Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,074All CVEsplus 19,119 rejected
- 507Last 24 hours2,869 in the last 7 days
- 16,887Last 30 days1,546 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 0 | 0 | 0 | 0 | 1 | 16 |
| 2025 | 0 | 4 | 1 | 0 | 0 | 5 | 15 |
| 2024 | 0 | 1 | 4 | 0 | 0 | 5 | 10 |
| 2023 | 0 | 1 | 4 | 0 | 0 | 5 | 5 |
| Title | ||
|---|---|---|
| CVE-2026-66680 | WordPress Locatoraid Store Locator plugin <= 3.9.72 - SQL Injection vulnerabilityplainware · Locatoraid Store Locator | Critical9.3 |
| CVE-2025-62140 | WordPress Locatoraid Store Locator plugin <= 3.9.68 - Cross Site Scripting (XSS) vulnerabilityplainware · Locatoraid Store Locator | Medium5.9 |
| CVE-2025-32623 | WordPress PlainInventory plugin <= 3.1.9 - CSRF to Stored XSS vulnerabilityplainware · PlainInventory | High7.1 |
| CVE-2025-24557 | WordPress PlainInventory plugin <= 3.1.5 - Reflected Cross Site Scripting (XSS) vulnerabilityplainware · PlainInventory | High7.1 |
| CVE-2024-56283 | WordPress Locatoraid Store Locator Plugin <= 3.9.50 - PHP Object Injection vulnerabilityplainware · Locatoraid Store Locator | High8.1 |
| CVE-2024-56291 | WordPress PlainInventory – Inventory Management Plugin Plugin <= 3.1.6 - PHP Object Injection vulnerabilityplainware · PlainInventory | High8.1 |
| CVE-2024-9652 | Locatoraid Store Locator <= 3.9.47 - Reflected Cross-Site Scriptingplainware · Locatoraid Store Locator | Medium6.1 |
| CVE-2024-44040 | WordPress ShiftController Employee Shift Scheduling plugin <= 4.9.64 - Cross Site Scripting (XSS) vulnerabilityplainware · ShiftController Employee Shift Scheduling | Medium5.9 |
| CVE-2024-9435 | ShiftController Employee Shift Scheduling <= 4.9.66 - Reflected Cross-Site Scriptingplainware · ShiftController Employee Shift Scheduling | Medium6.1 |
| CVE-2024-4733 | ShiftController Employee Shift Scheduling <= 4.9.57 - Authenticated (Contributor+) PHP Object Injectionplainware · ShiftController Employee Shift Scheduling | High7.5 |
| CVE-2024-30181 | WordPress Locatoraid Store Locator plugin <= 3.9.30 - Cross Site Scripting (XSS) vulnerabilityPlainware · Locatoraid Store Locator | Medium5.9 |
| CVE-2023-32576 | WordPress Locatoraid Store Locator Plugin <= 3.9.18 is vulnerable to Cross Site Scripting (XSS)Plainware · Locatoraid Store Locator | Medium6.5 |
| CVE-2023-29424 | WordPress ShiftController Employee Shift Scheduling Plugin <= 4.9.23 is vulnerable to Cross Site Scripting (XSS)Plainware · ShiftController Employee Shift Scheduling | High7.1 |
| CVE-2023-2031 | Locatoraid Store Locator <= 3.9.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodeplainware · Locatoraid Store Locator | Medium5.4 |
| CVE-2023-1978 | ShiftController Employee Shift Scheduling <= 4.9.25 - Reflected Cross-Site Scripting via Query Stringplainware · ShiftController Employee Shift Scheduling | Medium6.1 |
| CVE-2023-25709 | WordPress Locatoraid Store Locator Plugin <= 3.9.11 is vulnerable to Cross Site Request Forgery (CSRF)Plainware · Locatoraid Store Locator | Medium5.4 |