Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,211All CVEsplus 19,120 rejected
- 493Last 24 hours2,787 in the last 7 days
- 16,887Last 30 days1,542 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 2 | 4 | 0 | 0 | 6 | 33 |
| 2025 | 1 | 0 | 8 | 0 | 0 | 9 | 27 |
| 2024 | 0 | 0 | 15 | 0 | 0 | 15 | 18 |
| 2023 | 0 | 2 | 1 | 0 | 0 | 3 | 3 |
| Title | ||
|---|---|---|
| CVE-2026-109191 | Image Hub <= 1.2.0 - Authenticated (Subscriber+) Sensitive Information Exposure in Admin Page HTMLextendthemes · Image Hub – Free Images from Unsplash, Pixabay, Pexels, Openverse & Giphy | Medium4.3 |
| CVE-2026-107758 | Colibri Page Builder <= 1.0.390 - Unauthenticated Stored Cross-Site Scripting via Commentsextendthemes · Colibri Page Builder | High7.2 |
| CVE-2026-100107 | Kubio AI Page Builder <= 2.9.2 - Unauthenticated Stored Cross-Site Scripting via SVG Comment Content (KSES Allowlist Bypass)extendthemes · Kubio AI Page Builder | High7.2 |
| CVE-2026-14472 | Kubio AI Page Builder <= 2.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via kubio/copyright Block Contentextendthemes · Kubio AI Page Builder | Medium6.4 |
| CVE-2026-16779 | Kubio AI Page Builder <= 2.8.5 - Missing Authorization to Authenticated (Contributor+) Front-Page/Menu/Template Configuration Reversion via kubio_restore_front_page AJAX Actionextendthemes · Kubio AI Page Builder | Medium4.3 |
| CVE-2026-5427 | Kubio AI Page Builder <= 2.7.2 - Missing Authorization to Authenticated (Contributor+) Limited File Upload via Kubio Block Attributesextendthemes · Kubio AI Page Builder | Medium5.3 |
| CVE-2025-62751 | WordPress Vireo theme <= 1.0.24 - Broken Access Control vulnerabilityextendthemes · Vireo | Medium4.3 |
| CVE-2025-11747 | Colibri Page Builder <= 1.0.345 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodeextendthemes · Colibri Page Builder | Medium6.4 |
| CVE-2025-11376 | Colibri Page Builder <= 1.0.335 - Authenticated (Contributor+) Stored Cross-Site Scriptingextendthemes · Colibri Page Builder | Medium6.4 |
| CVE-2025-9560 | Colibri Page Builder <= 1.0.334 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_newsletter Shortcodeextendthemes · Colibri Page Builder | Medium6.4 |
| CVE-2025-8487 | Kubio AI Page Builder <= 2.6.3 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installationextendthemes · Kubio AI Page Builder | Medium5.4 |
| CVE-2025-2294 | Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusionextendthemes · Kubio AI Page Builder | Critical9.8 |
| CVE-2024-13516 | Kubio AI Page Builder <= 2.3.5 - Reflected Cross-Site Scriptingextendthemes · Kubio AI Page Builder | Medium6.1 |
| CVE-2024-37458 | WordPress Highlight theme <= 1.0.29 - Cross Site Request Forgery (CSRF) vulnerabilityextendthemes · Highlight | Medium4.3 |
| CVE-2024-37431 | WordPress Mesmerize theme <= 1.6.120 - Cross Site Request Forgery (CSRF) vulnerabilityextendthemes · Mesmerize | Medium4.3 |
| CVE-2024-5020 | Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Libraryextendthemes · Colibri Page Builder | Medium6.4 |
| CVE-2024-39661 | WordPress Kubio AI Page Builder plugin <= 2.2.4 - Authenticated Cross Site Scripting (XSS) vulnerabilityExtendThemes · Kubio AI Page Builder | Medium6.5 |
| CVE-2023-3204 | Materialis <= 1.1.24 - Missing Authorization to Limited Arbitrary Options Updateextendthemes · Materialis | Medium6.5 |
| CVE-2024-4451 | Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_video_player Shortcodeextendthemes · Colibri Page Builder | Medium6.4 |
| CVE-2024-5038 | Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodeextendthemes · Colibri Page Builder | Medium6.4 |
| CVE-2024-3340 | Colibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri-gallery-slideshow' Shortcodeextendthemes · Colibri Page Builder | Medium5.4 |
| CVE-2024-3337 | Colibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri_breadcrumb_element' Shortcodeextendthemes · Colibri Page Builder | Medium6.4 |
| CVE-2024-3338 | Colibri Page Builder <= 1.0.262 - Authenticated (Author+) Stored Cross-Site Scriptingextendthemes · Colibri Page Builder | Medium4.4 |
| CVE-2024-2839 | Colibri Page Builder <= 1.0.263 - Authenticated (Contributor+) Stored Cross-Site Scriptingextendthemes · Colibri Page Builder | Medium6.4 |
| CVE-2024-28004 | WordPress Colibri Page Builder plugin <= 1.0.248 - Broken Access Control vulnerabilityExtendThemes · Colibri Page Builder | Medium5.4 |
| CVE-2024-1870 | Colibri Page Builder <= 1.0.260 - Missing Authorizationextendthemes · Colibri Page Builder | Medium4.3 |
| CVE-2024-1360 | Colibri WP <= 1.0.94 - Cross-Site Request Forgery to Limited Plugin Installationextendthemes · Colibri WP | Medium4.3 |
| CVE-2024-1362 | Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via cp_shortcode_refreshextendthemes · Colibri Page Builder | Medium4.3 |
| CVE-2024-1361 | Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via extend_builderextendthemes · Colibri Page Builder | Medium4.3 |
| CVE-2023-6988 | Colibri Page Builder <= 1.0.239 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodeextendthemes · Colibri Page Builder | Medium6.4 |
| CVE-2023-50833 | WordPress Colibri Page Builder Plugin <= 1.0.239 is vulnerable to Cross Site Scripting (XSS)ExtendThemes · Colibri Page Builder | Medium6.5 |
| CVE-2023-2188 | Colibri Page Builder <= 1.0.227 - Authenticated (Administrator+) SQL Injection via post_idextendthemes · Colibri Page Builder | High7.2 |
| CVE-2019-25142 | Mesmerize <= 1.6.89 & Materialis <= 1.0.172 - Authenticated Arbitrary Options Updateextendthemes · Materialis | High8.8 |