Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,060All CVEsplus 19,119 rejected
- 493Last 24 hours2,912 in the last 7 days
- 16,873Last 30 days1,544 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 2 | 9 | 0 | 0 | 13 | 17 |
| 2025 | 0 | 1 | 2 | 0 | 0 | 3 | 4 |
| 2024 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-111106 | Mail Mint <= 1.31.4 - Authenticated (Custom+) SQL Injection via 'filters' Parametergetwpfunnels · Mail Mint – Email Marketing, Automation & WooCommerce Emails with AI Assistance | Medium6.5 |
| CVE-2026-84908 | WPFunnels <= 3.12.13 - Missing Authorization to Unauthenticated Arbitrary Product Price Manipulation via 'wpfnl_load_payment' AJAX Actiongetwpfunnels · WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell | Medium5.3 |
| CVE-2026-19800 | Mail Mint <= 1.31.0 - Authenticated (Custom+) SQL Injection via 'status' Parametergetwpfunnels · Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails | Medium4.9 |
| CVE-2026-10196 | Mail Mint <= 1.31.0 - Unauthenticated PHP Object Injection in Arbitrary Form Fieldsgetwpfunnels · Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails | Critical9.8 |
| CVE-2026-15103 | WPFunnels <= 3.12.8 - Authenticated (Funnel Manager+) Privilege Escalation via 'group_id' Path Parametergetwpfunnels · WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell | High8.8 |
| CVE-2026-12918 | Mail Mint <= 1.24.1 - Authenticated (Administrator+) SQL Injection via 'recipients' Parametergetwpfunnels · Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails | Medium4.9 |
| CVE-2026-14342 | Mail Mint <= 1.24.2 - Authenticated (Administrator+) SQL Injection via 'contact_ids' Parametergetwpfunnels · Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails | Medium4.9 |
| CVE-2026-13080 | WPFunnels <= 3.12.7 - Authenticated (Administrator+) Local File Inclusion via 'logKey' Parametergetwpfunnels · WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell | Medium6.6 |
| CVE-2026-14345 | WPFunnels <= 3.12.7 - Unauthenticated Remote Code Execution via 'postData' Parametergetwpfunnels · WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell | Critical9.8 |
| CVE-2026-0626 | WPFunnels <= 3.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpf_optin_form' Shortcodegetwpfunnels · WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell | Medium6.4 |
| CVE-2026-1258 | Mail Mint <= 1.19.2 - Authenticated (Administrator+) SQL Injection via Multiple API Endpointsgetwpfunnels · Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails | Medium4.9 |
| CVE-2026-1447 | Mail Mint <= 1.19.2 - Cross-Site Request Forgery to Stored Cross-Site Scriptinggetwpfunnels · Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails | Medium5.4 |
| CVE-2025-15347 | Creator LMS – The LMS for Creators, Coaches, and Trainers <= 1.1.12 - Missing Authorization to Authenticated (Contributor+) Arbitrary Options Updategetwpfunnels · Creator LMS – Online Courses and eLearning Plugin | High8.8 |
| CVE-2025-11967 | Mail Mint <= 1.18.10 - Authenticated (Admin+) Arbitrary File Uploadgetwpfunnels · Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails | High7.2 |
| CVE-2025-12000 | WPFunnels <= 3.6.2 - Authenticated (Administrator+) Arbitrary File Deletion via Path Traversalgetwpfunnels · WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell | Medium6.5 |
| CVE-2025-12353 | WPFunnels <= 3.6.2 - Unauthorized User Registrationgetwpfunnels · WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell | Medium5.3 |
| CVE-2024-10792 | Easiest Funnel Builder For WordPress & WooCommerce by WPFunnels <= 3.5.5 - Reflected Cross-Site Scriptinggetwpfunnels · WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell | Medium6.1 |