Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 10 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,792All CVEsplus 19,141 rejected
- 638Last 24 hours3,087 in the last 7 days
- 17,128Last 30 days1,603 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 9 | 2 | 3 | 0 | 0 | 14 | 16 |
| 2025 | 0 | 0 | 2 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-39798 | WordPress TrueBooker plugin <= 1.2.9 - Settings Change vulnerabilityThemetechMount · TrueBooker | Medium6.5 |
| CVE-2026-14349 | TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary User Email Modification via 'admin_addcustomer' AJAX Actionthemetechmount · TrueBooker – Appointment Booking and Scheduler System | Critical9.8 |
| CVE-2026-18315 | TrueBooker <= 1.2.6 - Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover to 'truebooker_wp_user_id' Parameterthemetechmount · TrueBooker – Appointment Booking and Scheduler System | Critical9.8 |
| CVE-2026-73347 | WordPress TrueBooker plugin <= 1.2.6 - Privilege Escalation vulnerabilityThemetechMount · TrueBooker | Critical9.8 |
| CVE-2026-16142 | TrueBooker <= 1.2.6 - Unauthenticated Account Takeover via Insecure Direct Object Reference in 'truebooker_wp_user_id' Parameterthemetechmount · TrueBooker – Appointment Booking and Scheduler System | Critical9.8 |
| CVE-2026-14364 | TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'tbab-userid'themetechmount · TrueBooker – Appointment Booking and Scheduler System | Critical9.8 |
| CVE-2026-14365 | TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'truebooker_wp_user_id'themetechmount · TrueBooker – Appointment Booking and Scheduler System | Critical9.8 |
| CVE-2026-13161 | TrueBooker <= 1.2.2 - Unauthenticated SQL Injectionthemetechmount · TrueBooker – Appointment Booking and Scheduler System | High7.5 |
| CVE-2026-61951 | WordPress TrueBooker plugin <= 1.2.3 - Privilege Escalation vulnerabilitythemetechmount · TrueBooker | Critical9.8 |
| CVE-2026-61950 | WordPress TrueBooker plugin <= 1.2.3 - SQL Injection vulnerabilitythemetechmount · TrueBooker | Critical9.3 |
| CVE-2026-48881 | WordPress TrueBooker plugin <= 1.1.9 - Broken Access Control vulnerabilitythemetechmount · TrueBooker | Critical9.1 |
| CVE-2026-39663 | WordPress TrueBooker plugin <= 1.1.5 - Broken Access Control vulnerabilitythemetechmount · TrueBooker | Medium5.3 |
| CVE-2026-1797 | Truebooker - Appointment Booking and Scheduler Plugin <= 1.1.4 - Sensitive Information Exposure via Views Filesthemetechmount · TrueBooker – Appointment Booking and Scheduler System | Medium5.3 |
| CVE-2026-32400 | WordPress Boldman theme <= 7.7 - Local File Inclusion vulnerabilityThemetechMount · Boldman | High7.5 |
| CVE-2025-67581 | WordPress TrueBooker plugin <= 1.1.0 - Broken Access Control vulnerabilitythemetechmount · TrueBooker | Medium5.3 |
| CVE-2025-47543 | WordPress TrueBooker plugin <= 1.0.7 - Cross Site Request Forgery (CSRF) Vulnerabilitythemetechmount · TrueBooker | Medium4.3 |