Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,234All CVEsplus 19,120 rejected
- 500Last 24 hours2,798 in the last 7 days
- 16,901Last 30 days1,543 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 3 | 2 | 0 | 0 | 7 | 50 |
| 2025 | 3 | 2 | 25 | 0 | 0 | 30 | 43 |
| 2024 | 1 | 6 | 3 | 0 | 0 | 10 | 13 |
| 2023 | 0 | 2 | 1 | 0 | 0 | 3 | 3 |
| Title | ||
|---|---|---|
| CVE-2026-112866 | WordPress Product Filter by WBW plugin <= 3.4.6 - SQL Injection vulnerabilityWPFactory · Product Filter by WBW | Critical9.3 |
| CVE-2026-93771 | WordPress Cost of Goods for WooCommerce plugin <= 3.5.2 - PHP Object Injection vulnerabilityWPFactory · Cost of Goods for WooCommerce | High7.2 |
| CVE-2026-39437 | WordPress Min Max Step Quantity Limits Manager for WooCommerce plugin <= 5.2.2 - Reflected Cross Site Scripting (XSS) vulnerabilityWPFactory · Min Max Step Quantity Limits Manager for WooCommerce | High7.1 |
| CVE-2026-24993 | WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.3 - SQL Injection vulnerabilityWPFactory · Advanced WooCommerce Product Sales Reporting | Critical9.3 |
| CVE-2026-23977 | WordPress Helpdesk Support Ticket System for WooCommerce plugin <= 2.1.2 - Broken Access Control vulnerabilityWPFactory · Helpdesk Support Ticket System for WooCommerce | High7.5 |
| CVE-2026-24992 | WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.2 - Sensitive Data Exposure vulnerabilityWPFactory · Advanced WooCommerce Product Sales Reporting | Medium5.3 |
| CVE-2025-69334 | WordPress Wishlist for WooCommerce plugin <= 3.3.0 - Cross Site Scripting (XSS) vulnerabilityWPFactory · Wishlist for WooCommerce | Medium6.5 |
| CVE-2025-62096 | WordPress Maximum Products per User for WooCommerce plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerabilityWPFactory · Maximum Products per User for WooCommerce | Medium6.5 |
| CVE-2025-68528 | WordPress Free Shipping Bar: Amount Left for Free Shipping for WooCommerce plugin <= 2.4.9 - Cross Site Scripting (XSS) vulnerabilityWPFactory · Free Shipping Bar: Amount Left for Free Shipping for WooCommerce | Medium6.5 |
| CVE-2025-57911 | WordPress Adverts Plugin <= 1.4 - Cross Site Scripting (XSS) VulnerabilityWPFactory · Adverts | Medium6.5 |
| CVE-2025-57972 | WordPress Helpdesk Support Ticket System for WooCommerce plugin <= 2.1.1 - Broken Access Control vulnerabilityWPFactory · Helpdesk Support Ticket System for WooCommerce | Medium4.3 |
| CVE-2025-58985 | WordPress Additional Custom Product Tabs for WooCommerce Plugin <= 1.7.3 - Cross Site Scripting (XSS) VulnerabilityWPFactory · Additional Custom Product Tabs for WooCommerce | Medium6.5 |
| CVE-2025-49887 | WordPress Product XML Feed Manager for WooCommerce Plugin <= 2.9.3 - Remote Code Execution (RCE) VulnerabilityWPFactory · Product XML Feed Manager for WooCommerce | Critical9.9 |
| CVE-2025-30959 | WordPress Product XML Feed Manager for WooCommerce <= 2.9.2 - Broken Access Control VulnerabilityWPFactory · Product XML Feed Manager for WooCommerce | Medium6.5 |
| CVE-2025-49319 | WordPress Wishlist for WooCommerce <= 3.2.3 - Broken Access Control VulnerabilityWPFactory · Wishlist for WooCommerce | Medium6.5 |
| CVE-2025-49987 | WordPress CRM ERP Business Solution plugin <= 1.13 - Broken Access Control VulnerabilityWPFactory · CRM ERP Business Solution | Medium5.3 |
| CVE-2025-49510 | WordPress Min Max Step Quantity Limits Manager for WooCommerce plugin <= 5.1.0 - Cross Site Request Forgery (CSRF) vulnerabilityWPFactory · Min Max Step Quantity Limits Manager for WooCommerce | Medium4.3 |
| CVE-2025-48254 | WordPress Change Add to Cart Button Text for WooCommerce plugin <= 2.2.2 - Cross Site Scripting (XSS) VulnerabilityWPFactory · Change Add to Cart Button Text for WooCommerce | Medium6.5 |
| CVE-2025-48253 | WordPress Free Shipping Bar: Amount Left for Free Shipping for WooCommerce plugin <= 2.4.6 - Cross Site Scripting (XSS) VulnerabilityWPFactory · Free Shipping Bar: Amount Left for Free Shipping for WooCommerce | Medium6.5 |
| CVE-2025-48252 | WordPress Back Button Widget plugin <= 1.6.8 - Cross Site Scripting (XSS) VulnerabilityWPFactory · Back Button Widget | Medium6.5 |
| CVE-2025-48251 | WordPress Additional Custom Emails & Recipients for WooCommerce plugin <= 3.5.1 - Cross Site Scripting (XSS) VulnerabilityWPFactory · Additional Custom Emails & Recipients for WooCommerce | Medium6.5 |
| CVE-2025-48250 | WordPress Coupons & Add to Cart by URL Links for WooCommerce plugin <= 1.7.7 - Cross Site Scripting (XSS) VulnerabilityWPFactory · Coupons & Add to Cart by URL Links for WooCommerce | Medium6.5 |
| CVE-2025-48249 | WordPress EAN for WooCommerce plugin <= 5.4.6 - Cross Site Scripting (XSS) VulnerabilityWPFactory · EAN for WooCommerce | Medium6.5 |
| CVE-2025-48248 | WordPress Sitewide Discount for WooCommerce: Apply Discount to All Products plugin <= 2.2.1 - Cross Site Scripting (XSS) VulnerabilityWPFactory · Sitewide Discount for WooCommerce: Apply Discount to All Products | Medium6.5 |
| CVE-2025-48240 | WordPress Cost of Goods for WooCommerce plugin <= 3.7.0 - Cross Site Scripting (XSS) VulnerabilityWPFactory · Cost of Goods for WooCommerce | Medium6.5 |
| CVE-2025-48239 | WordPress Product Notes Tab & Private Admin Notes for WooCommerce plugin <= 3.1.0 - Cross Site Scripting (XSS) VulnerabilityWPFactory · Product Notes Tab & Private Admin Notes for WooCommerce | Medium6.5 |
| CVE-2025-48237 | WordPress Wishlist for WooCommerce plugin <= 3.2.2 - Cross Site Scripting (XSS) VulnerabilityWPFactory · Wishlist for WooCommerce | Medium6.5 |
| CVE-2025-47504 | WordPress Custom Checkout Fields for WooCommerce plugin <= 1.8.3 - Cross Site Scripting (XSS) VulnerabilityWPFactory · Custom Checkout Fields for WooCommerce | Medium6.5 |
| CVE-2025-32552 | WordPress MSRP (RRP) Pricing for WooCommerce Plugin <= 1.8.1 - Reflected Cross Site Scripting (XSS) vulnerabilityWPFactory · MSRP (RRP) Pricing for WooCommerce | High7.1 |
| CVE-2025-32674 | WordPress Product Excel Import Export & Bulk Edit for WooCommerce plugin <= 4.7 - Cross Site Scripting (XSS) VulnerabilityWPFactory · Product Excel Import Export & Bulk Edit for WooCommerce | High7.1 |
| CVE-2025-39601 | WordPress Custom CSS, JS & PHP plugin <= 2.4.1 - CSRF to RCE vulnerabilityWPFactory · Custom CSS, JS & PHP | Critical9.6 |
| CVE-2025-26749 | WordPress Additional Custom Product Tabs for WooCommerce plugin <= 1.7.0 - Cross Site Scripting (XSS) vulnerabilityWPFactory · Additional Custom Product Tabs for WooCommerce | Medium6.5 |
| CVE-2025-31553 | WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.1 - SQL Injection vulnerabilityWPFactory · Advanced WooCommerce Product Sales Reporting | Critical9.3 |
| CVE-2025-31848 | WordPress WordPress Adverts Plugin plugin <= 1.4 - Broken Access Control vulnerabilityWPFactory · Adverts | Medium5.3 |
| CVE-2025-31598 | WordPress Quantity Dynamic Pricing & Bulk Discounts for WooCommerce plugin <= 4.0.3 - Stored Cross Site Scripting (XSS) vulnerabilityWPFactory · Quantity Dynamic Pricing & Bulk Discounts for WooCommerce | Medium6.5 |
| CVE-2025-22673 | WordPress EAN Barcode Generator <= 5.3.5 - Broken Access Control vulnerabilityWPFactory · EAN for WooCommerce | Medium4.3 |
| CVE-2025-30781 | WordPress Scheduled & Automatic Order Status Controller for WooCommerce plugin <= 3.7.1 - Open Redirection VulnerabilityWPFactory · Scheduled & Automatic Order Status Controller for WooCommerce | Medium4.7 |
| CVE-2024-56228 | WordPress Wishlist for WooCommerce: Multi Wishlists Per Customer plugin <= 3.1.2 - Reflected Cross Site Scripting (XSS) vulnerabilityWPFactory · Wishlist for WooCommerce | High7.1 |
| CVE-2024-54332 | WordPress WP Currency Exchange Rates plugin <= 1.2.0 - CSRF to Stored XSS vulnerabilityWPFactory · WP Currency Exchange Rates | High7.1 |
| CVE-2023-23868 | WordPress Cost of Goods for WooCommerce plugin <= 2.8.6 - Broken Access Control vulnerabilityWPFactory · Cost of Goods for WooCommerce | Medium5.4 |
| CVE-2024-54209 | WordPress Awesome Shortcodes plugin <= 1.7.2 - Reflected Cross Site Scripting (XSS) vulnerabilityWPFactory · Awesome Shortcodes | High7.1 |
| CVE-2024-44061 | WordPress EU/UK VAT Manager for WooCommerce plugin <= 2.12.14 - CSRF to Cross Site Scripting (XSS) vulnerabilityWPFactory · EU/UK VAT Manager for WooCommerce | High7.1 |
| CVE-2024-49305 | WordPress Customer Email Verification for WooCommerce plugin <= 2.8.10 - SQL Injection vulnerabilityWPFactory · Email Verification for WooCommerce | Critical9.3 |
| CVE-2024-43127 | WordPress Products, Order & Customers Export for WooCommerce plugin <= 2.0.11 - Reflected Cross Site Scripting (XSS) vulnerabilityWPFactory · Products, Order & Customers Export for WooCommerce | High7.1 |
| CVE-2024-31276 | WordPress Products, Order & Customers Export for WooCommerce plugin <= 2.0.8 - Broken Access Control vulnerabilityWPFactory · Products, Order & Customers Export for WooCommerce | Medium5.3 |
| CVE-2024-34370 | WordPress EAN for WooCommerce plugin <= 4.8.9 - Arbitrary Option Update to Privilege Escalation vulnerabilityWPFactory · EAN for WooCommerce | High7.2 |
| CVE-2024-30536 | WordPress Slugs Manager plugin <= 2.6.7 - Cross Site Request Forgery (CSRF) vulnerabilityWPFactory · Slugs Manager | Medium4.3 |
| CVE-2023-51399 | WordPress Back Button Widget Plugin <= 1.6.3 is vulnerable to Cross Site Scripting (XSS)WPFactory · Back Button Widget | Medium6.5 |
| CVE-2023-47547 | WordPress Products, Order & Customers Export for WooCommerce Plugin <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)WPFactory · Products, Order & Customers Export for WooCommerce | High7.1 |
| CVE-2023-36689 | WordPress WPFactory Helper Plugin <= 1.5.2 is vulnerable to Cross Site Scripting (XSS)WPFactory · WPFactory Helper | High7.1 |