Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 10 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,986All CVEsplus 19,118 rejected
- 418Last 24 hours2,844 in the last 7 days
- 16,806Last 30 days1,543 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 2 | 7 | 0 | 0 | 9 | 18 |
| 2025 | 0 | 0 | 3 | 0 | 0 | 3 | 9 |
| 2024 | 1 | 2 | 3 | 0 | 0 | 6 | 6 |
| Title | ||
|---|---|---|
| CVE-2026-116410 | WordPress Masteriyo - LMS plugin <= 3.4.3 - Arbitrary Content Deletion vulnerabilitymasteriyo · Masteriyo - LMS | Medium6.5 |
| CVE-2026-62132 | WordPress Masteriyo - LMS plugin <= 3.4.0 - Broken Access Control vulnerabilitymasteriyo · Masteriyo - LMS | Medium5.3 |
| CVE-2026-62107 | WordPress Masteriyo - LMS plugin <= 3.4.0 - PHP Object Injection vulnerabilitymasteriyo · Masteriyo - LMS | High8.8 |
| CVE-2026-8279 | Masteriyo LMS <= 2.2.0 - Missing Authorization to Unauthenticated Arbitrary Course Progress Deletionmasteriyo · Masteriyo LMS – LMS Course Builder, Quizzes & Certificates | Medium5.3 |
| CVE-2026-65463 | WordPress Masteriyo - LMS plugin <= 2.3.1 - Insecure Direct Object References (IDOR) vulnerabilitymasteriyo · Masteriyo - LMS | Medium5.4 |
| CVE-2026-59513 | WordPress Masteriyo - LMS plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerabilitymasteriyo · Masteriyo - LMS | Medium6.5 |
| CVE-2026-11773 | Masteriyo LMS <= 2.2.1 - Missing Authorization to Authenticated (Student+) Arbitrary Course Announcement Modificationmasteriyo · Masteriyo LMS – LMS Course Builder, Quizzes & Certificates | Medium4.3 |
| CVE-2026-5167 | Masteriyo LMS <= 2.1.7 - Unauthenticated Authorization Bypass to Arbitrary Order Completion via Stripe Webhook Endpointmasteriyo · Masteriyo LMS – Online Course Builder for eLearning, LMS & Education | Medium5.3 |
| CVE-2026-4484 | Masteriyo LMS <= 2.1.6 - Missing Authorization to Authenticated (Student+) Privilege Escalation to Administratormasteriyo · Masteriyo LMS – Online Course Builder for eLearning, LMS & Education | High8.8 |
| CVE-2025-64270 | WordPress Masteriyo - LMS plugin <= 2.0.3 - Sensitive Data Exposure vulnerabilitymasteriyo · Masteriyo - LMS | Medium6.5 |
| CVE-2025-54699 | WordPress Masteriyo - LMS Plugin plugin <= 1.18.3 - Cross Site Scripting (XSS) Vulnerabilitymasteriyo · Masteriyo - LMS | Medium6.5 |
| CVE-2024-33939 | WordPress LMS by Masteriyo plugin <= 1.7.3 - Broken Authentication vulnerabilitymasteriyo · Masteriyo - LMS | Medium5.3 |
| CVE-2024-43158 | WordPress Masteriyo LMS plugin <= 1.11.4 - Broken Access Control vulnerabilitymasteriyo · Masteriyo - LMS | High7.5 |
| CVE-2024-43159 | WordPress Masteriyo LMS plugin <= 1.11.6 - Broken Access Control vulnerabilitymasteriyo · Masteriyo - LMS | Medium5.3 |
| CVE-2024-10000 | Masteriyo LMS – eLearning and Online Course Builder for WordPress <= 1.13.3 - Authenticated (Student+) Stored Cross-Site Scripting via Ask a Question Functionalitymasteriyo · Masteriyo LMS – Online Course Builder for eLearning, LMS & Education | Medium6.4 |
| CVE-2024-10008 | Masteriyo LMS – eLearning and Online Course Builder for WordPress <= 1.13.3 - Authenticated (Student+) Missing Authorization to Privilege Escalationmasteriyo · Masteriyo LMS – Online Course Builder for eLearning, LMS & Education | High8.8 |
| CVE-2024-43239 | WordPress Masteriyo LMS plugin <= 1.11.4 - Insecure Direct Object Reference (IDOR) vulnerabilitymasteriyo · Masteriyo - LMS | Medium4.3 |
| CVE-2024-24882 | WordPress LMS by Masteriyo plugin <= 1.7.2 - Privilege Escalation vulnerabilitymasteriyo · Masteriyo - LMS | Critical9.8 |