Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,245All CVEsplus 18,875 rejected
- 801Last 24 hours3,087 in the last 7 days
- 17,421Last 30 days1,573 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 3 | 8 | 0 | 0 | 11 | 52 |
| 2025 | 1 | 0 | 12 | 0 | 0 | 13 | 41 |
| 2024 | 0 | 3 | 25 | 0 | 0 | 28 | 28 |
| Title | ||
|---|---|---|
| CVE-2026-111318 | HT Mega Addons for Elementor <= 3.2.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Tabs Widget href DOM Sinkdevitemsllc · HT Mega Addons for Elementor – Elementor Widgets & Template Builder | Medium5.4 |
| CVE-2026-11895 | HT Mega Addons for Elementor <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data Table 'display_options' Settingdevitemsllc · HT Mega Addons for Elementor – Elementor Widgets & Template Builder | Medium6.4 |
| CVE-2026-92554 | ShopLentor <= 3.5.1 - Reflected Cross-Site Scripting via Query-String Parameter Namedevitemsllc · ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | Medium6.1 |
| CVE-2026-19806 | Support Genix <= 1.4.52 - Authenticated (Subscriber+) Authentication Bypass to Administrator Account Takeover via 'p' Parameter Forged Guest Tokendevitemsllc · Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System | High8.8 |
| CVE-2026-6020 | ShopLentor <= 3.3.7 - Authenticated (Administrator+) Arbitrary Function Execution via 'callback' Parameter via REST APIdevitemsllc · ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | High7.2 |
| CVE-2026-16811 | ShopLentor <= 3.4.5 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameterdevitemsllc · ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | Medium4.9 |
| CVE-2026-16797 | ShopLentor <= 3.4.5 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via 'optionSection' Parameterdevitemsllc · ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | Medium4.3 |
| CVE-2026-12936 | Recurio <= 1.1.3 - Authenticated (Shop Manager+) SQL Injection via 'data' Parameterdevitemsllc · Recurio – Ultimate Subscription for WooCommerce | Medium4.9 |
| CVE-2026-6287 | ShopLentor - WooCommerce Builder for Elementor & Gutenberg <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Product Grid 'blockUniqId' Block Attributedevitemsllc · ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | Medium5.4 |
| CVE-2026-4059 | ShopLentor <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button_text' Shortcode Attributedevitemsllc · ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | Medium6.4 |
| CVE-2026-1714 | ShopLentor <= 3.3.2 - Unauthenticated Email Relay Abuse via 'woolentor_suggest_price_action' AJAX Actiondevitemsllc · ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | High8.6 |
| CVE-2025-13141 | HT Mega – Absolute Addons For Elementor <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tag Attribute Injectiondevitemsllc · HT Mega Addons for Elementor – Elementor Widgets & Template Builder | Medium6.4 |
| CVE-2025-12493 | ShopLentor <= 3.2.5 - Unauthenticated Local PHP File Inclusion via 'load_template'devitemsllc · ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | Critical9.8 |
| CVE-2025-11823 | ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodedevitemsllc · ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | Medium6.4 |
| CVE-2025-8068 | HT Mega – Absolute Addons For Elementor <= 2.9.1 - Improper Authorization to Authenticated (Contributor+) Limited Administrator Actionsdevitemsllc · HT Mega Addons for Elementor – Elementor Widgets & Template Builder | Medium4.3 |
| CVE-2025-8401 | HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Sensitive Information Exposuredevitemsllc · HT Mega Addons for Elementor – Elementor Widgets & Template Builder | Medium4.3 |
| CVE-2025-8151 | HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Path Traversal to Limited Arbitrary CSS File Actionsdevitemsllc · HT Mega Addons for Elementor – Elementor Widgets & Template Builder | Medium4.3 |
| CVE-2025-3775 | ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.2 - Unauthenticated Server-Side Request Forgery via URL Parameterdevitemsllc · ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | Medium6.5 |
| CVE-2025-1802 | HT Mega – Absolute Addons For Elementor <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgetsdevitemsllc · HT Mega Addons for Elementor – Elementor Widgets & Template Builder | Medium6.4 |
| CVE-2025-1527 | ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Flash Sale Countdown Moduledevitemsllc · ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | Medium6.4 |
| CVE-2025-1261 | HT Mega – Absolute Addons For Elementor <= 2.8.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Countdown Widgetdevitemsllc · HT Mega Addons for Elementor – Elementor Widgets & Template Builder | Medium6.4 |
| CVE-2024-12599 | HT Mega – Absolute Addons For Elementor <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widgetdevitemsllc · HT Mega Addons for Elementor – Elementor Widgets & Template Builder | Medium6.4 |
| CVE-2024-12597 | HT Mega <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via block_css and inner_cssdevitemsllc · HT Mega Addons for Elementor – Elementor Widgets & Template Builder | Medium6.4 |
| CVE-2024-13216 | HT Event – WordPress Event Manager Plugin for Elementor <= 1.4.7 - Authenticated (Contributor+) Sensitive Information Exposure via HT Event: Sponsordevitemsllc · HT Event – WordPress Event Manager Plugin for Elementor | Medium4.3 |
| CVE-2024-9538 | ShopLentor <= 2.9.8 - Authenticated (Contributor+) Sensitive Information Exposure via WL: FAQ Widget Elementor Templatedevitemsllc · ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | Medium4.3 |
| CVE-2024-8910 | HT Mega – Absolute Addons For Elementor <= 2.6.5 - Authenticated (Contributor+) Sensitive Information Exposure via template_iddevitemsllc · HT Mega Addons for Elementor – Elementor Widgets & Template Builder | Medium4.3 |
| CVE-2024-8668 | ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.9.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scriptingdevitemsllc · ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | Medium6.4 |
| CVE-2024-5215 | HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgetsdevitemsllc · HT Mega Addons for Elementor – Elementor Widgets & Template Builder | Medium6.4 |
| CVE-2024-5173 | HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Player Widget Settingsdevitemsllc · HT Mega Addons for Elementor – Elementor Widgets & Template Builder | Medium6.4 |
| CVE-2024-5530 | ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Product Horizontal Filter Widgetdevitemsllc · ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | Medium6.4 |
| CVE-2024-4876 | HT Mega – Absolute Addons For Elementor <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scriptingdevitemsllc · HT Mega Addons for Elementor – Elementor Widgets & Template Builder | Medium6.4 |
| CVE-2024-3345 | ShopLentor <= 2.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via woolentorsearch Shortcodedevitemsllc · ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | Medium6.4 |
| CVE-2024-4566 | ShopLentor <= 2.8.8 - Missing Authorization to WordPress Option Modificationdevitemsllc · ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | High7.1 |
| CVE-2024-4875 | HT Mega – Absolute Addons For Elementor <= 2.5.2 - Missing Authorization to Options Updatedevitemsllc · HT Mega Addons for Elementor – Elementor Widgets & Template Builder | Medium4.3 |
| CVE-2024-3990 | HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip & Popover Widgetdevitemsllc · HT Mega Addons for Elementor – Elementor Widgets & Template Builder | Medium6.4 |
| CVE-2023-6327 | ShopLentor (formerly WooLentor) <= 2.8.7 - Missing Authorization via purchased_new_productsdevitemsllc · ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | Medium5.3 |
| CVE-2024-3989 | HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Justifydevitemsllc · HT Mega Addons for Elementor – Elementor Widgets & Template Builder | Medium6.4 |
| CVE-2024-3307 | HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widgetdevitemsllc · HT Mega Addons for Elementor – Elementor Widgets & Template Builder | Medium6.4 |
| CVE-2024-2084 | HT Mega – Absolute Addons For Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lightbox Widgetdevitemsllc · HT Mega Addons for Elementor – Elementor Widgets & Template Builder | Medium6.4 |
| CVE-2023-7067 | ShopLentor <= 2.8.1 - Improper Authorization via woolentor_template_storedevitemsllc · ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | Medium4.3 |
| CVE-2024-3991 | ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.7 - Authenticated (contributor+) Stored Cross-Site Scripting via _iddevitemsllc · ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | Medium6.4 |
| CVE-2023-6214 | HT Mega – Absolute Addons For Elementor <= 2.4.6 - Sensitive Information Exposure via purchased_productsdevitemsllc · HT Mega Addons for Elementor – Elementor Widgets & Template Builder | High7.5 |
| CVE-2024-2790 | HT Mega – Absolute Addons For Elementor <= 2.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion/FAQdevitemsllc · HT Mega Addons for Elementor – Elementor Widgets & Template Builder | Medium6.4 |
| CVE-2024-3308 | HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Grid Widgetdevitemsllc · HT Mega Addons for Elementor – Elementor Widgets & Template Builder | Medium6.4 |
| CVE-2024-2085 | HT Mega – Absolute Addons For Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'size'devitemsllc · HT Mega Addons for Elementor – Elementor Widgets & Template Builder | Medium6.4 |
| CVE-2024-1057 | ShopLentor – WooCommerce Builder for Elementor & Gutenberg +10 Modules – All in One Solution (formerly WooLentor) <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scriptingdevitemsllc · ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | Medium6.4 |
| CVE-2024-2946 | ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.4 - Authenticated (Contributor+) Stored Cross-site Scripting via QR Code Widgetdevitemsllc · ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | Medium6.4 |
| CVE-2024-1960 | ShopLentor <= 2.8.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Banner Linkdevitemsllc · ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | Medium6.4 |
| CVE-2024-1974 | HT Mega – Absolute Addons For Elementor <= 2.4.5 - Authenticated (Contributor+) Directory Traversaldevitemsllc · HT Mega Addons for Elementor – Elementor Widgets & Template Builder | High8.8 |
| CVE-2024-2868 | ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Universal Product Layoutdevitemsllc · ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | Medium6.4 |