Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,074All CVEsplus 19,119 rejected
- 507Last 24 hours2,864 in the last 7 days
- 16,887Last 30 days1,546 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 1 | 3 | 0 | 0 | 6 | 24 |
| 2025 | 0 | 1 | 5 | 0 | 0 | 6 | 18 |
| 2024 | 0 | 0 | 12 | 0 | 0 | 12 | 12 |
| Title | ||
|---|---|---|
| CVE-2026-107645 | Blocksy Companion <= 2.1.58 - Unauthenticated Privilege Escalation to 'role' Parametercreativethemeshq · Blocksy Companion | Critical9.1 |
| CVE-2026-18488 | Blocksy Companion <= 2.1.51 - Authenticated (Author+) Stored Cross-Site Scripting via 'tagName' Block Attribute (blocksy/dynamic-data)creativethemeshq · Blocksy Companion | Medium6.4 |
| CVE-2026-15158 | Blocksy Companion <= 2.1.46 - Unauthenticated Arbitrary File Upload via 'blc-review-images[]' Parametercreativethemeshq · Blocksy Companion | Critical9.8 |
| CVE-2026-12430 | Blocksy Companion <= 2.1.45 - Authenticated (Editor+) Stored Cross-Site Scripting via 'product_description' Parametercreativethemeshq · Blocksy Companion | Medium4.4 |
| CVE-2026-8365 | Blocksy <= 2.1.41 - Authenticated (Contributor+) PHP Object Injection via Deserialization of Untrusted Data via 'blocksy_meta' REST API Fieldcreativethemeshq · Blocksy | High8.8 |
| CVE-2026-2583 | Blocksy <= 2.1.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via `blocksy_meta` Fieldscreativethemeshq · Blocksy | Medium6.4 |
| CVE-2025-12846 | Blocksy Companion <= 2.1.19 - Authenticated (Author+) Arbitrary File Upload via SVG Upload Bypasscreativethemeshq · Blocksy Companion | High8.8 |
| CVE-2025-12475 | Blocksy Companion <= 2.1.14 - Authenticated (Contributor+) Stored Cross-Site Scriptingcreativethemeshq · Blocksy Companion | Medium6.4 |
| CVE-2025-9565 | Blocksy Companion <= 2.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via blocksy_newsletter_subscribe Shortcodecreativethemeshq · Blocksy Companion | Medium6.4 |
| CVE-2025-55713 | WordPress Blocksy Theme <= 2.1.6 - Cross Site Scripting (XSS) Vulnerabilitycreativethemeshq · Blocksy | Medium5.9 |
| CVE-2025-47465 | WordPress Blocksy theme <= 2.0.97 - Broken Access Control Vulnerabilitycreativethemeshq · Blocksy | Medium4.9 |
| CVE-2024-37469 | WordPress Blocksy theme <= 1.9.5 - Cross Site Request Forgery (CSRF) vulnerabilitycreativethemeshq · Blocksy | Medium5.4 |
| CVE-2024-11420 | Blocksy <= 2.0.77 - Authenticated (Contributor+) Stored Cross-Site Scriptingcreativethemeshq · Blocksy | Medium6.4 |
| CVE-2022-4974 | Freemius SDK <= 2.4.2 - Missing Authorization Checksdashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress | Medium6.3 |
| CVE-2024-5439 | Blocksy <= 2.0.50 - Authenticated (Contributor+) Stored Cross-Site Scriptingcreativethemeshq · Blocksy | Medium6.4 |
| CVE-2024-4943 | Blocksy <= 2.0.46 - Authenticated (Contributor+) Stored Cross-Site Scriptingcreativethemeshq · Blocksy | Medium6.4 |
| CVE-2024-4487 | Blocksy Companion <= 2.0.45 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG Uploadscreativethemeshq · Blocksy Companion | Medium6.4 |
| CVE-2024-4158 | Blocksy <= 2.0.42 - Authenticated (Contributor+) Stored Cross-Site Scriptingcreativethemeshq · Blocksy | Medium6.4 |
| CVE-2024-3747 | Blocksy <= 2.0.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via About Me blockcreativethemeshq · Blocksy | Medium6.4 |
| CVE-2024-32961 | WordPress Blocksy theme <= 2.0.33 - Cross Site Scripting (XSS) vulnerabilitycreativethemeshq · Blocksy | Medium6.5 |
| CVE-2024-31382 | WordPress Blocksy theme <= 2.0.22 - Cross Site Request Forgery (CSRF) vulnerabilitycreativethemeshq · Blocksy | Medium4.3 |
| CVE-2024-2392 | Blocksy Companion <= 2.0.31 - Authenticated (Contributor+) Stored Cross-Site Scriptingcreativethemeshq · Blocksy Companion | Medium6.4 |
| CVE-2024-1767 | Blocksy <= 2.0.26 - Authenticated (Contributor+) Stored Cross-Site Scriptingcreativethemeshq · Blocksy | Medium6.4 |
| CVE-2024-24871 | WordPress Blocksy theme <= 2.0.19 - Cross Site Scripting (XSS) vulnerabilitycreativethemeshq · Blocksy | Medium6.5 |