Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,366All CVEsplus 19,141 rejected
- 473Last 24 hours2,752 in the last 7 days
- 16,923Last 30 days1,565 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 3 | 4 | 22 | 0 | 0 | 29 | 103 |
| 2025 | 1 | 1 | 23 | 0 | 0 | 25 | 74 |
| 2024 | 3 | 3 | 43 | 0 | 0 | 49 | 49 |
| Title | ||
|---|---|---|
| CVE-2026-111111 | Prime Slider <= 4.7.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Content_Guard Regex Quote-Escapebdthemes · Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons | High7.2 |
| CVE-2026-109691 | WordPress Prime Slider – Addons For Elementor plugin <= 4.7.1 - Cross Site Scripting (XSS) vulnerabilityBdThemes · Prime Slider – Addons For Elementor | Medium6.5 |
| CVE-2026-108478 | WordPress Element Pack Elementor Addons plugin <= 8.8.8 - Cross Site Scripting (XSS) vulnerabilityBdThemes · Element Pack Elementor Addons | Medium6.5 |
| CVE-2026-105886 | WordPress Ultimate Post Kit plugin <= 4.5.5 - Broken Access Control vulnerabilityBdThemes · Ultimate Post Kit | Medium6.5 |
| CVE-2026-105875 | WordPress Prime Slider – Addons For Elementor plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerabilityBdThemes · Prime Slider – Addons For Elementor | Medium6.5 |
| CVE-2026-105873 | WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerabilityBdThemes · Element Pack Elementor Addons | Medium6.5 |
| CVE-2026-105871 | WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerabilityBdThemes · Element Pack Elementor Addons | Medium6.5 |
| CVE-2026-93527 | WordPress Live Copy Paste for Elementor plugin <= 1.5.10 - SQL Injection vulnerabilitybdthemes · Live Copy Paste for Elementor | High8.5 |
| CVE-2026-92991 | Biggopti Library (Various Versions) - Cross-Site Scripting via display_id from Sigmative APIbdthemes · Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator | Medium5.4 |
| CVE-2026-66574 | WordPress Element Pack Elementor Addons plugin <= 8.8.3 - Cross Site Scripting (XSS) vulnerabilitybdthemes · Element Pack Elementor Addons | Medium6.5 |
| CVE-2026-78657 | SigmaForms Pro <= 1.4.11 - Unauthenticated Arbitrary File Deletion via Path Traversal in File Upload Fieldbdthemes · SigmaForms Pro – AI Generated Forms | Critical9.8 |
| CVE-2026-14494 | Sigma Forms Pro <= 1.4.5 - Unauthenticated Unauthenticated Arbitrary File Upload Leading to Remote Code Execution via Pre-built Template File Upload Fieldbdthemes · SigmaForms Pro – AI Generated Forms | Critical9.8 |
| CVE-2026-65502 | WordPress Element Pack Elementor Addons plugin <= 8.7.13 - Captcha Bypass vulnerabilitybdthemes · Element Pack Elementor Addons | Medium5.3 |
| CVE-2026-25403 | WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Broken Access Control vulnerabilitybdthemes · Ultimate Store Kit Elementor Addons | Medium6.5 |
| CVE-2026-0673 | Element Pack Addons for Elementor <= 8.3.15 - Unauthenticated SMTP Header Injectionbdthemes · Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons | Medium5.3 |
| CVE-2026-65505 | WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Sensitive Data Exposure vulnerabilitybdthemes · Ultimate Store Kit Elementor Addons | Medium5.3 |
| CVE-2026-65503 | WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerabilitybdthemes · Ultimate Store Kit Elementor Addons | Medium6.5 |
| CVE-2026-57413 | WordPress Instant Image Generator plugin <= 2.1.4 - Server Side Request Forgery (SSRF) vulnerabilitybdthemes · Instant Image Generator | Medium6.4 |
| CVE-2025-63079 | WordPress Live Copy Paste for Elementor plugin <= 1.5.3 - Broken Access Control vulnerabilitybdthemes · Live Copy Paste for Elementor | Medium4.3 |
| CVE-2026-52705 | WordPress SigmaForms Pro – AI Generated Forms plugin <= 1.4.5 - Arbitrary File Upload vulnerabilityBDthemes · SigmaForms Pro – AI Generated Forms | Critical9.0 |
| CVE-2026-40721 | WordPress Element Pack Pro plugin <= 9.0.6 - Local File Inclusion vulnerabilityBdThemes · Element Pack Pro | High7.5 |
| CVE-2026-40745 | WordPress Element Pack Elementor Addons plugin <= 8.4.2 - SQL Injection vulnerabilitybdthemes · Element Pack Elementor Addons | High7.6 |
| CVE-2026-4655 | Element Pack Addons for Elementor <= 8.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG Image Widgetbdthemes · Element Pack – Widgets, Templates & Addons for Elementor | Medium6.4 |
| CVE-2026-4341 | Prime Slider <= 4.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'follow_us_text' Parameterbdthemes · Prime Slider – Addons for Elementor | Medium6.4 |
| CVE-2026-24362 | WordPress Ultimate Post Kit plugin <= 4.0.21 - Broken Access Control vulnerabilitybdthemes · Ultimate Post Kit | Medium6.4 |
| CVE-2026-1793 | Element Pack Addons for Elementor <= 8.3.17 - Authenticated (Contributor+) Arbitrary File Readbdthemes · Element Pack – Widgets, Templates & Addons for Elementor | Medium6.5 |
| CVE-2025-31413 | WordPress Element Pack Elementor Addons plugin <= 8.3.13 - Cross Site Request Forgery (CSRF) vulnerabilitybdthemes · Element Pack Elementor Addons | Medium4.3 |
| CVE-2026-0808 | Spin Wheel <= 2.1.0 - Unauthenticated Client-Side Prize Manipulation via 'prize_index' Parameterbdthemes · Spin Wheel – Interactive spinning wheel that offers coupons | Medium5.3 |
| CVE-2025-69336 | WordPress Ultimate Store Kit Elementor Addons plugin <= 2.9.4 - Broken Access Control vulnerabilitybdthemes · Ultimate Store Kit Elementor Addons | Medium4.3 |
| CVE-2025-68500 | WordPress Prime Slider – Addons For Elementor plugin <= 4.0.10 - Server Side Request Forgery (SSRF) vulnerabilitybdthemes · Prime Slider – Addons For Elementor | Medium4.9 |
| CVE-2025-14277 | Prime Slider – Addons for Elementor <= 4.0.9 - Authenticated (Subscriber+) Server-Side Request Forgerybdthemes · Prime Slider – Addons for Elementor | Medium4.3 |
| CVE-2025-13196 | Element Pack Addons for Elementor <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map widgetbdthemes · Element Pack – Widgets, Templates & Addons for Elementor | Medium5.4 |
| CVE-2025-12134 | ZoloBlocks <= 2.3.11 - Missing Authorization to Unauthenticated Popup Enable/Disablebdthemes · ZoloBlocks – Gutenberg Block Editor Plugin with Advanced Blocks, Dynamic Content, Templates & Patterns | Medium5.3 |
| CVE-2025-49903 | WordPress ZoloBlocks plugin <= 2.3.11 - Broken Access Control vulnerabilitybdthemes · ZoloBlocks | Medium5.3 |
| CVE-2025-11536 | Element Pack Addons for Elementor <= 8.2.5 - Authenticated (Subscriber+) Blind Server-Side Request Forgerybdthemes · Element Pack – Widgets, Templates & Addons for Elementor | Medium5.0 |
| CVE-2025-9075 | ZoloBlocks – Gutenberg Block Editor Plugin with Advanced Blocks, Dynamic Content, Templates & Patterns <= 2.3.10 - Authenticated (Contributor+) Stored Cross-Site Scriptingbdthemes · ZoloBlocks – Gutenberg Block Editor Plugin with Advanced Blocks, Dynamic Content, Templates & Patterns | Medium6.4 |
| CVE-2025-60161 | WordPress ZoloBlocks Plugin <= 2.3.11 - Server Side Request Forgery (SSRF) Vulnerabilitybdthemes · ZoloBlocks | Medium5.4 |
| CVE-2025-58017 | WordPress Ultimate Store Kit Elementor Addons plugin <= 2.8.6 - Cross Site Scripting (XSS) vulnerabilitybdthemes · Ultimate Store Kit Elementor Addons | Medium6.5 |
| CVE-2025-58230 | WordPress ZoloBlocks plugin <= 2.3.12 - Cross Site Scripting (XSS) vulnerabilitybdthemes · ZoloBlocks | Medium6.5 |
| CVE-2025-53210 | WordPress ZoloBlocks Plugin <= 2.3.2 - Local File Inclusion Vulnerabilitybdthemes · ZoloBlocks | High7.5 |
| CVE-2025-8100 | Element Pack Elementor Addons and Templates <= 8.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map Widget Marker Contentbdthemes · Element Pack – Widgets, Templates & Addons for Elementor | Medium5.4 |
| CVE-2025-7644 | Pixel Gallery Addons for Elementor – Easy Grid, Creative Gallery, Drag and Drop Grid, Custom Grid Layout, Portfolio Gallery <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scriptingbdthemes · Pixel Gallery Addons for Elementor – Easy Grid, Creative Gallery, Drag and Drop Grid, Custom Grid Layout, Portfolio Gallery | Medium6.4 |
| CVE-2025-5944 | Element Pack Addons for Elementor <= 8.0.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via data-caption Attributebdthemes · Element Pack Elementor Addons and Templates | Medium6.4 |
| CVE-2025-46258 | WordPress Element Pack Pro Plugin < 8.0.0 - Broken Access Control vulnerabilityBdThemes · Element Pack Pro | Medium5.4 |
| CVE-2025-46257 | WordPress Element Pack Pro Plugin < 8.0.0 - Cross Site Request Forgery (CSRF) vulnerabilityBdThemes · Element Pack Pro | Medium4.3 |
| CVE-2025-5292 | Element Pack Addons for Elementor – Best Elementor addons with Ready Templates, Blocks, Widgets and WooCommerce Builder <= 5.11.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scriptingbdthemes · Element Pack – Widgets, Templates & Addons for Elementor | Medium6.4 |
| CVE-2025-2168 | Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.4.1 - Cross-Site Request Forgery to Limited User Meta Updatebdthemes · Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor | Medium4.3 |
| CVE-2025-1458 | Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) <= 5.10.29 - Authenticated (Contributor+) Stored Cross-Site Scriptingbdthemes · Element Pack – Widgets, Templates & Addons for Elementor | Medium6.4 |
| CVE-2025-1457 | Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) <= 5.10.28 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scriptingbdthemes · Element Pack – Widgets, Templates & Addons for Elementor | Medium6.4 |
| CVE-2025-39588 | WordPress Ultimate Store Kit Elementor Addons plugin <= 2.4.0 - Deserialization of untrusted data Vulnerabilitybdthemes · Ultimate Store Kit Elementor Addons | Critical9.8 |