Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,248All CVEsplus 19,137 rejected
- 468Last 24 hours2,756 in the last 7 days
- 16,905Last 30 days1,553 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 3 | 1 | 0 | 0 | 5 | 15 |
| 2025 | 3 | 1 | 4 | 0 | 0 | 8 | 10 |
| 2024 | 0 | 0 | 2 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-94589 | Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) <= 3.4.5 - Unauthenticated Arbitrary File Upload via Signature Field File Uploadhtplugins · Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) | Critical9.8 |
| CVE-2026-96326 | HT Contact Form – Drag & Drop Form Builder for WordPress <= 2.10.2 Unauthenticated Stored Cross-Site Scripting via Rich Text Editor Fieldhtplugins · HT Contact Form – Drag & Drop Form Builder for WordPress | High7.2 |
| CVE-2026-93303 | HT Contact Form <= 2.10.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'form_data' Rich Text Field via Draft Save/Resumehtplugins · HT Contact Form – Drag & Drop Form Builder for WordPress | High7.2 |
| CVE-2026-7052 | HT Contact Form <= 2.8.2 - Unauthenticated Stored Cross-Site Scripting via File Upload Fieldhtplugins · HT Contact Form – Drag & Drop Form Builder for WordPress | High7.2 |
| CVE-2026-1888 | Docus <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributeshtplugins · Docus – YouTube Video Playlist | Medium6.4 |
| CVE-2025-13838 | WishSuite <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button_text' Shortcode Attributehtplugins · WishSuite – Wishlist for WooCommerce | Medium6.4 |
| CVE-2025-14278 | HT Slider for Elementor <= 1.7.4 - Authenticated (Contributor+) Stored Cross-Site Scriptinghtplugins · HT Slider For Elementor | Medium6.4 |
| CVE-2025-12112 | Insert Headers and Footers Code – HT Script <= 1.1.6 - Authenticated (Author+) Stored Cross-Site Scriptinghtplugins · Insert Headers and Footers Code – HT Script | Medium6.4 |
| CVE-2025-7645 | Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) <= 3.2.8 - Unauthenticated Arbitrary File Deletion Triggered via Admin Form Submission Deletionhtplugins · Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) | High8.1 |
| CVE-2025-7340 | HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Uploadhtplugins · HT Contact Form – Drag & Drop Form Builder for WordPress | Critical9.8 |
| CVE-2025-7360 | HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Directory Traversal to Arbitrary File Movehtplugins · HT Contact Form – Drag & Drop Form Builder for WordPress | Critical9.1 |
| CVE-2025-7341 | HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Deletionhtplugins · HT Contact Form – Drag & Drop Form Builder for WordPress | Critical9.1 |
| CVE-2025-2779 | Insert Headers and Footers Code – HT Script <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Limited Options Updatehtplugins · Insert Headers and Footers Code – HT Script | Medium6.5 |
| CVE-2024-10223 | HT Team Member <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via htteamember Shortcodehtplugins · WP Team – WordPress Team Member Plugin | Medium6.4 |
| CVE-2024-1176 | HT Easy GA4 – Google Analytics WordPress Plugin <= 1.1.5 - Missing Authorization to Unauthenticated GA4 Email Updatehtplugins · HT Easy GA4 – Google Analytics WordPress Plugin | Medium5.3 |