Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,082All CVEsplus 19,119 rejected
- 502Last 24 hours2,858 in the last 7 days
- 16,885Last 30 days1,547 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 7 | 23 | 11 | 0 | 0 | 41 | 57 |
| 2025 | 7 | 4 | 5 | 0 | 0 | 16 | 16 |
| Title | ||
|---|---|---|
| CVE-2026-42706 | WordPress DK theme <= 3.2.1 - Broken Access Control vulnerabilityThemeGoods · DK | High7.5 |
| CVE-2026-42705 | WordPress Grand News theme <= 3.4 - Broken Access Control vulnerabilityThemeGoods · Grand News | High7.5 |
| CVE-2026-94161 | WordPress Grand Restaurant theme < 7.0.11 - Reflected Cross Site Scripting (XSS) vulnerabilityThemeGoods · Grand Restaurant | High7.1 |
| CVE-2026-66652 | WordPress Grand Tour theme <= 5.5.1 - Cross Site Request Forgery (CSRF) vulnerabilityThemeGoods · Grand Tour | Medium5.4 |
| CVE-2025-53999 | WordPress Altair theme <= 5.2.2 - Broken Access Control vulnerabilityThemeGoods · Altair | Medium6.5 |
| CVE-2025-15689 | WordPress Capella theme <= 2.5.5 - Privilege Escalation vulnerabilityThemeGoods · Capella | Critical9.8 |
| CVE-2025-15688 | WordPress Capella theme <= 2.5.5 - SQL Injection vulnerabilityThemeGoods · Capella | Critical9.3 |
| CVE-2026-65487 | WordPress Photography theme <= 7.7.6 - Broken Access Control vulnerabilityThemeGoods · Photography | Medium5.3 |
| CVE-2026-57769 | WordPress Grand Photography theme <= 5.7.8 - Reflected Cross Site Scripting (XSS) vulnerabilityThemeGoods · Grand Photography | High7.1 |
| CVE-2026-57770 | WordPress Grand Photography theme <= 5.7.8 - PHP Object Injection vulnerabilityThemeGoods · Grand Photography | Critical9.8 |
| CVE-2025-69152 | WordPress Artale | Wedding Photography WordPress theme <= 2.2.2 - Cross Site Scripting (XSS) vulnerabilityThemeGoods · Artale | Wedding Photography WordPress | High7.1 |
| CVE-2025-68524 | WordPress Avante theme < 3.0.5 - Reflected Cross Site Scripting (XSS) vulnerabilityThemeGoods · Avante | High7.1 |
| CVE-2025-69151 | WordPress Grand Car Rental theme <= 3.7 - Cross Site Scripting (XSS) vulnerabilityThemeGoods · Grand Car Rental | High7.1 |
| CVE-2026-39635 | WordPress Grand Magazine theme <= 3.5.5 - Cross Site Request Forgery (CSRF) vulnerabilityThemeGoods · Grand Magazine | Medium5.4 |
| CVE-2026-39634 | WordPress Grand Portfolio theme <= 3.3 - Cross Site Request Forgery (CSRF) vulnerabilityThemeGoods · Grand Portfolio | Medium5.4 |
| CVE-2026-39633 | WordPress Grand Car Rental theme <= 3.6.9 - Cross Site Request Forgery (CSRF) vulnerabilityThemeGoods · Grand Car Rental | Medium6.5 |
| CVE-2026-39632 | WordPress Grand Blog theme <= 3.1 - Cross Site Request Forgery (CSRF) vulnerabilityThemeGoods · Grand Blog | Medium6.5 |
| CVE-2026-39603 | WordPress Grand Photography theme <= 5.7.8 - Cross Site Request Forgery (CSRF) vulnerabilityThemeGoods · Grand Photography | Medium5.4 |
| CVE-2026-27043 | WordPress Photography theme < 7.7.6 - Arbitrary File Upload vulnerabilityThemeGoods · Photography | High7.2 |
| CVE-2026-27367 | WordPress Musico theme < 3.4.5 - Cross Site Scripting (XSS) vulnerabilityThemeGoods · Musico | High7.1 |
| CVE-2026-27358 | WordPress Architecturer theme < 3.9.5 - Cross Site Scripting (XSS) vulnerabilityThemeGoods · Architecturer | High7.1 |
| CVE-2026-27353 | WordPress Grand News | Magazine Newspaper WordPress theme <= 3.4.3 - Reflected Cross Site Scripting (XSS) vulnerabilityThemeGoods · Grand News | High7.1 |
| CVE-2026-27352 | WordPress Starto theme < 2.2.5 - Cross Site Scripting (XSS) vulnerabilityThemeGoods · Starto | High7.1 |
| CVE-2026-27348 | WordPress Photography theme < 7.7.6 - Cross Site Scripting (XSS) vulnerabilityThemeGoods · Photography | High7.1 |
| CVE-2026-22417 | WordPress Grand Wedding theme < 3.1.11 - PHP Object Injection vulnerabilityThemeGoods · Grand Wedding | Critical9.8 |
| CVE-2026-24949 | WordPress PhotoMe theme <= 5.7.1 - Cross Site Scripting (XSS) vulnerabilityThemeGoods · PhotoMe | High7.1 |
| CVE-2026-24943 | WordPress Grand Conference theme <= 5.3.4 - Reflected Cross Site Scripting (XSS) vulnerabilityThemeGoods · Grand Conference | High7.1 |
| CVE-2025-69370 | WordPress Capella theme <= 2.5.5 - PHP Object Injection vulnerabilityThemeGoods · Capella | Critical9.8 |
| CVE-2025-69301 | WordPress PhotoMe theme <= 5.6.11 - PHP Object Injection vulnerabilityThemeGoods · PhotoMe | Critical9.8 |
| CVE-2026-23542 | WordPress Grand Restaurant theme <= 7.0.10 - PHP Object Injection vulnerabilityThemeGoods · Grand Restaurant | Critical9.8 |
| CVE-2026-24961 | WordPress Grand Blog theme < 3.1.5 - Server Side Request Forgery (SSRF) vulnerabilityThemeGoods · Grand Blog | Medium5.4 |
| CVE-2026-24381 | WordPress PhotoMe theme < 5.7.2 - Server Side Request Forgery (SSRF) vulnerabilityThemeGoods · PhotoMe | Medium5.4 |
| CVE-2025-69321 | WordPress Grand Spa theme <= 3.5.5 - Reflected Cross Site Scripting (XSS) vulnerabilityThemeGoods · Grand Spa | High7.1 |
| CVE-2025-69320 | WordPress Grand Magazine theme <= 3.5.7 - Reflected Cross Site Scripting (XSS) vulnerabilityThemeGoods · Grand Magazine | High7.1 |
| CVE-2025-68538 | WordPress Craft | Coffee Shop Cafe Restaurant WordPress theme <= 2.3.6 - Reflected Cross Site Scripting (XSS) vulnerabilityThemeGoods · Craft | High7.1 |
| CVE-2025-68520 | WordPress DotLife theme < 4.9.5 - Reflected Cross Site Scripting (XSS) vulnerabilityThemeGoods · DotLife | High7.1 |
| CVE-2025-68518 | WordPress Hoteller theme < 6.8.9 - Reflected Cross Site Scripting (XSS) vulnerabilityThemeGoods · Hoteller | High7.1 |
| CVE-2025-68510 | WordPress Photography theme < 7.7.5 - Local File Inclusion vulnerabilityThemeGoods · Photography | High8.1 |
| CVE-2025-67952 | WordPress Grand Tour theme < 5.6.2 - Cross Site Scripting (XSS) vulnerabilityThemeGoods · Grand Tour | High7.1 |
| CVE-2025-63026 | WordPress Grand Restaurant Theme Elements for Elementor plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerabilityThemeGoods · Grand Restaurant Theme Elements for Elementor | Medium6.5 |
| CVE-2025-67922 | WordPress Grand Restaurant theme < 7.0.9 - Cross Site Scripting (XSS) vulnerabilityThemeGoods · Grand Restaurant | High7.1 |
| CVE-2025-64217 | WordPress Photography theme <= 7.7.2 - Cross Site Scripting (XSS) vulnerabilityThemeGoods · Photography | High7.1 |
| CVE-2025-64224 | WordPress Grand Conference Theme Custom Post Type plugin < 2.6.4 - Cross Site Scripting (XSS) vulnerabilityThemeGoods · Grand Conference Theme Custom Post Type | High7.1 |
| CVE-2025-60116 | WordPress Grand Conference Theme Custom Post Type plugin < 2.6.4 - Broken Access Control vulnerabilityThemeGoods · Grand Conference Theme Custom Post Type | Medium5.4 |
| CVE-2025-47579 | WordPress Photography Theme <= 7.7.2 - PHP Object Injection VulnerabilityThemeGoods · Photography | Critical9.0 |
| CVE-2025-47584 | WordPress Photography theme <= 7.5.2 - PHP Object Injection vulnerabilityThemeGoods · Photography | High8.5 |
| CVE-2025-39485 | WordPress GrandTour theme <= 5.6 - PHP Object Injection vulnerabilityThemeGoods · Grand Tour | Critical9.8 |
| CVE-2025-32926 | WordPress Grand Restaurant WordPress theme <= 7.0 - Path Traversal to PHP Object Injection vulnerabilityThemeGoods · Grand Restaurant | Critical9.8 |
| CVE-2025-32928 | WordPress Altair theme <= 5.2.2 - PHP Object Injection vulnerabilityThemeGoods · Altair | Critical9.8 |
| CVE-2025-39348 | WordPress Grand Restaurant WordPress theme <= 7.0 - PHP Object Injection vulnerabilityThemeGoods · Grand Restaurant | Critical9.8 |