Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,151All CVEsplus 19,119 rejected
- 492Last 24 hours2,789 in the last 7 days
- 16,902Last 30 days1,554 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 4 | 3 | 0 | 0 | 8 | 16 |
| 2025 | 0 | 0 | 1 | 0 | 0 | 1 | 8 |
| 2024 | 0 | 1 | 1 | 0 | 0 | 2 | 7 |
| 2023 | 0 | 0 | 4 | 0 | 0 | 4 | 5 |
| 2022 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-13179 | WP Maps <= 4.9.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via shapes_values Parameterflippercode · WP Maps – Google Maps, OpenStreetMap, Mapbox, Store Locator with Search, Filters & Listings | Medium6.4 |
| CVE-2026-13456 | WP Maps <= 4.9.8 - Authenticated (Subscriber+) Local File Inclusion via 'page' Parameterflippercode · WP Maps – Google Maps, OpenStreetMap, Mapbox, Store Locator with Search, Filters & Listings | High7.5 |
| CVE-2026-9594 | WP Maps <= 4.9.4 - Authenticated (Admin+) Stored Cross-Site Scripting via 'location_messages' Parameterflippercode · WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters | Medium4.4 |
| CVE-2026-8732 | WP Maps Pro <= 6.1.0 - Unauthenticated Privilege Escalation via Administrator Account Creation to wpgmp_temp_access_ajax AJAX Actionflippercode · WP Maps Pro | Critical9.8 |
| CVE-2025-13364 | WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'put_wpgm' Shortcodeflippercode · WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters | Medium6.4 |
| CVE-2026-2580 | WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.9.1 - Unauthenticated SQL Injection via 'orderby' Parameterflippercode · WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters | High7.5 |
| CVE-2026-3222 | WP Maps <= 4.9.1 - Unauthenticated SQL Injection via 'location_id' Parameterflippercode · WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters | High7.5 |
| CVE-2025-12062 | WP Maps <= 4.8.6 - Authenticated (Subscriber+) Limited Local File Inclusionflippercode · WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters | High8.8 |
| CVE-2025-39465 | WordPress Advanced Google Maps plugin <= 5.8.4 - Broken Access Control vulnerabilityflippercode · Advanced Google Maps | Medium4.3 |
| CVE-2024-11896 | Text Prompter – Unlimited chatgpt text prompts for openai tasks <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scriptingflippercode · Text Prompter – Unlimited chatgpt text prompts for openai tasks | Medium6.4 |
| CVE-2024-2386 | WordPress Plugin for Google Maps – WP MAPS <= 4.6.1 - Authenticated (Contributor+) SQL Injectionflippercode · WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters | High8.8 |
| CVE-2023-28172 | WordPress WP Google Map Plugin Plugin <= 4.4.2 is vulnerable to Cross Site Request Forgery (CSRF)flippercode · WordPress Plugin for Google Maps – WP MAPS (formerly WP Google Map Plugin) | Medium5.4 |
| CVE-2021-4418 | Custom CSS, JS & PHP <= 2.0.7 - Cross-Site Request Forgery Bypassflippercode · Custom css-js-php | Medium4.3 |
| CVE-2021-4386 | WP Security Question <= 1.0.5 - Cross-Site Request Forgery Bypassflippercode · WP Security Question | Medium4.3 |
| CVE-2023-23878 | WordPress WP Google Map Plugin Plugin <= 4.3.9 is vulnerable to Cross Site Scripting (XSS)flippercode · WordPress Plugin for Google Maps – WP MAPS | Medium5.9 |
| CVE-2022-25600 | WordPress WP Google Map plugin <= 4.2.3 - Cross-Site Request Forgery (CSRF) vulnerabilityFlippercode · WP Google Map Plugin (WordPress plugin) | Medium5.4 |