Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,058All CVEsplus 19,119 rejected
- 491Last 24 hours2,911 in the last 7 days
- 16,876Last 30 days1,544 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 4 | 4 | 0 | 0 | 9 | 31 |
| 2025 | 0 | 6 | 9 | 0 | 0 | 15 | 22 |
| 2024 | 0 | 2 | 2 | 0 | 0 | 4 | 7 |
| 2023 | 0 | 0 | 3 | 0 | 0 | 3 | 3 |
| Title | ||
|---|---|---|
| CVE-2026-97273 | WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.13 - Cross Site Scripting (XSS) vulnerabilityPremmerce · Premmerce Wishlist for WooCommerce | High7.1 |
| CVE-2026-97268 | WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.13 - Cross Site Scripting (XSS) vulnerabilityPremmerce · Premmerce Wishlist for WooCommerce | High7.1 |
| CVE-2026-97272 | WordPress Premmerce Permalink Manager for WooCommerce plugin <= 2.3.13 - Cross Site Scripting (XSS) vulnerabilityPremmerce · Premmerce Permalink Manager for WooCommerce | High7.1 |
| CVE-2026-54849 | WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.11 - SQL Injection vulnerabilityPremmerce · Premmerce Wishlist for WooCommerce | Critical9.3 |
| CVE-2026-6933 | Premmerce Dev Tools <= 2.0 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution via Plugin Creationpremmerce · Premmerce Dev Tools | High8.8 |
| CVE-2024-13362 | Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parametersebet · Go Fetch Jobs (for WP Job Manager) | Medium6.1 |
| CVE-2026-32541 | WordPress Premmerce Redirect Manager plugin <= 1.0.12 - Broken Access Control vulnerabilityPremmerce · Premmerce Redirect Manager | Medium6.5 |
| CVE-2026-0555 | Premmerce <= 1.3.20 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'premmerce_wizard_actions' AJAX Endpointpremmerce · Premmerce | Medium6.4 |
| CVE-2025-13369 | Premmerce WooCommerce Customers Manager <= 1.1.14 - Reflected Cross-Site Scriptingpremmerce · Premmerce WooCommerce Customers Manager | Medium6.1 |
| CVE-2025-13440 | Premmerce Wishlist for WooCommerce <= 1.1.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Wishlist Deletionpremmerce · Premmerce Wishlist for WooCommerce | Medium5.3 |
| CVE-2025-12783 | Premmerce Brands for WooCommerce <= 1.2.13 - Missing Authorization To Authenticated (Subscriber+) Brand Permalink Settings Updatepremmerce · Premmerce Brands for WooCommerce | Medium4.3 |
| CVE-2025-12411 | Premmerce Wholesale Pricing for WooCommerce <= 1.1.10 - Authenticated (Subscriber+) SQL Injectionpremmerce · Premmerce Wholesale Pricing for WooCommerce | High7.1 |
| CVE-2025-60241 | WordPress Premmerce plugin <= 1.3.19 - Local File Inclusion vulnerabilityPremmerce · Premmerce | High7.5 |
| CVE-2025-60194 | WordPress Premmerce Product Search for WooCommerce plugin <= 2.2.4 - Local File Inclusion vulnerabilityPremmerce · Premmerce Product Search for WooCommerce | High7.5 |
| CVE-2025-60193 | WordPress Premmerce User Roles plugin <= 1.0.13 - Local File Inclusion vulnerabilityPremmerce · Premmerce User Roles | High7.5 |
| CVE-2025-60192 | WordPress Premmerce Wholesale Pricing for WooCommerce plugin <= 1.1.10 - Local File Inclusion vulnerabilityPremmerce · Premmerce Wholesale Pricing for WooCommerce | High7.5 |
| CVE-2025-60191 | WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.10 - Local File Inclusion vulnerabilityPremmerce · Premmerce Wishlist for WooCommerce | High7.5 |
| CVE-2025-64291 | WordPress Premmerce User Roles plugin <= 1.0.13 - Cross Site Scripting (XSS) vulnerabilityPremmerce · Premmerce User Roles | Medium5.9 |
| CVE-2025-64290 | WordPress Premmerce Product Search for WooCommerce plugin <= 2.2.4 - Cross Site Request Forgery (CSRF) vulnerabilityPremmerce · Premmerce Product Search for WooCommerce | Medium4.3 |
| CVE-2025-64289 | WordPress Premmerce Product Search for WooCommerce plugin <= 2.2.7 - Cross Site Scripting (XSS) vulnerabilityPremmerce · Premmerce Product Search for WooCommerce | Medium5.9 |
| CVE-2025-64288 | WordPress Premmerce plugin <= 1.3.19 - Cross Site Request Forgery (CSRF) vulnerabilityPremmerce · Premmerce | Medium4.3 |
| CVE-2025-64285 | WordPress Premmerce Wholesale Pricing for WooCommerce plugin <= 1.1.10 - Broken Access Control vulnerabilityPremmerce · Premmerce Wholesale Pricing for WooCommerce | Medium5.4 |
| CVE-2025-62890 | WordPress Premmerce Brands for WooCommerce plugin <= 1.2.13 - Cross Site Request Forgery (CSRF) vulnerabilityPremmerce · Premmerce Brands for WooCommerce | Medium4.3 |
| CVE-2025-62883 | WordPress Premmerce User Roles plugin <= 1.0.13 - Broken Access Control vulnerabilityPremmerce · Premmerce User Roles | Medium4.3 |
| CVE-2023-41130 | WordPress Premmerce User Roles plugin <= 1.0.12 - Broken Access Control vulnerabilityPremmerce · Premmerce User Roles | High8.1 |
| CVE-2022-4974 | Freemius SDK <= 2.4.2 - Missing Authorization Checksdashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress | Medium6.3 |
| CVE-2024-31359 | WordPress Premmerce Product Filter for WooCommerce plugin <= 3.7.2 - Broken Access Control vulnerabilityPremmerce · Premmerce Product Filter for WooCommerce | Medium4.3 |
| CVE-2024-27971 | WordPress Premmerce Permalink Manager for WooCommerce plugin <= 2.3.10 - Local File Inclusion vulnerabilityPremmerce · Premmerce Permalink Manager for WooCommerce | High8.3 |
| CVE-2023-23719 | WordPress Premmerce Plugin <= 1.3.17 is vulnerable to Cross Site Request Forgery (CSRF)Premmerce · Premmerce | Medium5.4 |
| CVE-2023-23787 | WordPress Premmerce Redirect Manager Plugin <= 1.0.9 is vulnerable to Cross Site Request Forgery (CSRF)Premmerce · Premmerce Redirect Manager | Medium4.3 |
| CVE-2023-23789 | WordPress Premmerce Redirect Manager Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)Premmerce · Premmerce Redirect Manager | Medium5.9 |