Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,638All CVEsplus 19,141 rejected
- 668Last 24 hours2,951 in the last 7 days
- 17,123Last 30 days1,606 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 3 | 8 | 8 | 0 | 0 | 19 | 69 |
| 2025 | 3 | 11 | 4 | 0 | 0 | 18 | 50 |
| 2024 | 4 | 5 | 7 | 0 | 0 | 16 | 32 |
| 2023 | 0 | 2 | 6 | 0 | 0 | 8 | 16 |
| 2022 | 0 | 0 | 2 | 0 | 0 | 2 | 8 |
| 2021 | 1 | 2 | 3 | 0 | 0 | 6 | 6 |
| Title | ||
|---|---|---|
| CVE-2026-118092 | WordPress MasterStudy LMS plugin <= 3.7.55 - Broken Access Control vulnerabilityStylemixThemes · MasterStudy LMS | Medium4.3 |
| CVE-2026-115964 | WordPress Motors plugin <= 1.4.126 - SQL Injection vulnerabilityStylemixThemes · Motors | Critical9.3 |
| CVE-2026-93950 | WordPress Motors theme <= 1.4.108 - Broken Access Control vulnerabilityStylemixThemes · Motors | High7.5 |
| CVE-2026-105079 | WordPress MasterStudy LMS plugin <= 3.7.52 - Cross Site Scripting (XSS) vulnerabilityStylemixThemes · MasterStudy LMS | Medium6.5 |
| CVE-2026-104399 | WordPress Motors plugin <= 1.4.124 - Sensitive Data Exposure vulnerabilityStylemixThemes · Motors | Medium6.9 |
| CVE-2026-97307 | WordPress Cost Calculator Builder plugin <= 4.0.17 - Sensitive Data Exposure vulnerabilityStylemixThemes · Cost Calculator Builder | High7.5 |
| CVE-2026-14805 | Consulting - Business, Finance WordPress Theme <= 6.7.16 - Authenticated (Subscriber+) Privilege Escalation via AJAXStylemixThemes · Consulting - Business, Finance WordPress Theme | High8.8 |
| CVE-2026-28145 | WordPress MasterStudy LMS plugin <= 3.7.39 - Broken Access Control vulnerabilityStylemixThemes · MasterStudy LMS | Medium5.3 |
| CVE-2026-14900 | Cost Calculator Builder PRO <= 4.0.3 - Unauthenticated Remote Code Execution via 'orderDetails' ParameterStylemixThemes · Cost Calculator Builder PRO | Critical9.8 |
| CVE-2026-27433 | WordPress Motors theme < 5.6.85 - Broken Access Control vulnerabilityStylemixThemes · Motors | Medium6.5 |
| CVE-2026-27412 | WordPress Pearl - Corporate Business theme <= 3.4.10 - Local File Inclusion vulnerabilityStylemixThemes · Pearl - Corporate Business | High8.1 |
| CVE-2025-68063 | WordPress Splash - Sport Club WordPress theme for Basketball, Football, Hockey theme <= 4.4.3 - Local File Inclusion vulnerabilityStylemixThemes · Splash - Sport Club WordPress Theme for Basketball, Football, Hockey | High7.5 |
| CVE-2026-54828 | WordPress Motors plugin <= 1.4.109 - Broken Access Control vulnerabilityStylemixThemes · Motors | High7.5 |
| CVE-2026-54812 | WordPress Motors plugin <= 1.4.109 - SQL Injection vulnerabilityStylemixThemes · Motors | Critical9.3 |
| CVE-2026-54814 | WordPress Motors plugin <= 1.4.109 - Local File Inclusion vulnerabilityStylemixThemes · Motors | High8.1 |
| CVE-2026-40766 | WordPress MasterStudy LMS plugin <= 3.7.25 - SQL Injection vulnerabilityStylemixThemes · MasterStudy LMS | High8.5 |
| CVE-2026-39515 | WordPress Motors plugin < 1.4.107 - Broken Access Control vulnerabilityStylemixThemes · Motors | Medium6.5 |
| CVE-2025-64215 | WordPress MasterStudy LMS Pro plugin < 4.7.16 - Broken Access Control vulnerabilityStylemixThemes · MasterStudy LMS Pro | Medium6.5 |
| CVE-2026-8653 | MasterStudy LMS Pro Plus <= 4.8.20 - Authenticated (Instructor+) SQL Injection via 'columns' ParameterStylemixThemes · MasterStudy LMS Pro | Medium6.5 |
| CVE-2025-64374 | WordPress Motors theme <= 5.6.81 - Arbitrary File Upload vulnerabilityStylemixThemes · Motors | Critical9.9 |
| CVE-2025-64214 | WordPress MasterStudy LMS Pro plugin < 4.7.16 - Arbitrary Content Deletion vulnerabilityStylemixThemes · MasterStudy LMS Pro | High7.5 |
| CVE-2025-64213 | WordPress MasterStudy LMS Pro plugin < 4.7.16 - Sensitive Data Exposure vulnerabilityStylemixThemes · MasterStudy LMS Pro | High7.5 |
| CVE-2025-64209 | WordPress Masterstudy theme < 4.8.122 - Broken Access Control vulnerabilityStylemixThemes · Masterstudy | High7.5 |
| CVE-2025-64364 | WordPress Masterstudy theme < 4.8.126 - Local File Inclusion vulnerabilityStylemixThemes · Masterstudy | High7.5 |
| CVE-2025-64361 | WordPress Consulting Elementor Widgets plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerabilityStylemixThemes · Consulting Elementor Widgets | Medium6.5 |
| CVE-2025-64360 | WordPress Consulting Elementor Widgets plugin <= 1.4.2 - Local File Inclusion vulnerabilityStylemixThemes · Consulting Elementor Widgets | High7.5 |
| CVE-2025-64359 | WordPress Consulting theme < 6.7.5 - Local File Inclusion vulnerabilityStylemixThemes · Consulting | High7.5 |
| CVE-2025-64212 | WordPress MasterStudy LMS Pro plugin < 4.7.16 - Broken Access Control vulnerabilityStylemixThemes · MasterStudy LMS Pro | Medium5.4 |
| CVE-2025-64211 | WordPress Masterstudy Elementor Widgets plugin <= 1.2.4 - Broken Access Control vulnerabilityStylemixThemes · Masterstudy Elementor Widgets | Medium5.3 |
| CVE-2025-64210 | WordPress Masterstudy Elementor Widgets plugin <= 1.2.4 - Broken Access Control vulnerabilityStylemixThemes · Masterstudy Elementor Widgets | Medium5.4 |
| CVE-2025-7438 | MasterStudy LMS – Online Courses, eLearning PRO Plus <= 4.7.9 - Authenticated (Subscriber+) Arbitrary File UploadStylemixThemes · MasterStudy LMS Pro | High7.5 |
| CVE-2025-47586 | WordPress Motors - Events plugin <= 1.4.7 - Unauthenticated Local File Inclusion vulnerabilityStylemixThemes · Motors - Events | Critical9.0 |
| CVE-2025-4800 | MasterStudy LMS Pro <= 4.7.0 - Authenticated (Subscriber+) Arbitrary File UploadStylemixThemes · MasterStudy LMS Pro | High8.8 |
| CVE-2025-4322 | Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account TakeoverStylemixThemes · Motors - Car Dealer, Rental & Listing WordPress theme | Critical9.8 |
| CVE-2024-13738 | Motors - Car Dealer, Rental & Listing WordPress theme <= 5.6.65 - Unauthenticated Arbitrary Shortcode ExecutionStylemixThemes · Motors - Car Dealer, Rental & Listing WordPress theme | High7.3 |
| CVE-2025-26986 | WordPress Pearl Theme < 3.4.8 - Local File Inclusion vulnerabilityStylemixThemes · Pearl - Corporate Business | High8.1 |
| CVE-2024-11939 | Cost Calculator Builder PRO <= 3.2.15 - Unauthenticated SQL Injection via dataStylemixThemes · Cost Calculator Builder PRO | High7.5 |
| CVE-2023-40011 | WordPress Cost Calculator Builder plugin <= 3.1.42 - Broken Access Control vulnerabilityStylemixThemes · Cost Calculator Builder | Medium5.4 |
| CVE-2022-43472 | WordPress eRoom plugin <= 1.4.6 - Broken Access Control vulnerabilityStylemixThemes · eRoom – Zoom Meetings & Webinar | Medium4.3 |
| CVE-2024-37269 | WordPress Masterstudy Elementor Widgets plugin <= 1.2.2 - Unauthenticated Broken Access Control vulnerabilityStylemixThemes · Masterstudy Elementor Widgets | Medium5.3 |
| CVE-2024-37094 | WordPress MasterStudy LMS plugin <= 3.2.12 - Broken Access Control vulnerabilityStylemixThemes · MasterStudy LMS | High8.2 |
| CVE-2024-43990 | WordPress Masterstudy LMS Starter theme <= 1.1.8 - Sensitive Data Exposure vulnerabilityStylemixThemes · Masterstudy LMS Starter | Medium5.3 |
| CVE-2024-6010 | Cost Calculator Builder PRO <= 3.2.1 - Unauthenticated Price ManipulationStylemixThemes · Cost Calculator Builder PRO | Medium5.3 |
| CVE-2024-43144 | WordPress Cost Calculator Builder plugin <= 3.2.15 - SQL Injection vulnerabilityStylemixThemes · Cost Calculator Builder | Critical9.3 |
| CVE-2024-37090 | SQL Injection vulnerability in multiple StylemixThemes premium themesStylemixThemes · Masterstudy Elementor Widgets | High8.5 |
| CVE-2024-37092 | WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Local File Inclusion vulnerabilityStylemixThemes · Consulting Elementor Widgets | High8.5 |
| CVE-2024-37091 | WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Remote Code Execution (RCE) vulnerabilityStylemixThemes · Consulting Elementor Widgets | Critical9.9 |
| CVE-2024-37089 | WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Unauthenticated Local File Inclusion vulnerabilityStylemixThemes · Consulting Elementor Widgets | Critical9.0 |
| CVE-2024-4787 | Cost Calculator Builder PRO <= 3.1.75 - Unauthenticated Arbitrary Email SendingStylemixThemes · Cost Calculator Builder PRO | Medium5.8 |
| CVE-2024-35677 | WordPress MegaMenu plugin <= 2.3.12 - Unauthenticated Local File Inclusion vulnerabilityStylemixThemes · MegaMenu | Critical9.0 |