Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,074All CVEsplus 19,119 rejected
- 507Last 24 hours2,869 in the last 7 days
- 16,887Last 30 days1,546 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 2 | 0 | 0 | 0 | 2 | 13 |
| 2025 | 0 | 1 | 2 | 0 | 0 | 3 | 11 |
| 2024 | 4 | 4 | 0 | 0 | 0 | 8 | 8 |
| Title | ||
|---|---|---|
| CVE-2026-25357 | WordPress Ultimate Membership Pro plugin <= 13.7 - Account Takeover vulnerabilityazzaroco · Ultimate Membership Pro | High8.1 |
| CVE-2026-28113 | WordPress Ultimate Learning Pro plugin <= 3.9.1 - Reflected Cross Site Scripting (XSS) vulnerabilityazzaroco · Ultimate Learning Pro | High7.1 |
| CVE-2025-64251 | WordPress Ultimate Learning Pro plugin <= 3.9.3 - Arbitrary Content Deletion vulnerabilityazzaroco · Ultimate Learning Pro | Medium4.9 |
| CVE-2024-13846 | Indeed Ultimate Learning Pro <= 3.9 - Authenticated (Administrator+) SQL Injection via post_id Parameterazzaroco · Indeed Ultimate Learning Pro | Medium4.9 |
| CVE-2024-56069 | WordPress WP SuperBackup plugin <= 2.3.3 - Reflected Cross Site Scripting (XSS) vulnerabilityazzaroco · WP SuperBackup | High7.1 |
| CVE-2024-56070 | WordPress WP SuperBackup plugin <= 2.3.3 - Multiple Subscriber+ Broken Access Control vulnerabilitiesazzaroco · WP SuperBackup | High7.4 |
| CVE-2024-56064 | WordPress WP SuperBackup plugin <= 2.3.3 - Unauthenticated Arbitrary File Upload vulnerabilityazzaroco · WP SuperBackup | Critical10.0 |
| CVE-2024-56068 | WordPress WP SuperBackup plugin <= 2.3.3 - Subscriber+ PHP Object Injection vulnerabilityazzaroco · WP SuperBackup | High7.5 |
| CVE-2024-56067 | WordPress WP SuperBackup plugin <= 2.3.3 - Unauthenticated Backup File Download Vulnerabilityazzaroco · WP SuperBackup | High7.5 |
| CVE-2024-9290 | Super Backup & Clone - Migrate for WordPress <= 2.3.3 - Unauthenticated Arbitrary File Uploadazzaroco · Super Backup & Clone - Migrate for WordPress | Critical9.8 |
| CVE-2024-43242 | WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Unauthenticated PHP Object Injection vulnerabilityazzaroco · Ultimate Membership Pro | Critical9.0 |
| CVE-2024-43240 | WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Unauthenticated Privilege Escalation vulnerabilityazzaroco · Ultimate Membership Pro | Critical9.4 |
| CVE-2024-43241 | WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Reflected Cross Site Scripting (XSS) vulnerabilityazzaroco · Ultimate Membership Pro | High7.1 |