Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,736All CVEsplus 19,141 rejected
- 659Last 24 hours3,036 in the last 7 days
- 17,189Last 30 days1,611 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 1 | 10 | 0 | 0 | 12 | 19 |
| 2025 | 0 | 1 | 6 | 0 | 0 | 7 | 7 |
| Title | ||
|---|---|---|
| CVE-2026-94173 | WordPress Business Directory plugin <= 6.4.27 - Insecure Direct Object References (IDOR) vulnerabilityStrategy11 Team · Business Directory | Medium5.4 |
| CVE-2026-84769 | WordPress Business Directory plugin <= 6.4.26 - Insecure Direct Object References (IDOR) vulnerabilityStrategy11 Team · Business Directory | Medium6.5 |
| CVE-2026-84758 | WordPress Business Directory plugin <= 6.4.26 - Broken Access Control vulnerabilityStrategy11 Team · Business Directory | Medium6.5 |
| CVE-2026-28004 | WordPress Business Directory plugin <= 6.4.25 - Cross Site Scripting (XSS) vulnerabilityStrategy11 Team · Business Directory | High7.1 |
| CVE-2026-61959 | WordPress Business Directory plugin <= 6.4.24 - Cross Site Scripting (XSS) vulnerabilityStrategy11 Team · Business Directory | Medium6.5 |
| CVE-2026-59550 | WordPress AWP Classifieds plugin <= 4.4.7 - SQL Injection vulnerabilityStrategy11 Team · AWP Classifieds | Critical9.3 |
| CVE-2026-65469 | WordPress AWP Classifieds plugin <= 4.4.7 - Broken Access Control vulnerabilityStrategy11 Team · AWP Classifieds | Medium5.3 |
| CVE-2026-57339 | WordPress Business Directory plugin <= 6.4.23 - Broken Access Control vulnerabilityStrategy11 Team · Business Directory | Medium6.6 |
| CVE-2026-57328 | WordPress Business Directory plugin <= 6.4.22 - Cross Site Scripting (XSS) vulnerabilityStrategy11 Team · Business Directory | Medium6.5 |
| CVE-2026-57326 | WordPress Business Directory plugin <= 6.4.22 - Cross Site Scripting (XSS) vulnerabilityStrategy11 Team · Business Directory | Medium6.5 |
| CVE-2026-42726 | WordPress AWP Classifieds plugin <= 4.4.5 - Broken Access Control vulnerabilityStrategy11 Team · AWP Classifieds | Medium6.5 |
| CVE-2026-24593 | WordPress AWP Classifieds plugin <= 4.4.3 - Sensitive Data Exposure vulnerabilityStrategy11 Team · AWP Classifieds | Medium5.3 |
| CVE-2025-62131 | WordPress Tasty Recipes Lite plugin <= 1.1.5 - Broken Access Control vulnerabilityStrategy11 Team · Tasty Recipes Lite | Medium4.3 |
| CVE-2025-62132 | WordPress Tasty Recipes Lite plugin <= 1.1.5 - Broken Access Control vulnerabilityStrategy11 Team · Tasty Recipes Lite | Medium4.3 |
| CVE-2025-64630 | WordPress Business Directory plugin <= 6.4.19 - Broken Access Control vulnerabilityStrategy11 Team · Business Directory | Medium4.9 |
| CVE-2025-67596 | WordPress Business Directory plugin <= 6.4.19 - Cross Site Request Forgery (CSRF) vulnerabilityStrategy11 Team · Business Directory | Medium4.3 |
| CVE-2025-64219 | WordPress Business Directory plugin <= 6.4.18 - Broken Access Control vulnerabilityStrategy11 Team · Business Directory | Medium4.3 |
| CVE-2025-57928 | WordPress AWP Classifieds plugin <= 4.4.3 - Content Injection vulnerabilityStrategy11 Team · AWP Classifieds | Medium5.3 |
| CVE-2025-31440 | WordPress Terms of Use plugin <= 2.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerabilityStrategy11 Team · Terms of Use | High7.1 |