Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,974All CVEsplus 19,118 rejected
- 407Last 24 hours2,833 in the last 7 days
- 16,799Last 30 days1,544 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 2 | 7 | 0 | 0 | 10 | 27 |
| 2025 | 0 | 0 | 9 | 0 | 0 | 9 | 17 |
| 2024 | 0 | 1 | 7 | 0 | 0 | 8 | 8 |
| Title | ||
|---|---|---|
| CVE-2026-114177 | WordPress Xpro Elementor Addons plugin <= 1.7.10 - Cross Site Request Forgery (CSRF) vulnerabilityXpro · Xpro Elementor Addons | High8.8 |
| CVE-2026-7105 | Xpro Addons <= 1.5.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Creation via get_menu_content_editor() Functionxpro · Xpro Addons — 140+ Widgets for Elementor | Medium4.3 |
| CVE-2026-11614 | Xpro Addons <= 1.7.2 - Authenticated (Author+) Stored Cross-Site Scripting via 'custom_attributes' Parameter of Multiple Widgetsxpro · Xpro Addons — 140+ Widgets for Elementor | Medium6.4 |
| CVE-2025-15369 | Xpro Addons — 140+ Widgets for Elementor <= 1.5.0 - Missing Authorization to Unauthenticated Xpro Template Creationxpro · Xpro Addons — 140+ Widgets for Elementor | Medium5.3 |
| CVE-2026-45214 | WordPress Xpro Elementor Addons plugin <= 1.5.1 - SQL Injection vulnerabilityXpro · Xpro Elementor Addons | High8.5 |
| CVE-2025-13368 | Xpro Addons — 140+ Widgets for Elementor <= 1.4.20 - Authenticated (Contributor+) Stored Cross-Site Scriptingxpro · Xpro Addons — 140+ Widgets for Elementor | Medium6.4 |
| CVE-2026-2949 | Xpro Addons — 140+ Widgets for Elementor <= 1.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Box Widgetxpro · Xpro Addons — 140+ Widgets for Elementor | Medium6.4 |
| CVE-2026-32395 | WordPress Xpro Addons For Beaver Builder – Lite plugin <= 1.5.6 - Broken Access Control vulnerabilityXpro · Xpro Addons For Beaver Builder – Lite | Medium5.3 |
| CVE-2025-14149 | Xpro Addons — 140+ Widgets for Elementor <= 1.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Scroller Widget box linkxpro · Xpro Addons — 140+ Widgets for Elementor | Medium6.4 |
| CVE-2025-69312 | WordPress Xpro Elementor Addons plugin <= 1.4.19.1 - Arbitrary File Upload vulnerabilityXpro · Xpro Elementor Addons | Critical9.1 |
| CVE-2025-63044 | WordPress Xpro Elementor Addons plugin <= 1.4.19.1 - Cross Site Scripting (XSS) vulnerabilityXpro · Xpro Elementor Addons | Medium6.5 |
| CVE-2025-58198 | WordPress Xpro Theme Builder Plugin <= 1.2.9 - Broken Access Control VulnerabilityXpro · Xpro Theme Builder | Medium6.5 |
| CVE-2025-58195 | WordPress Xpro Elementor Addons Plugin <= 1.4.17 - Cross Site Scripting (XSS) VulnerabilityXpro · Xpro Elementor Addons | Medium6.5 |
| CVE-2025-48232 | WordPress Xpro Addons For Beaver Builder – Lite plugin <= 1.5.5 - Cross Site Scripting (XSS) VulnerabilityXpro · Xpro Addons For Beaver Builder – Lite | Medium6.5 |
| CVE-2025-32201 | WordPress Xpro Theme Builder Plugin <= 1.2.8.4 - Broken Access Control vulnerabilityXpro · Xpro Theme Builder | Medium4.3 |
| CVE-2025-32163 | WordPress Xpro Elementor Addons plugin <= 1.4.10 - Cross Site Scripting (XSS) vulnerabilityXpro · Xpro Elementor Addons | Medium6.5 |
| CVE-2025-2108 | 140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Site Title' widgetxpro · Xpro Addons — 140+ Widgets for Elementor | Medium6.4 |
| CVE-2024-13649 | 140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.7 - Authenticated (Contributor+) Stored Cross-Site Scriptingxpro · Xpro Addons — 140+ Widgets for Elementor | Medium6.4 |
| CVE-2024-12584 | 140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.2 - Authenticated (Contributor+) Post Disclosure via Post Duplicationxpro · Xpro Addons — 140+ Widgets for Elementor | Medium4.3 |
| CVE-2024-54253 | WordPress Xpro Addons For Elementor plugin <= 1.4.6.5 - Cross Site Scripting (XSS) vulnerabilityXpro · Xpro Elementor Addons | Medium6.5 |
| CVE-2024-10319 | 140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templatexpro · Xpro Addons — 140+ Widgets for Elementor | Medium4.3 |
| CVE-2024-7791 | 140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Grid Widgetxpro · Xpro Addons — 140+ Widgets for Elementor | Medium6.4 |
| CVE-2024-43150 | WordPress Xpro Elementor Addons plugin <= 1.4.4.2 - Cross Site Scripting (XSS) vulnerabilityXpro · Xpro Elementor Addons | Medium6.5 |
| CVE-2024-4471 | 140+ Widgets | Best Addons For Elementor – FREE <= 1.4.3.1 - Authenticated (Contributor+) PHP Object Injectionxpro · Xpro Addons — 140+ Widgets for Elementor | High8.0 |
| CVE-2024-4440 | 140+ Widgets | Best Addons For Elementor – FREE <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgetsxpro · Xpro Addons — 140+ Widgets for Elementor | Medium6.4 |
| CVE-2024-34570 | WordPress Xpro Elementor Addons plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerabilityXpro · Xpro Elementor Addons | Medium5.9 |
| CVE-2024-2250 | 130+ Widgets | Best Addons For Elementor – FREE <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scriptingxpro · Xpro Addons — 140+ Widgets for Elementor | Medium6.4 |