Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,391All CVEsplus 18,889 rejected
- 411Last 24 hours2,992 in the last 7 days
- 17,365Last 30 days1,590 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 10 | 1 | 0 | 0 | 11 | 31 |
| 2025 | 3 | 16 | 1 | 0 | 0 | 20 | 20 |
| Title | ||
|---|---|---|
| CVE-2026-39748 | WordPress EduMall theme <= 4.5.3 - Reflected Cross Site Scripting (XSS) vulnerabilityThemeMove · EduMall | High7.1 |
| CVE-2026-57797 | WordPress EduMall theme <= 4.5.1 - Broken Access Control vulnerabilityThemeMove · EduMall | Medium4.3 |
| CVE-2026-57791 | WordPress Brook theme <= 2.9.0 - Local File Inclusion vulnerabilityThemeMove · Brook | High7.5 |
| CVE-2026-57790 | WordPress Billey theme <= 2.1.8 - Local File Inclusion vulnerabilityThemeMove · Billey | High7.5 |
| CVE-2025-69094 | WordPress Unicamp theme <= 2.2.2 - SQL Injection vulnerabilityThemeMove · Unicamp | High8.5 |
| CVE-2026-39590 | WordPress Atomlab theme <= 2.4.5 - Local File Inclusion vulnerabilityThemeMove · Atomlab | High8.1 |
| CVE-2026-25027 | WordPress Unicamp theme <= 2.7.1 - Local File Inclusion vulnerabilityThemeMove · Unicamp | High7.5 |
| CVE-2025-22708 | WordPress Mitech theme <= 2.3.4 - Local File Inclusion vulnerabilityThemeMove · Mitech | High8.1 |
| CVE-2025-22707 | WordPress Moody theme <= 2.7.3 - Local File Inclusion vulnerabilityThemeMove · Moody | High8.1 |
| CVE-2025-14430 | WordPress Brook - Agency Business Creative theme <= 2.9.0 - Local File Inclusion vulnerabilityThemeMove · Brook | High8.1 |
| CVE-2025-14429 | WordPress AeroLand theme <= 1.6.6 - Local File Inclusion vulnerabilityThemeMove · AeroLand | High8.1 |
| CVE-2025-60069 | WordPress MinimogWP theme <= 3.9.6 - Local File Inclusion vulnerabilityThemeMove · MinimogWP | High8.1 |
| CVE-2025-68062 | WordPress MinimogWP theme <= 3.9.6 - Local File Inclusion vulnerabilityThemeMove · MinimogWP | High7.5 |
| CVE-2025-68061 | WordPress EduMall theme <= 4.4.7 - Local File Inclusion vulnerabilityThemeMove · EduMall | High7.5 |
| CVE-2025-59564 | WordPress EduMall Theme < 4.4.5 - Local File Inclusion VulnerabilityThemeMove · EduMall | High8.1 |
| CVE-2025-59558 | WordPress Billey Theme < 2.1.6 - Local File Inclusion VulnerabilityThemeMove · Billey | High8.1 |
| CVE-2025-59557 | WordPress Learts Addons Plugin < 1.7.5 - SQL Injection VulnerabilityThemeMove · Learts Addons | Critical9.3 |
| CVE-2025-59555 | WordPress Medizin Theme < 1.9.7 - Local File Inclusion VulnerabilityThemeMove · Medizin | High8.1 |
| CVE-2025-58967 | WordPress Businext theme < 2.4.4 - Local File Inclusion vulnerabilityThemeMove · Businext | High8.1 |
| CVE-2025-58958 | WordPress SmilePure Theme < 1.8.5 - Local File Inclusion VulnerabilityThemeMove · SmilePure | High8.1 |
| CVE-2025-53303 | WordPress ThemeMove Core Plugin <= 1.4.2 - PHP Object Injection VulnerabilityThemeMove · ThemeMove Core | High8.8 |
| CVE-2025-58206 | WordPress MaxCoach Theme <= 3.2.5 - Local File Inclusion VulnerabilityThemeMove · MaxCoach | High8.1 |
| CVE-2025-58210 | WordPress Makeaholic Theme <= 1.8.5 - Broken Access Control VulnerabilityThemeMove · Makeaholic | Medium5.3 |
| CVE-2025-54701 | WordPress Unicamp Theme <= 2.6.3 - Local File Inclusion VulnerabilityThemeMove · Unicamp | High8.1 |
| CVE-2025-54700 | WordPress Makeaholic Theme <= 1.8.4 - Local File Inclusion VulnerabilityThemeMove · Makeaholic | High8.1 |
| CVE-2025-8198 | MinimogWP – The High Converting eCommerce WordPress Theme <= 3.9.0 - Unauthenticated Price ManipulationThemeMove · MinimogWP – The High Converting eCommerce WordPress Theme | High7.5 |
| CVE-2025-39474 | WordPress Amely theme <= 3.1.4 - SQL Injection vulnerabilityThemeMove · Amely | Critical9.3 |
| CVE-2025-32309 | WordPress Healsoul theme <= 2.2.3 - Local File Inclusion VulnerabilityThemeMove · Healsoul | High8.1 |
| CVE-2025-32310 | WordPress QuickCal plugin <= 1.0.15 - CSRF to Privilege Escalation vulnerabilityThemeMove · QuickCal - Appointment Booking Calendar for WordPress | High8.8 |
| CVE-2025-2101 | Edumall <= 4.2.4 - Unauthenticated Local File InclusionThemeMove · EduMall - Professional LMS Education Center WordPress Theme | High8.1 |
| CVE-2024-13790 | MinimogWP – The High Converting eCommerce WordPress Theme <= 3.7.0 - Unauthenticated Local PHP File InclusionThemeMove · MinimogWP – The High Converting eCommerce WordPress Theme | Critical9.8 |