Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,334All CVEsplus 19,141 rejected
- 442Last 24 hours2,720 in the last 7 days
- 16,914Last 30 days1,562 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 4 | 2 | 0 | 0 | 7 | 25 |
| 2025 | 0 | 1 | 4 | 0 | 0 | 5 | 18 |
| 2024 | 0 | 2 | 2 | 0 | 0 | 4 | 13 |
| 2023 | 0 | 1 | 8 | 0 | 0 | 9 | 9 |
| Title | ||
|---|---|---|
| CVE-2026-116851 | WordPress eCommerce Product Catalog plugin <= 3.6.5 - Cross Site Scripting (XSS) vulnerabilityimpleCode · eCommerce Product Catalog | High7.1 |
| CVE-2026-115596 | WordPress eCommerce Product Catalog plugin <= 3.6.4 - Cross Site Scripting (XSS) vulnerabilityimpleCode · eCommerce Product Catalog | High7.1 |
| CVE-2026-105056 | WordPress eCommerce Product Catalog plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerabilityimpleCode · eCommerce Product Catalog | Medium6.5 |
| CVE-2026-96344 | WordPress eCommerce Product Catalog plugin <= 3.6.0 - PHP Object Injection vulnerabilityimpleCode · eCommerce Product Catalog | High7.2 |
| CVE-2026-76128 | eCommerce Product Catalog <= 3.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attributeimplecode · eCommerce Product Catalog | Medium6.4 |
| CVE-2026-57360 | WordPress eCommerce Product Catalog plugin <= 3.5.4 - Cross Site Scripting (XSS) vulnerabilityimpleCode · eCommerce Product Catalog | High7.1 |
| CVE-2026-52693 | WordPress eCommerce Product Catalog plugin <= 3.5.5 - SQL Injection vulnerabilityimpleCode · eCommerce Product Catalog | Critical9.3 |
| CVE-2025-62061 | WordPress Product Catalog Simple plugin <= 1.8.4 - Cross Site Request Forgery (CSRF) vulnerabilityimpleCode · Product Catalog Simple | Medium4.3 |
| CVE-2025-58992 | WordPress Product Catalog Simple Plugin <= 1.8.2 - Cross Site Scripting (XSS) VulnerabilityimpleCode · Product Catalog Simple | Medium6.5 |
| CVE-2025-49331 | WordPress eCommerce Product Catalog plugin <= 3.4.3 - PHP Object Injection VulnerabilityimpleCode · eCommerce Product Catalog | High7.2 |
| CVE-2025-49305 | WordPress Product Catalog Simple plugin <= 1.8.1 - Cross Site Scripting (XSS) VulnerabilityimpleCode · Product Catalog Simple | Medium6.5 |
| CVE-2025-1405 | Product Catalog Simple <= 1.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via show_products Shortcodeimplecode · Product Catalog Simple | Medium6.4 |
| CVE-2024-12771 | eCommerce Product Catalog Plugin for WordPress <= 3.3.43 - Cross-Site Request Forgery to Password Resetimplecode · eCommerce Product Catalog Plugin for WordPress | High8.8 |
| CVE-2024-32822 | WordPress Reviews Plus plugin <= 1.3.4 - Broken Access Control vulnerabilityimpleCode · Reviews Plus | Medium4.3 |
| CVE-2024-32558 | WordPress eCommerce Product Catalog plugin <= 3.3.32 - Cross Site Scripting (XSS) vulnerabilityimpleCode · eCommerce Product Catalog | High7.1 |
| CVE-2024-32437 | WordPress eCommerce Product Catalog plugin <= 3.3.28 - Cross Site Request Forgery (CSRF) vulnerabilityimpleCode · eCommerce Product Catalog | Medium4.3 |
| CVE-2023-51688 | WordPress eCommerce Product Catalog Plugin <= 3.3.26 is vulnerable to Sensitive Data ExposureimpleCode · eCommerce Product Catalog Plugin for WordPress | Medium5.3 |
| CVE-2023-51687 | WordPress Product Catalog Simple Plugin <= 1.7.6 is vulnerable to Sensitive Data ExposureimpleCode · Product Catalog Simple | Medium5.3 |
| CVE-2023-47839 | WordPress eCommerce Product Catalog Plugin <= 3.3.26 is vulnerable to Cross Site Scripting (XSS)impleCode · eCommerce Product Catalog Plugin for WordPress | Medium6.5 |
| CVE-2020-36743 | Product Catalog Simple <= 1.5.13 - Cross-Site Request Forgery Bypassimplecode · Product Catalog Simple | Medium4.3 |
| CVE-2021-4392 | eCommerce Product Catalog Plugin for WordPress <= 2.9.43 - Cross-Site Request Forgery Bypassimplecode · eCommerce Product Catalog Plugin for WordPress | Medium4.3 |
| CVE-2021-4393 | eCommerce Product Catalog Plugin for WordPress <= 3.0.17 - Cross-Site Request Forgery Bypassimplecode · eCommerce Product Catalog Plugin for WordPress | Medium4.3 |
| CVE-2023-29388 | WordPress Product Catalog Simple Plugin <= 1.6.17 is vulnerable to Cross Site Scripting (XSS)impleCode · Product Catalog Simple | High7.1 |
| CVE-2023-25049 | WordPress eCommerce Product Catalog Plugin <= 3.3.4 is vulnerable to Cross Site Scripting (XSS)impleCode · eCommerce Product Catalog Plugin for WordPress | Medium5.9 |
| CVE-2023-1470 | eCommerce Product Catalog plugin for WordPress <= 3.3.8 - Authenticated (Administrator+) Stored Cross-Site Scriptingimplecode · eCommerce Product Catalog Plugin for WordPress | Medium4.4 |