Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,293All CVEsplus 19,140 rejected
- 450Last 24 hours2,724 in the last 7 days
- 16,915Last 30 days1,557 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 25 | 0 | 0 | 0 | 26 | 33 |
| 2025 | 0 | 3 | 3 | 0 | 0 | 6 | 7 |
| 2024 | 1 | 0 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-66649 | WordPress Directory Pro plugin <= 2.5.8 - SQL Injection vulnerabilitye-plugins · Directory Pro | Critical9.3 |
| CVE-2026-28127 | WordPress Lawyer Directory plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilitye-plugins · Lawyer Directory | High7.1 |
| CVE-2026-27396 | WordPress Directory Pro plugin <= 2.5.6 - Broken Access Control vulnerabilitye-plugins · Directory Pro | High7.3 |
| CVE-2025-69293 | WordPress Final User plugin <= 1.2.5 - Privilege Escalation vulnerabilitye-plugins · Final User | High8.8 |
| CVE-2025-69292 | WordPress WP Membership plugin <= 1.6.4 - Privilege Escalation vulnerabilitye-plugins · WP Membership | High8.8 |
| CVE-2025-69193 | WordPress WP Membership plugin <= 1.6.4 - Broken Access Control vulnerabilitye-plugins · WP Membership | High7.3 |
| CVE-2025-69192 | WordPress Real Estate Pro plugin <= 2.1.5 - Broken Access Control vulnerabilitye-plugins · Real Estate Pro | High7.3 |
| CVE-2025-69191 | WordPress ListingHub plugin <= 1.2.7 - Broken Access Control vulnerabilitye-plugins · ListingHub | High7.3 |
| CVE-2025-69190 | WordPress Listihub theme <= 1.0.6 - Broken Access Control vulnerabilitye-plugins · Listihub | High7.3 |
| CVE-2025-69188 | WordPress fitness-trainer plugin <= 1.7.1 - Broken Access Control vulnerabilitye-plugins · fitness-trainer | High7.3 |
| CVE-2025-69187 | WordPress Final User plugin <= 1.2.5 - Broken Access Control vulnerabilitye-plugins · Final User | High7.3 |
| CVE-2025-69186 | WordPress Hospital Doctor Directory plugin <= 1.3.9 - Broken Access Control vulnerabilitye-plugins · Hospital Doctor Directory | High7.3 |
| CVE-2025-69185 | WordPress Hotel Listing plugin <= 1.4.2 - Broken Access Control vulnerabilitye-plugins · Hotel Listing | High7.3 |
| CVE-2025-69184 | WordPress Institutions Directory plugin <= 1.3.4 - Broken Access Control vulnerabilitye-plugins · Institutions Directory | High7.3 |
| CVE-2025-69183 | WordPress Hospital Doctor Directory plugin <= 1.3.9 - Privilege Escalation vulnerabilitye-plugins · Hospital Doctor Directory | High8.8 |
| CVE-2025-69182 | WordPress Institutions Directory plugin <= 1.3.4 - Privilege Escalation vulnerabilitye-plugins · Institutions Directory | High8.8 |
| CVE-2025-69181 | WordPress Lawyer Directory plugin <= 1.3.4 - Broken Access Control vulnerabilitye-plugins · Lawyer Directory | High7.3 |
| CVE-2025-69056 | WordPress Hotel Listing plugin <= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerabilitye-plugins · Hotel Listing | High7.1 |
| CVE-2025-68059 | WordPress Hotel Listing plugin <= 1.4.2 - Broken Access Control vulnerabilitye-plugins · Hotel Listing | High7.6 |
| CVE-2025-68058 | WordPress Institutions Directory plugin <= 1.3..4 - Broken Access Control vulnerabilitye-plugins · Institutions Directory | High7.6 |
| CVE-2025-68057 | WordPress Hospital Doctor Directory plugin <= 1.3.9 - Broken Access Control vulnerabilitye-plugins · Hospital Doctor Directory | High7.6 |
| CVE-2025-67967 | WordPress Lawyer Directory plugin <= 1.3.3 - Broken Access Control vulnerabilitye-plugins · Lawyer Directory | High7.6 |
| CVE-2025-67966 | WordPress Lawyer Directory plugin <= 1.3.3 - Privilege Escalation vulnerabilitye-plugins · Lawyer Directory | High8.8 |
| CVE-2025-13504 | WordPress Real Estate Pro plugin <= 2.1.4 - Reflected Cross Site Scripting (XSS) vulnerabilitye-plugins · Real Estate Pro | High7.1 |
| CVE-2025-12551 | WordPress ListingHub plugin 1.2.6 - Cross Site Scripting (XSS) vulnerabilitye-plugins · ListingHub | High7.1 |
| CVE-2025-69085 | WordPress JobBank plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerabilitye-plugins · JobBank | High7.1 |
| CVE-2025-58710 | WordPress Hotel Listing plugin <= 1.4.0 - Privilege Escalation vulnerabilitye-plugins · Hotel Listing | High8.8 |
| CVE-2025-64243 | WordPress Directory Pro plugin <= 2.5.6 - Broken Access Control vulnerabilitye-plugins · Directory Pro | Medium4.3 |
| CVE-2025-58638 | WordPress Institutions Directory Plugin <= 1.3.3 - Cross Site Scripting (XSS) Vulnerabilitye-plugins · Institutions Directory | High7.1 |
| CVE-2025-52748 | WordPress Directory Pro plugin <= 2.5.5 - Cross Site Scripting (XSS) Vulnerabilitye-plugins · Directory Pro | High7.1 |
| CVE-2025-57948 | WordPress Directory Pro Plugin <= 2.5.5 - Cross Site Scripting (XSS) Vulnerabilitye-plugins · Directory Pro | Medium6.5 |
| CVE-2025-54717 | WordPress WP Membership Plugin <= 1.6.3 - Settings Change Vulnerabilitye-plugins · WP Membership | Medium5.4 |
| CVE-2024-10547 | WP Membership <= 1.6.2 - Unauthenticated Arbitrary File Uploade-plugins · WP Membership | Critical9.8 |