Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,236All CVEsplus 19,120 rejected
- 468Last 24 hours2,788 in the last 7 days
- 16,901Last 30 days1,543 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 5 | 4 | 0 | 0 | 9 | 29 |
| 2025 | 1 | 0 | 6 | 1 | 0 | 8 | 20 |
| 2024 | 1 | 6 | 5 | 0 | 0 | 12 | 12 |
| Title | ||
|---|---|---|
| CVE-2026-110185 | Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More <= 1.31.0 - Unauthenticated Local File Inclusion via 'webhook' and 'body' Parametersbitpressadmin · Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More | Medium5.9 |
| CVE-2026-104749 | Bit integrations <= 2.10.6 - Unauthenticated Privilege Escalation via Identity-Confused Log Re-execution to Account Takeover via Log Re-execution of Anonymous-Captured Field Databitpressadmin · Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation | High7.5 |
| CVE-2026-102007 | Bit integrations <= 2.10.6 - Unauthenticated Stored Cross-Site Scripting via 'notification_content' Field via Public Bit Assist Webhook Callbackbitpressadmin · Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation | High7.2 |
| CVE-2026-16810 | Bit Form <= 3.2.0 - Authenticated (Administrator+) SQL Injection via 'filterText' Parameterbitpressadmin · Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder | Medium6.5 |
| CVE-2026-15991 | File Manager 6.0 - 6.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read and Deletion via 'cmd' Query Parameterbitpressadmin · File Manager | High8.8 |
| CVE-2026-15006 | Bit integrations <= 2.9.0 - Unauthenticated Arbitrary File Read via Optional CF7 File Fieldbitpressadmin · Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation | High7.5 |
| CVE-2026-14372 | Bit Form <= 3.1.1 - Authenticated (Subscriber+) Arbitrary File Deletion via '_old' Parameterbitpressadmin · Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder | High7.1 |
| CVE-2026-11989 | Bit integrations <= 2.8.7 - Unauthenticated Server-Side Request Forgery via Form Field Upload Mappingbitpressadmin · Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation | Medium6.5 |
| CVE-2025-14901 | Bit Form – Contact Form Plugin <= 2.21.6 - Missing Authorization to Unauthenticated Workflow Replaybitpressadmin · Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder | Medium6.5 |
| CVE-2025-6679 | Contact Form by Bit Form - Bit Form <= 2.20.3 - Unauthenticated Arbitrary File Uploadbitpressadmin · Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder | Critical9.8 |
| CVE-2024-13451 | Contact Form by Bit Form <= 2.17.5 - Unauthenticated Sensitive Information Exposurebitpressadmin · Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder | Medium5.3 |
| CVE-2025-1725 | Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Uploadsbitpressadmin · File Manager | Medium6.4 |
| CVE-2025-2580 | Contact Form by Bit Form <= 2.18.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadbitpressadmin · Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder | Medium4.9 |
| CVE-2025-0822 | Bit Assist <= 1.5.2 - Path Traversal to Authenticated (Subscriber+) Arbitrary File Read via fileID Parameterbitpressadmin · Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist | Medium6.5 |
| CVE-2025-0821 | Bit Assist <= 1.5.2 - Authenticated (Subscriber+) SQL Injection via id Parameterbitpressadmin · Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist | Medium6.5 |
| CVE-2024-13791 | Bit Assist <= 1.5.2 - Path Traversal to Authenticated (Administrator+) Arbitrary File Read via downloadResponseFile Functionbitpressadmin · Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist | Medium4.9 |
| CVE-2024-13450 | Contact Form by Bit Form <= 2.17.4 - Authenticated (Administrator+) Server-Side Request Forgerybitpressadmin · Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder | Low3.8 |
| CVE-2024-12190 | Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.17.3 - Missing Authorization to Authenticated (Subscriber+) Form Submission Disclosurebitpressadmin · Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder | Medium4.3 |
| CVE-2024-9507 | Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.15.2 - Authenticated (Administrator+) Improper Input Validation via iconUpload Function to Arbitrary File Readbitpressadmin · Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder | Medium4.9 |
| CVE-2024-8743 | Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.7 - Authenticated (Subscriber+) Limited JavaScript File Uploadbitpressadmin · File Manager | Medium6.8 |
| CVE-2024-7770 | Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.5 - Authenticated (Subscriber+) Arbitrary File Uploadbitpressadmin · File Manager | High8.8 |
| CVE-2024-7627 | Bit File Manager 6.0 - 6.5.5 - Unauthenticated Remote Code Execution via Race Conditionbitpressadmin · Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress | High8.1 |
| CVE-2024-7782 | Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.4 - Authenticater (Administrator+) Arbitrary File Deletionbitpressadmin · Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder | High8.7 |
| CVE-2024-7780 | Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) SQL Injectionbitpressadmin · Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder | High7.2 |
| CVE-2024-7777 | Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary File Read And Deletionbitpressadmin · Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder | Critical9.0 |
| CVE-2024-7775 | Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary JavaScript File Uploadsbitpressadmin · Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder | Medium5.5 |
| CVE-2024-7702 | Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) SQL Injection via getLogHistory Functionbitpressadmin · Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder | High7.2 |
| CVE-2024-6123 | Bit Form <= 2.13.3 - Authenticated (Administrator+) Arbitrary File Uploadbitpressadmin · Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder | High7.2 |
| CVE-2024-1640 | Contact Form Builder Plugin: Multi Step Contact Form, Payment Form, Custom Contact Form Plugin by Bit Form <= 2.10.1 - Unauthenticated Insecure Direct Object Reference to Form Submission Alterationbitpressadmin · Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder | Medium5.3 |