Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,074All CVEsplus 19,119 rejected
- 507Last 24 hours2,869 in the last 7 days
- 16,887Last 30 days1,546 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 2 | 4 | 0 | 0 | 6 | 18 |
| 2025 | 0 | 1 | 2 | 0 | 0 | 3 | 12 |
| 2024 | 0 | 0 | 9 | 0 | 0 | 9 | 9 |
| Title | ||
|---|---|---|
| CVE-2026-100108 | Social Share Buttons <= 1.30 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'share_url' Network Settingmaxfoundry · Social Share Buttons | Medium6.4 |
| CVE-2026-109702 | WordPress Social Share Buttons plugin <= 1.31 - Cross Site Scripting (XSS) vulnerabilitymaxfoundry · Social Share Buttons | High7.1 |
| CVE-2026-97260 | WordPress MaxGalleria plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerabilitymaxfoundry · MaxGalleria | High7.1 |
| CVE-2026-13245 | MaxButtons <= 9.8.5 - Reflected Cross-Site Scripting via 'view' Parametermaxfoundry · MaxButtons – Create buttons | Medium6.1 |
| CVE-2021-47982 | WordPress Plugin WP-Paginate 2.1.3 Stored XSS via presetmaxfoundry · WP-Paginate | Medium5.1 |
| CVE-2026-2312 | Media Library Folders <= 8.3.6 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Attachment Deletion and Renamemaxfoundry · Media Library Folders | Medium4.3 |
| CVE-2025-39444 | WordPress MaxButtons plugin <= 9.8.3 - Cross Site Scripting (XSS) vulnerabilitymaxfoundry · MaxButtons | Medium5.9 |
| CVE-2025-28933 | WordPress MaxA/B plugin <= 2.2.2 - CSRF to Stored XSS vulnerabilitymaxfoundry · MaxA/B | High7.1 |
| CVE-2025-0935 | Media Library Folders <= 8.3.0 - Missing Authorization to Plugin Settings Changemaxfoundry · Media Library Folders | Medium4.3 |
| CVE-2024-9219 | WordPress Social Share Buttons <= 1.19 - Reflected Cross-Site Scriptingmaxfoundry · Social Share Buttons | Medium6.1 |
| CVE-2024-7858 | Media Library Folders <= 8.2.3 - Missing Authorization on Various Functionsmaxfoundry · Media Library Folders | Medium6.3 |
| CVE-2024-7857 | Media Library Folders <= 8.2.2 - Authenticated (Subscriber+) Second-Order SQL Injectionmaxfoundry · Media Library Folders | Medium6.5 |
| CVE-2024-6499 | WordPress Button Plugin MaxButtons <= 9.7.8 - Full Path Disclosuremaxfoundry · MaxButtons – Create buttons | Medium5.3 |
| CVE-2024-5970 | MaxGalleria <= 6.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via maxgallery_thumb Shortcodemaxfoundry · MaxGalleria | Medium6.4 |
| CVE-2024-3581 | MaxGalleria <= 6.4.2 - Missing Authorizationmaxfoundry · MaxGalleria | Medium4.3 |
| CVE-2024-3615 | Media Library Folders <= 8.2.0 - Reflected Cross-Site Scripting via 's'maxfoundry · Media Library Folders | Medium6.1 |
| CVE-2023-7029 | WordPress Button Plugin MaxButtons <= 9.7.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcodemaxfoundry · MaxButtons – Create buttons | Medium6.4 |
| CVE-2023-6594 | WordPress Button Plugin MaxButtons <= 9.7.4 - Authenticated (Administrator+) Stored Cross-Site Scriptingmaxfoundry · MaxButtons – Create buttons | Medium4.4 |