Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,060All CVEsplus 19,119 rejected
- 493Last 24 hours2,912 in the last 7 days
- 16,873Last 30 days1,544 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 2 | 5 | 0 | 0 | 8 | 25 |
| 2025 | 0 | 1 | 6 | 0 | 0 | 7 | 17 |
| 2024 | 0 | 1 | 7 | 0 | 0 | 8 | 10 |
| 2023 | 0 | 0 | 1 | 0 | 0 | 1 | 2 |
| 2022 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-11905 | Elementor Website Builder <= 4.2.3 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'is_public' and 'keys_conversion_map' Parameterselemntor · Elementor Website Builder – more than just a page builder | Medium4.3 |
| CVE-2026-5727 | Hello Plus <= 1.7.7 - Authenticated (Contributor+) Missing Authorization to Template Activation via hello_plus_set_as_entire_siteelemntor · Hello Plus | Medium5.4 |
| CVE-2026-5821 | Image Optimizer <= 1.7.4 - Authenticated (Author+) Arbitrary File Deletion via Post Meta Field Injectionelemntor · Image Optimizer – Compress Images and Convert to WebP or AVIF | High8.1 |
| CVE-2026-7567 | Temporary Login <= 1.0.0 - Authentication Bypass to Account Takeoverelemntor · Temporary Login | Critical9.8 |
| CVE-2026-6127 | Elementor Website Builder <= 4.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST APIelemntor · Elementor Website Builder – more than just a page builder | Medium6.4 |
| CVE-2025-14732 | Elementor Website Builder <= 3.35.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST APIelemntor · Elementor Website Builder – more than just a page builder | Medium6.4 |
| CVE-2026-1206 | Elementor Website Builder <= 3.35.7 - Incorrect Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templateelemntor · Elementor Website Builder – more than just a page builder | Medium4.3 |
| CVE-2026-2413 | Ally – Web Accessibility & Usability <= 4.0.3 - Unauthenticated SQL Injection via URL Pathelemntor · Ally – Web Accessibility & Usability | High7.5 |
| CVE-2025-11220 | Elementor <= 3.33.3 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Text Pathelemntor · Elementor Website Builder – more than just a page builder | Medium6.4 |
| CVE-2025-10700 | Ally - Web Accessibility & Usability <= 3.8.0 - Cross-Site Request Forgery to Plugin Settings Updateelemntor · Ally – Web Accessibility & Usability | Medium4.3 |
| CVE-2025-8081 | Elementor <= 3.30.2 - Authenticated (Administrator+) Arbitrary File Read via Image Importelemntor · Elementor Website Builder – more than just a page builder | Medium4.9 |
| CVE-2025-4566 | Elementor <= 3.30.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Path Widgetelemntor · Elementor Website Builder – more than just a page builder | Medium6.4 |
| CVE-2025-3075 | Elementor <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingelemntor · Elementor Website Builder – more than just a page builder | Medium6.4 |
| CVE-2025-1319 | Site Mailer <= 1.2.3 - Unauthenticated Stored Cross-Site Scriptingelemntor · Site Mailer – SMTP Replacement, Email API Deliverability & Email Log | High7.2 |
| CVE-2024-13445 | Elementor Website Builder – More Than Just a Page Builder <= 3.27.4 - Authenticated (Contributor+) Stored Cross-Site Scriptingelemntor · Elementor Website Builder – more than just a page builder | Medium6.4 |
| CVE-2024-10453 | Elementor Website Builder – More than Just a Page Builder <= 3.25.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typography Settingselemntor · Elementor Website Builder – more than just a page builder | Medium6.4 |
| CVE-2024-8236 | Elementor Website Builder – More than Just a Page Builder <= 3.25.7 - Authenticated (Contributor+) Stored Cross-Site Scriptingelemntor · Elementor Website Builder – more than just a page builder | Medium6.4 |
| CVE-2024-10788 | Activity Log – Monitor & Record User Changes <= 2.11.1 - Unauthenticated Stored Cross-Site Scripting via Event Contextelemntor · Activity Log – Monitor & Record User Changes | High7.2 |
| CVE-2024-6757 | Elementor <= 3.23.5 - Authenticated (Contributor+) Basic Information Exposure via get_image_alt Functionelemntor · Elementor Website Builder – more than just a page builder | Medium4.3 |
| CVE-2024-5416 | Elementor Website Builder – More than Just a Page Builder <= 3.23.4 - Authenticated (Contributor+) Stored Cross-Site Scripting in the URL Parameter in Multiple Widgetselemntor · Elementor Website Builder – more than just a page builder | Medium5.4 |
| CVE-2024-4619 | Elementor Website Builder – More than Just a Page Builder <= 3.21.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scriptingelemntor · Elementor Website Builder – more than just a page builder | Medium6.4 |
| CVE-2024-2117 | Elementor Website Builder – More than Just a Page Builder <= 3.20.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Path Widgetelemntor · Elementor Website Builder – more than just a page builder | Medium6.4 |
| CVE-2024-0506 | Elementor Website Builder – More than Just a Page Builder <= 3.18.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via get_image_altelemntor · Elementor Website Builder – more than just a page builder | Medium6.4 |
| CVE-2020-36703 | Elementor Website Builder <= 2.9.7 - Authenticated Stored Cross-Site Scriptingelemntor · Elementor Website Builder – more than just a page builder | Medium6.4 |
| CVE-2022-1329 | Elementor Website Builder 3.6.0 - 3.6.2 - Missing Authorization to Remote Code Executionelemntor · Elementor Website Builder | High8.8 |