Manager | High8.8 |
| CVE-2026-24365 | WordPress Stock Manager for WooCommerce plugin < 3.6.0 - Cross Site Request Forgery (CSRF) vulnerabilitystoreapps · Stock Manager for WooCommerce | Medium5.4 |
| CVE-2025-22710 | WordPress Smart Manager Plugin <= 8.52.0 - SQL Injection vulnerabilitystoreapps · Smart Manager | High7.6 |
| CVE-2024-49687 | WordPress Smart Manager plugin <= 8.45.0 - Broken Access Control vulnerabilitystoreapps · Smart Manager | Medium4.3 |
| CVE-2023-5663 | News Announcement Scroll <= 9.0.0 - Authenticated (Contributor+) SQL Injection via Shortcodestoreapps · News Announcement Scroll | High8.8 |
| CVE-2023-35091 | WordPress WooCommerce Stock Manager Plugin <= 2.10.0 is vulnerable to Cross Site Request Forgery (CSRF)StoreApps · Stock Manager for WooCommerce | Medium4.3 |
| CVE-2022-40694 | WordPress News Announcement Scroll plugin <= 8.8.8 - Auth. Stored Cross-Site Scripting (XSS) vulnerabilityStoreApps · News Announcement Scroll (WordPress plugin) | Medium4.8 |
| CVE-2022-36284 | WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email changeStoreApps · Affiliate For WooCommerce (WordPress plugin) | Medium6.4 |
| CVE-2022-25649 | WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Multiple Improper Access Control vulnerabilitiesStoreApps · Affiliate For WooCommerce (WordPress plugin) | Medium5.0 |
| CVE-2021-34619 | Cross-Site Request Forgery in WooCommerce Stock Manager WordPress PluginStoreApps · WooCommerce Stock Manager | High8.8 |