Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 401,094All CVEsplus 19,119 rejected
  • 503Last 24 hours2,830 in the last 7 days
  • 16,881Last 30 days1,552 of them critical
  • 1,768Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
2026344001116
20250000005
20240020025
20230120033

Latest CVEs

16 CVEs, newest first

CVEs, newest first
Title
CVE-2026-116388
WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerabilityTMS · Amelia
Medium5.3
CVE-2026-116396
WordPress Amelia plugin <= 2.4.12 - Cross Site Scripting (XSS) vulnerabilityTMS · Amelia
Medium6.5
CVE-2026-112327
WordPress Amelia plugin <= 2.4.11 - SQL Injection vulnerabilityTMS · Amelia
Critical9.3
CVE-2026-108497
WordPress Amelia plugin <= 2.4.10 - SQL Injection vulnerabilityTMS · Amelia
Critical9.3
CVE-2026-109684
WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerabilityTMS · Amelia
Medium5.3
CVE-2026-96461
WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerabilityTMS · Amelia
High7.5
CVE-2026-49080
WordPress wpDataTables plugin <= 7.3.6 - SQL Injection vulnerabilityTMS · wpDataTables
Critical9.3
CVE-2026-48889
WordPress Amelia plugin <= 2.3 - Privilege Escalation vulnerabilityTMS · Amelia
High8.8
CVE-2026-40795
WordPress Amelia plugin <= 2.2 - Broken Access Control vulnerabilityTMS · Amelia
Medium6.5
CVE-2026-40789
WordPress Amelia plugin <= 2.2 - Sensitive Data Exposure vulnerabilityTMS · Amelia
High7.5
CVE-2026-28039
WordPress wpDataTables plugin <= 6.5.0.1 - Local File Inclusion vulnerabilityTMS · wpDataTables
High7.5
CVE-2024-22298
WordPress Amelia plugin <= 1.0.98 - Broken Access Control vulnerabilityTMS · Amelia
Medium5.3
CVE-2024-31425
WordPress Amelia plugin <= 1.0.95 - Cross Site Request Forgery (CSRF) vulnerabilityTMS · Amelia
Medium5.4
CVE-2023-50860
WordPress Amelia Plugin <= 1.0.85 is vulnerable to Cross Site Scripting (XSS)TMS · Booking for Appointments and Events Calendar – Amelia
Medium6.5
CVE-2023-29427
WordPress Amelia Plugin <= 1.0.75 is vulnerable to Cross Site Scripting (XSS)TMS · Booking for Appointments and Events Calendar – Amelia
High7.1
CVE-2023-27918
Cross-site scripting vulnerability in Appointment and Event Booking Calendar for WordPress - Amelia versions prior to 1.0.76 allows a remote unauthenticated…TMS · Appointment and Event Booking Calendar for WordPress - Amelia
Medium6.1