Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,298All CVEsplus 19,140 rejected
- 453Last 24 hours2,722 in the last 7 days
- 16,916Last 30 days1,557 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 8 | 23 | 12 | 0 | 0 | 43 | 44 |
| 2025 | 1 | 0 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-102802 | Joomla Extension - regularlabs.com - PHP code injection vector in Sourcerer extension < 17.0.1 when used with Articles Anywhere extension < 20.1.1regularlabs.com · Sourcerer Free extension for Joomla | High8.9 |
| CVE-2026-102801 | Joomla Extension - regularlabs.com - Exposure of Sensitive Information to Unauthorized Actor in Users Anywhere extension for Joomla < 3.0.1regularlabs.com · Users Anywhere (Free, Pro) extension for Joomla | Medium5.1 |
| CVE-2026-100750 | Joomla Extension - regularlabs.com - Arbitrary file read / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomlaregularlabs.com · Modules Anywhere (Pro) extension for Joomla | High8.5 |
| CVE-2026-100751 | Joomla Extension - regularlabs.com - Privileged stored XSS via data-rlta-url attributes in Tabs & Accordions (Pro) 2.3.0 - 3.1.0regularlabs.com · Tabs & Accordions (Free, Pro) extension for Joomla | High7.5 |
| CVE-2026-85196 | Joomla Extension - regularlabs.com - Reflected XSS in Articles Anywhere extension for Joomla < 20.0.0, Users Anywhere extension for Joomla < 2.1.0regularlabs.com · Articles Anywhere (Pro) extension for Joomla | Medium5.3 |
| CVE-2026-88852 | Joomla Extension - regularlabs.com - Privileged stored XSS via url option in Snippets Free extension for Joomla < 7.0.0, Snippets Pro extension for Joomla < 11.0.0regularlabs.com · Snippets (Free) extension for Joomla | High7.5 |
| CVE-2026-85190 | Joomla Extension - regularlabs.com - Privileged stored XSS via class option in Quick Index extension for Joomla < 5.0.5regularlabs.com · Quick Index (Free, Pro) extension for Joomla | High7.5 |
| CVE-2026-85192 | Joomla Extension - regularlabs.com - Authenticated, privileged remote code execution in Conditional Content extension for Joomla < 8.0.0regularlabs.com · Conditional Content Pro extension for Joomla | Critical9.4 |
| CVE-2026-85189 | Joomla Extension - regularlabs.com - Privileged stored XSS via executable URL schemes in Modals extension for Joomla < 17.0.0regularlabs.com · Modals (Free, Pro) extension for Joomla | High7.5 |
| CVE-2026-85195 | Joomla Extension - regularlabs.com - Privileged stored XSS via link option in Articles Anywhere extension for Joomla < 20.0.0regularlabs.com · Articles Anywhere (Free, Pro) extension for Joomla | High7.5 |
| CVE-2026-88853 | Joomla Extension - regularlabs.com - Privileged stored XSS via event handler option in Modals Pro extension for Joomla < 17.0.0regularlabs.com · Modals (Pro) extension for Joomla | High7.5 |
| CVE-2026-85191 | Joomla Extension - regularlabs.com - Privileged stored XSS via rtla-alias option in Tabs & Accordions extension for Joomla < 3.1.0regularlabs.com · Tabs & Accordions (Free, Pro) extension for Joomla | High7.5 |
| CVE-2026-85188 | Joomla Extension - regularlabs.com - Database data disclosure in Advanced Module Manager (Free, Pro) < 12.1.0, Conditional Content (Free, Pro) < 8.0.0, Content Templater (Pro) < 14.2.0, ReReplacer (Pro) < 16.2.0 for Joomlaregularlabs.com · Advanced Module Manager (Free, Pro) extension for Joomla | Medium6.9 |
| CVE-2026-74253 | Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer < 16.0.0regularlabs.com · Sourcerer extension for Joomla | Critical10.0 |
| CVE-2026-65713 | Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extensionregularlabs.com · Modals Pro extension for Joomla | Medium6.5 |
| CVE-2026-64873 | Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extensionregularlabs.com · Cache Cleaner Pro extension for Joomla | Critical9.8 |
| CVE-2026-64871 | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Cache Cleaner extensionregularlabs.com · Cache Cleaner extension for Joomla | Medium5.4 |
| CVE-2026-65757 | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extensionregularlabs.com · Modules Anywhere extension for Joomla | High8.1 |
| CVE-2026-65755 | Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extensionregularlabs.com · Articles Anywhere extension for Joomla | High7.5 |
| CVE-2026-65754 | Joomla Extension - regularlabs.com - Insecure path handling in ReReplacer Pro extensionregularlabs.com · ReReplacer PRo extension for Joomla | High7.5 |
| CVE-2026-64875 | Joomla Extension - regularlabs.com - IP spoofing vulnerability in GeoIP extensionregularlabs.com · GeoIP extension for Joomla | Medium6.5 |
| CVE-2026-64876 | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in GeoIP extensionregularlabs.com · GeoIP extension for Joomla | High8.8 |
| CVE-2026-64872 | Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extensionregularlabs.com · Cache Cleaner Pro extension for Joomla | Medium6.5 |
| CVE-2026-65712 | Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extensionregularlabs.com · CDN for Joomla Pro extension for Joomla | Medium6.2 |
| CVE-2026-65756 | Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extensionregularlabs.com · Keyboard Shortcuts extension for Joomla | Medium6.1 |
| CVE-2026-64874 | Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extensionregularlabs.com · Cache Cleaner Pro extension for Joomla | Critical9.8 |
| CVE-2026-64799 | Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensionsregularlabs.com · Articles Anywhere Pro extension for Joomla | High7.5 |
| CVE-2026-65430 | Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extensionregularlabs.com · GeoIP extension for Joomla | High7.5 |
| CVE-2026-65431 | Joomla Extension - regularlabs.com - Zipslip in GeoIP extensionregularlabs.com · GeoIP extension for Joomla | Critical9.8 |
| CVE-2026-64793 | Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensionsregularlabs.com · Articles Anywhere extension for Joomla | Critical9.1 |
| CVE-2026-64794 | Joomla Extension - regularlabs.com - restricted user-data exposure in Users Anywhere and Articles Anywhere extensionsregularlabs.com · Articles Anywhere extension for Joomla | Medium6.5 |
| CVE-2026-64797 | Joomla Extension - regularlabs.com - IP spoofing vulnerability in IP login extensionregularlabs.com · IP Login extension for Joomla | High7.5 |
| CVE-2026-63265 | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpointsregularlabs.com · Advanced Module Manager extension for Joomla | High8.0 |
| CVE-2026-63685 | Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extensionregularlabs.com · DB Replacer extension for Joomla | High8.8 |
| CVE-2026-63280 | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions managerregularlabs.com · Advanced Module Manager extension for Joomla | High8.8 |
| CVE-2026-64796 | Joomla Extension - regularlabs.com - various code injection vectors in Sourcerer extensionregularlabs.com · Sourcerer extension for Joomla | Critical9.8 |
| CVE-2026-63683 | Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions managerregularlabs.com · Advanced Module Manager extension for Joomla | High7.5 |
| CVE-2026-64798 | Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extensionregularlabs.com · IP Login extension for Joomla | Critical9.1 |
| CVE-2026-64795 | Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensionsregularlabs.com · Modals extension for Joomla | Medium5.4 |
| CVE-2026-64792 | Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensionsregularlabs.com · Articles Anywhere extension for Joomla | High7.5 |
| CVE-2026-63281 | Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions managerregularlabs.com · Advanced Module Manager extension for Joomla | Medium4.8 |
| CVE-2026-64791 | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Managerregularlabs.com · Regular Labs Extension Manager extension for Joomla | High8.8 |
| CVE-2026-63684 | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extensionregularlabs.com · Content Templater extension for Joomla | High8.8 |
| CVE-2025-22204 | Extension - regularlabs.com - Remote code execution vulnerability in the Sourcerer extensions < 12.0.0 for Joomlaregularlabs.com · Sourcerer for Joomla | Critical9.8 |