Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,167All CVEsplus 19,120 rejected
- 475Last 24 hours2,785 in the last 7 days
- 16,854Last 30 days1,538 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 4 | 10 | 0 | 0 | 15 | 22 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 7 |
| 2024 | 0 | 0 | 3 | 0 | 0 | 3 | 7 |
| 2023 | 1 | 0 | 0 | 0 | 0 | 1 | 4 |
| 2022 | 1 | 0 | 0 | 0 | 0 | 1 | 3 |
| 2021 | 0 | 0 | 2 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-27401 | WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.62.0 - Broken Access Control vulnerabilityYITH · YITH PayPal Express Checkout for WooCommerce | Medium5.3 |
| CVE-2026-111845 | WordPress YITH WooCommerce Product Bundles plugin <= 2.29.0 - Broken Access Control vulnerabilityYITH · YITH WooCommerce Product Bundles | Medium5.3 |
| CVE-2026-112199 | WordPress YITH WooCommerce Wishlist plugin <= 4.18.1 - Cross Site Scripting (XSS) vulnerabilityYITH · YITH WooCommerce Wishlist | Medium6.5 |
| CVE-2026-111409 | WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.61.0 - Broken Access Control vulnerabilityYITH · YITH PayPal Express Checkout for WooCommerce | Medium5.3 |
| CVE-2026-106604 | WordPress YITH WooCommerce Compare plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerabilityYITH · YITH WooCommerce Compare | Medium6.5 |
| CVE-2026-66480 | WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Sensitive Data Exposure vulnerabilityYITH · YITH WooCommerce Product Add-Ons | Medium5.3 |
| CVE-2026-106606 | WordPress YITH WooCommerce Affiliates plugin <= 3.31.0 - PHP Object Injection vulnerabilityYITH · YITH WooCommerce Affiliates | High7.2 |
| CVE-2026-105878 | WordPress YITH WooCommerce Product Bundles plugin <= 2.29.0 - Broken Access Control vulnerabilityYITH · YITH WooCommerce Product Bundles | Medium5.3 |
| CVE-2026-95602 | WordPress YITH WooCommerce Request A Quote plugin < 4.46.1 - Insecure Direct Object References (IDOR) vulnerabilityYITH · YITH WooCommerce Request A Quote | Medium6.5 |
| CVE-2026-14359 | YITH WooCommerce Waitlist Premium <= 3.35.0 - Authenticated (Subscriber+) Privilege Escalation to Admin via wp_ajax_yith_wcwtl_add_userYith · YITH WooCommerce Waitlist Premium | High8.8 |
| CVE-2026-84238 | WordPress YITH Request a Quote for WooCommerce Premium plugin < 4.46.0 - Broken Access Control vulnerabilityYITH · YITH Request a Quote for WooCommerce Premium | Critical9.8 |
| CVE-2026-32552 | WordPress YITH WooCommerce Membership Premium plugin <= 2.33.0 - SQL Injection vulnerabilityYITH · YITH WooCommerce Membership Premium | High8.5 |
| CVE-2022-44630 | WordPress YITH WooCommerce Product Slider Carousel plugin <= 1.16.0 - Cross-Site Request Forgery (CSRF)YITH · YITH WooCommerce Product Slider Carousel | Medium4.6 |
| CVE-2026-42383 | WordPress YITH WooCommerce Product Add-Ons plugin <= 4.29.0 - SQL Injection vulnerabilityYITH · YITH WooCommerce Product Add-Ons | High7.6 |
| CVE-2026-27329 | WordPress YITH WooCommerce Wishlist plugin <= 4.12.0 - Insecure Direct Object References (IDOR) vulnerabilityYITH · YITH WooCommerce Wishlist | Medium5.3 |
| CVE-2023-36506 | WordPress YITH WooCommerce Waitlist plugin <= 2.13.0 - Broken Access Control vulnerabilityYITH · YITH WooCommerce Waiting List | Medium5.3 |
| CVE-2024-30470 | WordPress YITH WooCommerce Account Funds Premium plugin <= 1.32.0 - Broken Access Control vulnerabilityYITH · YITH WooCommerce Account Funds Premium | Medium6.5 |
| CVE-2022-44633 | WordPress YITH WooCommerce Gift Cards Premium plugin <= 3.23.1 - Unauth. Gift Card Creation Leading to Stored XSS vulnerabilityYITH · YITH WooCommerce Gift Cards Premium | Medium6.5 |
| CVE-2023-49777 | WordPress YITH WooCommerce Product Add-Ons Plugin <= 4.3.0 is vulnerable to PHP Object InjectionYITH · YITH WooCommerce Product Add-Ons | Critical9.1 |
| CVE-2022-45359 | WordPress YITH WooCommerce Gift Cards Premium Plugin <= 3.19.0 is vulnerable to Arbitrary File UploadYITH · YITH WooCommerce Gift Cards | Critical9.8 |
| CVE-2021-36845 | YITH Maintenance Mode (WordPress plugin) <= 1.3.8 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilitiesYITH · YITH Maintenance Mode (WordPress plugin) | Medium6.9 |
| CVE-2021-36841 | YITH Maintenance Mode (WordPress plugin) <= 1.3.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability.YITH · YITH Maintenance Mode (WordPress plugin) | Medium6.9 |