Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,743All CVEsplus 19,141 rejected
- 662Last 24 hours3,043 in the last 7 days
- 17,188Last 30 days1,611 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 1 | 0 | 0 | 1 | 13 |
| 2025 | 0 | 1 | 6 | 0 | 0 | 7 | 12 |
| 2024 | 0 | 2 | 3 | 0 | 0 | 5 | 5 |
| Title | ||
|---|---|---|
| CVE-2026-4811 | WPB Floating Menu or Categories – Sticky Floating Side Menu & Categories with Icons <= 1.0.8 - Authenticated (Editor+) Stored Cross-Site Scripting via 'Icon CSS Class' Category Fieldwpbean · WPB Floating Menu or Categories – Sticky Floating Side Menu & Categories with Icons | Medium4.9 |
| CVE-2025-57967 | WordPress WPB Quick View for WooCommerce plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerabilityWPBean · WPB Quick View for WooCommerce | Medium6.5 |
| CVE-2025-57982 | WordPress Advance Portfolio Grid plugin <= 1.07.6 - Cross Site Scripting (XSS) vulnerabilityWPBean · Advance Portfolio Grid | Medium5.9 |
| CVE-2025-58858 | WordPress WPB Image Widget Plugin <= 1.1 - Cross Site Scripting (XSS) VulnerabilityWPBean · WPB Image Widget | Medium6.5 |
| CVE-2025-58793 | WordPress WPB Elementor Addons plugin <= 1.7 - Cross Site Scripting (XSS) vulnerabilityWPBean · WPB Elementor Addons | Medium6.5 |
| CVE-2025-53281 | WordPress WPB Category Slider for WooCommerce plugin <= 1.71 - Local File Inclusion VulnerabilityWPBean · WPB Category Slider for WooCommerce | High7.5 |
| CVE-2025-30802 | WordPress Our Team Members plugin <= 2.2 - Sensitive Data Exposure vulnerabilityWPBean · Our Team Members | Medium4.3 |
| CVE-2024-13664 | WP Post List Table <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpbean · WP Post List Table | Medium6.4 |
| CVE-2024-11034 | Request a Quote for WooCommerce and Elementor – Get a Quote Button – Product Enquiry Form Popup – Product Quotation <= 1.4 - Unauthenticated Arbitrary Shortcode Execution via fire_contact_formwpbean · Request a Quote for WooCommerce – Get a Quote Button | High7.3 |
| CVE-2024-11038 | WPB Popup for Contact Form 7 – Showing The Contact Form 7 Popup on Button Click – CF7 Popup <= 1.7.5 - Unauthenticated Arbitrary Shortcode Execution via wpb_pcf_fire_contact_formwpbean · WPB Popup for Contact Form 7 – Showing Contact Form 7 Popup on Button Click | High7.3 |
| CVE-2024-34791 | WordPress WPB Elementor Addons plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerabilitywpbean · WPB Elementor Addons | Medium6.5 |
| CVE-2024-3063 | WPB Elementor Addons <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpbean · WPB Addons for Elementor – News Ticker, Timeline, Team & More Widgets | Medium6.4 |
| CVE-2024-4896 | WPB Elementor Addons <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameterwpbean · WPB Addons for Elementor – News Ticker, Timeline, Team & More Widgets | Medium6.4 |