Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read just now.

At a glance

Published CVEs; rejected ones are not counted.

  • 400,995All CVEsplus 19,118 rejected
  • 427Last 24 hours2,853 in the last 7 days
  • 16,815Last 30 days1,543 of them critical
  • 1,768Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202602200412
20250120038
20240050055

Latest CVEs

12 CVEs, newest first

CVEs, newest first
Title
CVE-2026-116522
Relevanssi <= 4.28.5 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Late Entity Decodecomesio · Relevanssi – A Better Search
High7.2
CVE-2026-97641
Relevanssi <= 4.28.3 - Unauthenticated Stored Cross-Site Scripting via Comment Contentcomesio · Relevanssi – A Better Search
High7.2
CVE-2026-19985
Relevanssi <= 4.28.1 - Reflected Cross-Site Scriptingcomesio · Relevanssi – A Better Search
Medium6.1
CVE-2026-15941
Relevanssi <= 4.27.1 and Relevanssi Premium <= 2.30.2 - Authenticated (Contributor+) SQL InjectionRelevanssi · Relevanssi Premium – A Better Search
Medium6.5
CVE-2025-5016
Relevanssi <= 4.24.5 (Free) and <= 2.27.6 (Premium) - Unauthenticated Stored Cross-Site Scripting via Excerpt HighlightsRelevanssi · Relevanssi Premium
Medium4.7
CVE-2025-4396
Relevanssi <= 4.24.4 (Free) and <= 2.27.5 (Premium) - Unauthenticated SQL InjectionRelevanssi · Relevanssi Premium
High7.5
CVE-2025-4054
Relevanssi <= 4.24.3 (Free) and <= 2.27.4 (Premium) - Unauthenticated Stored Cross-Site Scripting via Search HighlightsRelevanssi · Relevanssi Premium
Medium6.1
CVE-2024-7573
Relevanssi Live Ajax Search <= 2.4 - Unauthenticated WP_Query Argument Injectioncomesio · Relevanssi Live Ajax Search
Medium5.3
CVE-2024-7630
Relevanssi <= 4.22.2 (Free) and <= 2.25.1 (Premium) - Unauthenticated Information ExposureRelevanssi · Relevanssi Premium
Medium5.3
CVE-2024-3213
Relevanssi – A Better Search <= 4.22.1 - Missing Authorization to Unauthenticated Count Option UpdateRelevanssi · Relevanssi Premium
Medium5.3
CVE-2024-3214
Relevanssi – A Better Search <= 4.22.1 - Unauthenticated Second Order CSV InjectionRelevanssi · Relevanssi Premium
Medium5.8
CVE-2024-1380
Relevanssi – A Better Search <= 4.22.0 (Free) and <= 2.25.0 (Premium) - Missing Authorization to Unauthenticated Query Log ExportRelevanssi · Relevanssi Premium
Medium5.3