Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,806All CVEsplus 19,141 rejected
- 506Last 24 hours3,085 in the last 7 days
- 17,017Last 30 days1,594 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 2 | 5 | 0 | 0 | 7 | 11 |
| 2025 | 0 | 0 | 2 | 0 | 0 | 2 | 4 |
| 2024 | 0 | 0 | 2 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-116520 | PPWP <= 1.9.26 - Unauthenticated Stored Cross-Site Scripting via '[ppwp]' Shortcode 'desc_below_form' Attribute via Placeholder Marker Collisionbuildwps · PPWP – Password Protect Pages | High7.2 |
| CVE-2025-9878 | Password Protect WordPress Lite <= 1.9.21 - Authenticated (Contributor+) Stored Cross-Site Scriptingbuildwps · PPWP – Password Protect Pages | Medium6.4 |
| CVE-2026-0551 | PPWP – Password Protect Pages <= 1.9.18 - Authenticated (Contributor+) PHP Object Injection via post_protection_rolesbuildwps · PPWP – Password Protect Pages | High8.8 |
| CVE-2025-11729 | PPWP: Password Protect Pages, Posts & Full or Partial Content <= 1.9.15 - Improper Authorization To Authenticated (Contributor+) Master Password Exposurebuildwps · PPWP – Password Protect Pages | Medium4.3 |
| CVE-2025-10005 | Password Protect WordPress Lite <= 1.9.20 - Insecure Direct Object Reference to Authenticated (Contributor+) Password Protected Post Password Updatebuildwps · PPWP – Password Protect Pages | Medium4.3 |
| CVE-2026-3639 | PPWP – Password Protect Pages <= 1.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributesbuildwps · PPWP – Password Protect Pages | Medium6.4 |
| CVE-2026-3835 | Prevent Direct Access – Protect WordPress Files <= 2.8.8.8 - Unauthenticated Protected File Accessbuildwps · Prevent Direct Access – Protect WordPress Files | Medium5.3 |
| CVE-2025-3923 | Prevent Direct Access – Protect WordPress Files <= 2.8.8 - Unauthenticated Sensitive Information Exposurebuildwps · Prevent Direct Access – Protect WordPress Files | Medium5.3 |
| CVE-2025-3861 | Prevent Direct Access 2.8.6 - 2.8.8.2 - Incorrect Authorization to Authenticated (Contributor+) Multiple Media Actionsbuildwps · Prevent Direct Access – Protect WordPress Files | Medium5.4 |
| CVE-2024-11280 | PPWP – Password Protect Pages <= 1.9.5 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposurebuildwps · PPWP – Password Protect Pages | Medium5.3 |
| CVE-2024-0620 | PPWP – Password Protect Pages <= 1.8.9 - Protection Mechanism Bypassbuildwps · PPWP – Password Protect Pages | Medium5.3 |