Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,270All CVEsplus 19,138 rejected
- 476Last 24 hours2,765 in the last 7 days
- 16,926Last 30 days1,555 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 2 | 2 | 0 | 0 | 4 | 13 |
| 2025 | 0 | 1 | 3 | 0 | 0 | 4 | 9 |
| 2024 | 2 | 3 | 0 | 0 | 0 | 5 | 5 |
| Title | ||
|---|---|---|
| CVE-2026-39747 | WordPress Woffice theme < 5.4.43 - SQL Injection vulnerabilityWofficeIO · Woffice | High8.5 |
| CVE-2026-27435 | WordPress Woffice theme < 5.4.33 - Broken Access Control vulnerabilityWofficeIO · Woffice | Medium5.3 |
| CVE-2025-67919 | WordPress Woffice Core plugin <= 5.4.30 - Insecure Direct Object References (IDOR) vulnerabilityWofficeIO · Woffice Core | Medium6.5 |
| CVE-2025-67918 | WordPress Woffice theme <= 5.4.30 - Cross Site Scripting (XSS) vulnerabilityWofficeIO · Woffice | High7.1 |
| CVE-2025-67566 | WordPress Woffice Core plugin <= 5.4.30 - Broken Access Control vulnerabilityWofficeIO · Woffice Core | Medium5.3 |
| CVE-2025-7694 | Woffice Core <= 5.4.26 - Authenticated (Contributor+) Arbitrary File DeletionWofficeIO · Woffice Core | Medium6.8 |
| CVE-2025-2780 | Woffice Core <= 5.4.21 - Authenticated (Subscriber+) Arbitrary File UploadWofficeIO · Woffice Core | High8.8 |
| CVE-2025-2797 | Woffice Core <= 5.4.21 - Cross-Site Request Forgery to User Registration ApprovalWofficeIO · Woffice Core | Medium5.4 |
| CVE-2024-43234 | WordPress Woffice theme <= 5.4.14 - Unauthenticated Account Takeover vulnerabilityWofficeIO · Woffice | Critical9.8 |
| CVE-2024-37470 | WordPress Woffice Core plugin <= 5.4.8 - Unauthenticated Broken Access Control vulnerabilityWofficeIO · Woffice Core | High8.2 |
| CVE-2024-43153 | WordPress Woffice theme <= 5.4.10 - Unauthenticated Privilege Escalation vulnerabilityWofficeIO · Woffice | Critical9.8 |
| CVE-2024-37471 | WordPress Woffice Core plugin <= 5.4.8 - Site Wide Reflected Cross Site Scripting (XSS) vulnerabilityWofficeIO · Woffice Core | High7.1 |
| CVE-2024-37472 | WordPress Woffice theme <= 5.4.8 - Reflected Cross Site Scripting (XSS) vulnerabilityWofficeIO · Woffice | High7.1 |