Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read just now.
At a glance
Published CVEs; rejected ones are not counted.
- 401,152All CVEsplus 19,119 rejected
- 490Last 24 hours2,789 in the last 7 days
- 16,901Last 30 days1,554 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 5 | 6 | 0 | 0 | 12 | 33 |
| 2025 | 0 | 1 | 5 | 0 | 0 | 6 | 21 |
| 2024 | 0 | 0 | 13 | 0 | 0 | 13 | 15 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2022 | 0 | 1 | 1 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-103907 | Jeg Kit for Elementor <= 3.2.19 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'jeg_find_author' AJAX Actionjegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | Medium6.5 |
| CVE-2026-96328 | WordPress JNews - Pay Writer plugin <= 12.0.1 - SQL Injection vulnerabilityjegtheme · JNews - Pay Writer | Critical9.3 |
| CVE-2026-100180 | Jeg Kit for Elementor <= 3.2.19 - Unauthenticated Stored Cross-Site Scripting via Commentjegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | Medium5.4 |
| CVE-2026-18405 | Jeg Kit for Elementor <= 3.2.16 - Unauthenticated Stored Cross-Site Scripting via Comment Contentjegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | High7.2 |
| CVE-2026-65549 | WordPress Jeg Elementor Kit plugin <= 3.2.10 - PHP Object Injection vulnerabilityjegtheme · Jeg Kit for Elementor | High7.2 |
| CVE-2026-2916 | Jeg Kit for Elementor <= 3.1.1 - Authenticated (Contributor+) Exposure of Sensitive Information via 'JkitDashboardOption' Inline Scriptjegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | Medium4.3 |
| CVE-2026-13710 | Jeg Kit for Elementor <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_body_description' Parameter via 'jkit_image_box' Shortcode/Widgetjegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | Medium6.4 |
| CVE-2026-6916 | Jeg Kit for Elementor <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_content_number_prefix' Shortcode Attributejegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | Medium6.4 |
| CVE-2025-68906 | WordPress JNews - Video plugin <= 11.0.2 - Reflected Cross Site Scripting (XSS) vulnerabilityjegtheme · JNews - Video | High7.1 |
| CVE-2025-68905 | WordPress JNews - Pay Writer plugin <= 11.0.0 - Local File Inclusion vulnerabilityjegtheme · JNews - Pay Writer | High7.5 |
| CVE-2025-68904 | WordPress JNews - Frontend Submit plugin <= 11.0.0 - Reflected Cross Site Scripting (XSS) vulnerabilityjegtheme · JNews - Frontend Submit | High7.1 |
| CVE-2025-14275 | Jeg Elementor Kit <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widgetjegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | Medium6.4 |
| CVE-2025-67591 | WordPress JNews Paywall plugin < 12.0.1 - Cross Site Request Forgery (CSRF) vulnerabilityjegtheme · JNews Paywall | Medium4.3 |
| CVE-2025-67538 | WordPress JNews Gallery plugin < 12.0.1 - Cross Site Scripting (XSS) vulnerabilityjegtheme · JNews Gallery | Medium6.5 |
| CVE-2025-53573 | WordPress Epic Review Plugin <= 1.0.2 - Cross Site Scripting (XSS) Vulnerabilityjegtheme · Epic Review | High7.1 |
| CVE-2025-39373 | WordPress JNews Theme <= 11.6.16 - Broken Access Control Vulnerabilityjegtheme · JNews | Medium5.3 |
| CVE-2025-2944 | Jeg Elementor Kit <= 2.6.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Button and Countdown Widgetsjegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | Medium6.4 |
| CVE-2024-13217 | Jeg Elementor Kit <= 2.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via Countdown and Off-Canvasjegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | Medium4.3 |
| CVE-2024-10308 | Jeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Countdown Widgetjegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | Medium6.4 |
| CVE-2024-8899 | Jeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Sensitive Information Exposure via sg_content_templatejegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | Medium4.3 |
| CVE-2024-47390 | WordPress Jeg Elementor Kit plugin <= 2.6.8 - Cross Site Scripting (XSS) vulnerabilityjegtheme · Jeg Elementor Kit | Medium6.5 |
| CVE-2024-6804 | Jeg Elementor Kit <= 2.6.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Filejegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | Medium6.4 |
| CVE-2024-4479 | Jeg Elementor Kit <= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Tabs and JKit - Accordion Widgetsjegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | Medium6.4 |
| CVE-2024-3161 | Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widgetjegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | Medium6.4 |
| CVE-2024-3819 | Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Bannerjegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | Medium6.4 |
| CVE-2024-0334 | Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Cross-Site Scripting via Elementor Widget URL Custom Attributesjegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | Medium6.4 |
| CVE-2024-32721 | WordPress Jeg Elementor Kit plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerabilityJegtheme · Jeg Elementor Kit | Medium6.5 |
| CVE-2024-3162 | Jeg Elementor Kit <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonialjegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | Medium6.4 |
| CVE-2024-1327 | Jeg Elementor Kit <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Boxjegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | Medium6.4 |
| CVE-2024-29101 | WordPress Jeg Elementor Kit plugin <= 2.6.2 - Cross Site Scripting (XSS) vulnerabilityJegtheme · Jeg Elementor Kit | Medium6.5 |
| CVE-2024-1326 | Jeg Elementor Kit <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tagsjegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | Medium6.4 |
| CVE-2022-3794 | Jeg Elementor Kit <= 2.5.6 - Authorization Bypassjegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | Medium5.4 |
| CVE-2022-3805 | Jeg Elementor Kit <= 2.5.6 - Unauthenticated Authorization Bypassjegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | High8.6 |