Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,702All CVEsplus 19,141 rejected
- 647Last 24 hours3,003 in the last 7 days
- 17,172Last 30 days1,609 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 2 | 6 | 0 | 0 | 8 | 40 |
| 2025 | 0 | 3 | 4 | 0 | 0 | 7 | 32 |
| 2024 | 5 | 3 | 12 | 0 | 0 | 20 | 25 |
| 2023 | 1 | 0 | 2 | 0 | 0 | 3 | 5 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2021 | 0 | 0 | 1 | 0 | 0 | 1 | 2 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2019 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2018 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-97284 | WordPress Icegram plugin <= 3.1.31 - PHP Object Injection vulnerabilityIcegram · Icegram | High8.8 |
| CVE-2026-12757 | Email Subscribers & Newsletters <= 5.9.27 - Unauthenticated Arbitrary Shortcode Execution via Subscriber Name Fieldicegram · Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | Medium6.5 |
| CVE-2026-81290 | WordPress Email Subscribers & Newsletters plugin <= 5.9.33 - Cross Site Scripting (XSS) vulnerabilityIcegram · Email Subscribers & Newsletters | High7.1 |
| CVE-2026-15951 | Icegram Mailer <= 1.0.12 - Authenticated (Administrator+) SQL Injection via 'fields' Parametericegram · Icegram Mailer – Reliable Email Deliverability, No-code SMTP Replacement & Email logs | Medium4.9 |
| CVE-2026-16087 | Icegram Engage <= 3.1.42 - Authenticated (Contributor+) Second-Order SQL Injection via 'messages[][id]' Parametericegram · Icegram Engage – Popups, Optins, CTAs & Lead Generation | Medium6.5 |
| CVE-2026-11592 | Email Subscribers & Newsletters <= 5.9.27 - Missing Authorization to Authenticated (Contributor+) Settings Modification via ig_es_handle_request AJAX Actionicegram · Email Subscribers & Newsletters by Icegram Express – Email Marketing, Post Notifications & WooCommerce Marekting Automation for WordPress | Medium4.3 |
| CVE-2026-1651 | Email Subscribers & Newsletters <= 5.9.16 - Authenticated (Administrator+) SQL Injection via 'workflow_ids' Parametericegram · Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | Medium6.5 |
| CVE-2025-68507 | WordPress Icegram plugin <= 3.1.35 - Broken Access Control vulnerabilityIcegram · Icegram | Medium6.5 |
| CVE-2025-68038 | WordPress Icegram Express Pro plugin < 5.9.14 - PHP Object Injection vulnerabilityIcegram · Icegram Express Pro | High7.2 |
| CVE-2025-12348 | Email Subscribers & Newsletters <= 5.9.10 - Missing Authentication to Unauthenticated Action Scheduler Task Executionicegram · Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | Medium5.3 |
| CVE-2025-66055 | WordPress Email Subscribers & Newsletters plugin <= 5.9.10 - PHP Object Injection vulnerabilityIcegram · Email Subscribers & Newsletters | High7.2 |
| CVE-2025-12349 | Email Subscribers & Newsletters <= 5.9.10 - Missing Authentication to Unauthenticated Mailing Queue Triggericegram · Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | Medium5.3 |
| CVE-2025-49917 | WordPress Icegram Express Pro plugin <= 5.9.5 - Server Side Request Forgery (SSRF) vulnerabilityIcegram · Icegram Express Pro | Medium4.4 |
| CVE-2025-47527 | WordPress Icegram Collect – Easy Form, Lead Collection and Subscription plugin <= 1.3.18 - Broken Access Control VulnerabilityIcegram · Icegram Collect | High7.1 |
| CVE-2025-24542 | WordPress Icegram Engage plugin <= 3.1.31 - Cross Site Scripting (XSS) vulnerabilityIcegram · Icegram | Medium6.5 |
| CVE-2024-39625 | WordPress Icegram Engage plugin <= 3.1.24 - Unauthenticated Message Duplication Vulnerabilityicegram · Icegram | Medium5.3 |
| CVE-2024-43273 | WordPress Icegram Collect plugin <= 1.3.14 - Broken Access Control vulnerabilityicegram · Icegram Collect | Medium5.4 |
| CVE-2024-8254 | Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.34 - Authenticated (Subscriber+) Arbitrary Shortcode Executionicegram · Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | Medium5.4 |
| CVE-2024-8771 | Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.34 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposureicegram · Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | Medium4.3 |
| CVE-2024-43272 | WordPress Icegram Engage plugin <= 3.1.24 - Unauthenticated Unpublished Campaign Viewer vulnerabilityicegram · Icegram | Medium5.3 |
| CVE-2024-43344 | WordPress Icegram Engage – Ultimate WP Popup Builder, Lead Generation, Optins, and CTA plugin <= 3.1.25 - Cross Site Scripting (XSS) vulnerabilityIcegram · Icegram | Medium6.5 |
| CVE-2024-5703 | Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.26 - Missing Authorizationicegram · Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | Medium4.3 |
| CVE-2024-6172 | Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.25 - Unauthenticated SQL Injection via unsubscribeicegram · Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | Critical9.8 |
| CVE-2024-37252 | WordPress Email Subscribers by Icegram Express plugin <= 5.7.25 - SQL Injection vulnerabilityIcegram · Email Subscribers & Newsletters | Critical9.3 |
| CVE-2024-5756 | Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.23 - Unauthenticated SQL Injection via optinicegram · Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | Critical9.8 |
| CVE-2024-4845 | Icegram Express <= 5.7.22 - Authenticated (Subscriber+) SQL Injection Vulnerability via options[list_id]icegram · Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | High8.8 |
| CVE-2024-21748 | WordPress Icegram Engage plugin <= 3.1.21 - Broken Access Control vulnerabilityIcegram · Icegram | Medium4.3 |
| CVE-2024-4295 | Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via hashicegram · Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | Critical9.8 |
| CVE-2024-3626 | Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.17 - Missing Authorizationicegram · Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | Medium4.3 |
| CVE-2024-4010 | Email Subscribers by Icegram Express <= 5.7.19 - Missing Authorization in handle_ajax_requesticegram · Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | High8.8 |
| CVE-2024-2876 | Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.14 - Unauthenticated SQL Injectionicegram · Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | Critical9.8 |
| CVE-2024-2656 | Icegram Express <= 5.7.14 - Authenticated (Administrator+) Cross-Site Scripting via CSV importicegram · Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | Medium4.4 |
| CVE-2024-22300 | WordPress Icegram Express plugin <= 5.7.11 - Reflected Cross Site Scripting (XSS) vulnerabilityIcegram · Email Subscribers & Newsletters | High7.1 |
| CVE-2023-51532 | WordPress Icegram Plugin <= 3.1.19 is vulnerable to Cross Site Scripting (XSS)Icegram · Icegram Engage – WordPress Lead Generation, Popup Builder, CTA, Optins and Email List Building | Medium6.5 |
| CVE-2023-52119 | WordPress Icegram Plugin <= 3.1.18 is vulnerable to Cross Site Request Forgery (CSRF)Icegram · Icegram Engage – WordPress Lead Generation, Popup Builder, CTA, Optins and Email List Building | Medium4.3 |
| CVE-2022-45810 | WordPress Email Subscribers & Newsletters Plugin <= 5.5.2 is vulnerable to CSV InjectionIcegram · Icegram Express – Email Marketing, Newsletters and Automation for WordPress & WooCommerce | Medium6.1 |
| CVE-2023-5414 | Icegram Express <= 5.6.23 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Readicegram · Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | Critical9.1 |
| CVE-2023-25024 | WordPress Icegram Collect plugin <= 1.3.8 is vulnerable to Cross Site Scripting (XSS)Icegram · Icegram Collect | Medium5.9 |
| CVE-2021-36832 | WordPress Icegram plugin <= 2.0.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilityIcegram · Popups, Welcome Bar, Optins and Lead Generation Plugin – Icegram | Medium4.8 |
| CVE-2018-0602 | Cross-site scripting vulnerability in Email Subscribers & Newsletters versions prior to 3.5.0 allows remote attackers to inject arbitrary web script or HTML…icegram · Email Subscribers & Newsletters | Medium6.1 |