Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,764All CVEsplus 19,141 rejected
- 677Last 24 hours3,064 in the last 7 days
- 17,177Last 30 days1,610 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 3 | 0 | 5 | 0 | 0 | 8 | 32 |
| 2025 | 0 | 1 | 9 | 0 | 0 | 10 | 24 |
| 2024 | 1 | 1 | 11 | 0 | 0 | 13 | 14 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2021 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-81780 | WordPress Hash Form plugin <= 1.4.2 - Arbitrary File Upload vulnerabilityhashthemes · Hash Form | Critical10.0 |
| CVE-2026-78292 | WordPress Hash Form plugin <= 1.4.1 - PHP Object Injection vulnerabilityhashthemes · Hash Form | Critical9.8 |
| CVE-2026-78280 | WordPress Hash Form plugin <= 1.4.0 - Cross Site Request Forgery (CSRF) vulnerabilityHashThemes · Hash Form | Medium4.3 |
| CVE-2026-28164 | WordPress Easy Elementor Addons plugin <= 2.3.7 - Cross Site Request Forgery (CSRF) vulnerabilityHashThemes · Easy Elementor Addons | Critical9.6 |
| CVE-2026-65483 | WordPress HashThemes Demo Importer plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerabilityhashthemes · HashThemes Demo Importer | Medium5.9 |
| CVE-2026-24618 | WordPress Hash Elements plugin <= 1.5.4 - Sensitive Data Exposure vulnerabilityHashThemes · Hash Elements | Medium4.3 |
| CVE-2026-5077 | Total <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title in Blog Section Image alt Attributehashthemes · Total | Medium5.4 |
| CVE-2026-6370 | WordPress Mini Ajax Cart for WooCommerce plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerabilityHashThemes · Mini Ajax Cart for WooCommerce | Medium5.9 |
| CVE-2025-9045 | Easy Elementor Addons <= 2.2.9 - Authenticated (Contributor+) Stored Cross-Site Scriptinghashthemes · Easy Elementor Addons – Addons Pack for Elementor Page Builder | Medium6.4 |
| CVE-2025-58973 | WordPress Easy Elementor Addons Plugin <= 2.2.8 - Local File Inclusion Vulnerabilityhashthemes · Easy Elementor Addons | High7.5 |
| CVE-2025-59561 | WordPress Smart Blocks Plugin <= 2.4 - Broken Access Control Vulnerabilityhashthemes · Smart Blocks | Medium4.3 |
| CVE-2025-54712 | WordPress Easy Elementor Addons Plugin <= 2.2.7 - Broken Access Control Vulnerabilityhashthemes · Easy Elementor Addons | Medium4.3 |
| CVE-2025-54704 | WordPress Easy Elementor Addons plugin <= 2.2.6 - Cross Site Scripting (XSS) Vulnerabilityhashthemes · Easy Elementor Addons | Medium6.5 |
| CVE-2025-48295 | WordPress Easy Elementor Addons plugin <= 2.2.5 - Cross Site Scripting (XSS) Vulnerabilityhashthemes · Easy Elementor Addons | Medium6.5 |
| CVE-2025-47468 | WordPress Hash Form plugin <= 1.2.8 - Cross Site Request Forgery (CSRF) Vulnerabilityhashthemes · Hash Form | Medium4.3 |
| CVE-2025-26912 | WordPress Easy Elementor Addons plugin <= 2.1.6 - Cross Site Scripting (XSS) vulnerabilityhashthemes · Easy Elementor Addons | Medium6.5 |
| CVE-2025-26761 | WordPress Easy Elementor Addons plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerabilityhashthemes · Easy Elementor Addons | Medium6.5 |
| CVE-2025-22296 | WordPress Hash Elements plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerabilityhashthemes · Hash Elements | Medium6.5 |
| CVE-2023-28990 | WordPress Viral Mag theme <= 1.0.9 - Authenticated Arbitrary Plugin Activation VulnerabilityHashThemes · Viral Mag | Medium4.3 |
| CVE-2023-27456 | WordPress Total theme <= 2.1.19 - Authenticated Arbitrary Plugin ActivationHashThemes · Total | Medium4.3 |
| CVE-2024-12201 | Hash Form <= 1.2.1 - Missing Authorization to Authenticated (Contributor+) Form Style Creationhashthemes · Hash Form – Drag & Drop Form Builder | Medium4.3 |
| CVE-2023-30486 | WordPress Square theme <= 2.0.0 - Broken Access ControlHashThemes · Square | Medium4.3 |
| CVE-2024-10802 | Hash Elements <= 1.4.7 - Missing Authorization to Unauthenticated Draft Post Title Exposurehashthemes · Hash Elements | Medium5.3 |
| CVE-2024-49270 | WordPress Smart Blocks plugin <= 2.0 - Cross Site Scripting (XSS) vulnerabilityhashthemes · Smart Blocks | Medium6.5 |
| CVE-2024-9417 | Hash Form - Drag & Drop Form Builder <= 1.1.9 - Unauthenticated Limited File Uploadhashthemes · Hash Form – Drag & Drop Form Builder | Medium6.1 |
| CVE-2024-5084 | Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated Arbitrary File Upload to Remote Code Executionhashthemes · Hash Form – Drag & Drop Form Builder | Critical9.8 |
| CVE-2024-5085 | Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated PHP Object Injectionhashthemes · Hash Form – Drag & Drop Form Builder | High8.1 |
| CVE-2024-5177 | Hash Elements <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter in Multiple Widgetshashthemes · Hash Elements | Medium6.4 |
| CVE-2024-30426 | WordPress Hash Elements plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerabilityHashThemes · Hash Elements | Medium6.5 |
| CVE-2023-33923 | Broken Access Control leading to Arbitrary Plugin Activation in multiple HashThemes themesHashThemes · Viral News | Medium4.3 |
| CVE-2024-1771 | Total <= 2.1.59 - Missing Authorization to Authenticated (Subscriber+) Sections Updatehashthemes · Total | Medium4.3 |
| CVE-2021-39333 | Hashthemes Demo Importer <= 1.1.1 Improper Access Control Allowing Content DeletionHashthemes · Hashthemes Demo Importer | High8.1 |