Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 10 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,310All CVEsplus 19,140 rejected
- 461Last 24 hours2,729 in the last 7 days
- 16,919Last 30 days1,560 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 6 | 4 | 0 | 0 | 11 | 29 |
| 2025 | 1 | 1 | 7 | 0 | 0 | 9 | 18 |
| 2024 | 0 | 3 | 4 | 0 | 0 | 7 | 9 |
| 2023 | 0 | 1 | 0 | 0 | 0 | 1 | 2 |
| 2022 | 1 | 0 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-96330 | WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerabilitytagDiv · tagDiv Opt-In Builder | Critical9.3 |
| CVE-2026-96329 | WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerabilitytagDiv · tagDiv Opt-In Builder | High8.5 |
| CVE-2026-12561 | tagDiv Composer <= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site ScriptingtagDiv · tagDiv Composer | Medium6.4 |
| CVE-2026-57734 | WordPress tagDiv Composer plugin <= 5.4.3 - Reflected Cross Site Scripting (XSS) vulnerabilitytagDiv · tagDiv Composer | High7.1 |
| CVE-2026-57733 | WordPress tagDiv Cloud Library plugin <= 3.9.4 - Cross Site Scripting (XSS) vulnerabilitytagDiv · tagDiv Cloud Library | High7.1 |
| CVE-2026-57732 | WordPress tagDiv Opt-In Builder plugin <= 1.7.4 - Cross Site Scripting (XSS) vulnerabilitytagDiv · tagDiv Opt-In Builder | High7.1 |
| CVE-2026-39712 | WordPress tagDiv Composer plugin <= 5.4.3 - Arbitrary Shortcode Execution vulnerabilitytagDiv · tagDiv Composer | Medium5.3 |
| CVE-2026-39692 | WordPress tagDiv Composer plugin <= 5.4.3 - Cross Site Scripting (XSS) vulnerabilitytagDiv · tagDiv Composer | Medium6.5 |
| CVE-2025-53222 | WordPress tagDiv Opt-In Builder plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerabilitytagDiv · tagDiv Opt-In Builder | High7.1 |
| CVE-2025-50001 | WordPress tagDiv Composer plugin <= 5.4.2 - Reflected Cross Site Scripting (XSS) vulnerabilitytagDiv · tagDiv Composer | High7.1 |
| CVE-2025-50005 | WordPress tagDiv Composer plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerabilitytagDiv · tagDiv Composer | Medium6.5 |
| CVE-2025-62032 | WordPress tagDiv Cloud Library plugin < 3.9.2 - Cross Site Scripting (XSS) vulnerabilitytagDiv · tagDiv Cloud Library | Medium6.5 |
| CVE-2025-62031 | WordPress tagDiv Composer plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerabilitytagDiv · tagDiv Composer | High7.1 |
| CVE-2025-62030 | WordPress tagDiv Composer plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerabilitytagDiv · tagDiv Composer | Medium6.5 |
| CVE-2025-2806 | tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'data'tagDiv · tagDiv Composer | Medium6.1 |
| CVE-2025-3510 | tagDiv Composer <= 5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple ShortcodestagDiv · tagDiv Composer | Medium6.4 |
| CVE-2025-2890 | tagDiv Opt-In Builder <= 1.7 - Authenticated (Subscriber+) SQL Injection via subscriptionCouponId ParameterTagDiv · tagDiv Opt-In Builder | Medium6.5 |
| CVE-2024-13645 | TagDiv Composer <= 5.3 - Unauthenticated Arbitrary PHP Object InstantiationtagDiv · tagDiv Composer | Critical9.8 |
| CVE-2025-1705 | tagDiv Composer <= 5.3 - Cross-Site Request Forgery to Stored Cross-Site ScriptingtagDiv · tagDiv Composer | Medium6.1 |
| CVE-2025-2804 | tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'account_id' and 'account_username'tagDiv · tagDiv Composer | Medium6.1 |
| CVE-2024-3886 | tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[]tagDiv · tagDiv Composer | Medium6.1 |
| CVE-2024-5212 | tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[]tagDiv · tagDiv Composer | Medium6.1 |
| CVE-2023-3416 | tagDiv Opt-In Builder <= 1.4.4 - Authenticated (Admin+) SQL InjectionTagDiv · tagDiv Opt-In Builder | High7.2 |
| CVE-2023-3419 | tagDiv Opt-In Builder <= 1.4.4 - Authenticated (Admin+) SQL InjectionTagDiv · tagDiv Opt-In Builder | High7.2 |
| CVE-2024-3813 | tagDiv Composer <= 4.8 - Authenticated (Contributor+) Local File Inclusion via ShortcodetagDiv · tagDiv Composer | High8.8 |
| CVE-2024-3814 | tagDiv Composer <= 4.8 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment MetatagDiv · tagDiv Composer | Medium5.5 |
| CVE-2024-3888 | tagDiv Composer <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via button ShortcodetagDiv · tagDiv Composer | Medium6.4 |
| CVE-2023-39166 | WordPress tagDiv Composer Plugin < 4.4 is vulnerable to Cross Site Request Forgery (CSRF)tagDiv · tagDiv Composer | High7.1 |
| CVE-2022-3477 | tagDiv Composer < 3.5 - Unauthenticated Account TakeovertagDiv · tagDiv Composer | Critical9.8 |