Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,167All CVEsplus 19,120 rejected
- 475Last 24 hours2,785 in the last 7 days
- 16,854Last 30 days1,538 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 2 | 2 | 0 | 0 | 4 | 23 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 19 |
| 2024 | 2 | 4 | 5 | 0 | 0 | 11 | 19 |
| 2023 | 1 | 3 | 3 | 1 | 0 | 8 | 8 |
| Title | ||
|---|---|---|
| CVE-2026-105436 | WordPress MainWP Child plugin <= 6.2.1 - Deserialization of untrusted data vulnerabilityMainWP · MainWP Child | High8.8 |
| CVE-2026-57327 | WordPress MainWP plugin <= 6.1.1 - Broken Access Control vulnerabilitymainwp · MainWP | Medium6.3 |
| CVE-2026-27366 | WordPress MainWP Child plugin <= 6.1.1 - Broken Access Control vulnerabilityMainWP · MainWP Child | High7.5 |
| CVE-2026-4299 | MainWP Child Reports <= 2.2.6 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure via Heartbeat APImainwp · MainWP Child Reports | Medium5.3 |
| CVE-2024-10783 | MainWP Child <= 5.3.3 - Missing Authorization to Unauthenticated Privilege Escalationmainwp · MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites | High8.1 |
| CVE-2016-15041 | MainWP Dashboard – The Private WordPress Manager for Multiple Website Maintenance Plugin <= 3.1.2 - Stored Cross-Site Scriptingmainwp · MainWP Dashboard: Self-hosted WordPress Management for Agencies | High7.2 |
| CVE-2024-7492 | MainWP Child Reports <= 2.2 - Cross-Site Request Forgery to Arbitrary Options Updatemainwp · MainWP Child Reports | High8.8 |
| CVE-2023-23640 | WordPress MainWP UpdraftPlus Extension Plugin <= 4.0.6 - Subscriber+ Arbitrary Plugin Activation VulnerabilityMainWP · MainWP UpdraftPlus Extension | Medium5.4 |
| CVE-2023-23639 | WordPress MainWP Staging Extension Plugin <= 4.0.3 - Subscriber+ Arbitrary Plugin Activation VulnerabilityMainWP · MainWP Staging Extension | Medium5.4 |
| CVE-2023-23645 | WordPress MainWP Code Snippets Extension Plugin <= 4.0.2 - Subscriber+ Arbitrary PHP Code Injection/Execution VulnerabilityMainWP · MainWP Code Snippets Extension | Critical9.9 |
| CVE-2024-33680 | WordPress MainWP Child Reports plugin <= 2.1.1 - Cross Site Request Forgery (CSRF) vulnerabilityMainWP · MainWP Child Reports | Medium5.4 |
| CVE-2023-23649 | WordPress MainWP Links Manager Extension Plugin <= 2.1 - Unauthenticated PHP Object Injection VulnerabilityMainWP · MainWP Links Manager Extension | High8.1 |
| CVE-2023-23656 | WordPress MainWP File Uploader Extension Plugin <= 4.1 - Unauthenticated Arbitrary File Upload VulnerabilityMainWP · MainWP File Uploader Extension | Critical10.0 |
| CVE-2023-22699 | WordPress MainWP Wordfence Extension Plugin <= 4.0.7 - Subscriber+ Arbitrary Plugin Activation VulnerabilityMainWP · MainWP Wordfence Extension | Medium5.4 |
| CVE-2024-1642 | MainWP Dashboard <= 4.6.0.1 - Cross-Site Request Forgery via posting_bulkmainwp · MainWP Dashboard: Self-hosted WordPress Management for Agencies | Medium4.3 |
| CVE-2023-38519 | WordPress MainWP Plugin <= 4.4.3.3 is vulnerable to SQL InjectionMainWP · MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance | High7.6 |
| CVE-2023-6164 | MainWP Dashboard <= 4.5.1.2 - Authenticated(Administrator+) CSS Injectionmainwp · MainWP Dashboard: Self-hosted WordPress Management for Agencies | Low2.2 |
| CVE-2023-23737 | WordPress MainWP Broken Links Checker Extension Plugin <= 4.0 is vulnerable to SQL InjectionMainWP · MainWP Broken Links Checker Extension | Critical9.3 |
| CVE-2023-23651 | WordPress MainWP Google Analytics Extension Plugin <= 4.0.4 - SQL Injection vulnerabilityMainWP · MainWP Google Analytics Extension | High8.5 |
| CVE-2023-23660 | WordPress MainWP Maintenance Extension Plugin <= 4.1.1 is vulnerable to SQL InjectionMainWP · MainWP Maintenance Extension | High8.5 |
| CVE-2023-3132 | MainWP Child <= 4.4.1.1 - Information Disclosure via Back-Up Filesmainwp · MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites | Medium5.9 |
| CVE-2023-23650 | WordPress MainWP Code Snippets Extension Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)MainWP · MainWP Code Snippets Extension | Medium6.5 |
| CVE-2023-23659 | WordPress MainWP Matomo Extension Plugin <= 4.0.4 is vulnerable to Cross Site Request Forgery (CSRF)MainWP · MainWP Matomo Extension | Medium4.3 |