Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,292All CVEsplus 19,140 rejected
- 451Last 24 hours2,724 in the last 7 days
- 16,914Last 30 days1,557 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 1 | 3 | 0 | 0 | 4 | 27 |
| 2025 | 1 | 0 | 5 | 0 | 0 | 6 | 23 |
| 2024 | 0 | 7 | 8 | 0 | 0 | 15 | 17 |
| 2023 | 0 | 1 | 0 | 1 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-14882 | Brizy <= 2.8.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'brizy-compiled-sections' Post Metathemefusecom · Brizy – Page Builder | Medium6.4 |
| CVE-2026-2585 | Brizy – Page Builder <= 2.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'rootAttributes' Parameterthemefusecom · Brizy – Page Builder | Medium6.4 |
| CVE-2026-5324 | Brizy – Page Builder <= 2.8.11 - Unauthenticated Stored Cross-Site Scripting via FileUpload Field Valuethemefusecom · Brizy – Page Builder | High7.2 |
| CVE-2026-32408 | WordPress Brizy plugin <= 2.7.23 - Broken Access Control vulnerabilitythemefusecom · Brizy | Medium4.3 |
| CVE-2025-0969 | Brizy – Page Builder <= 2.7.16 - Authenticated (Contributor+) Sensitive Information Exposure via get_users Functionthemefusecom · Brizy – Page Builder | Medium6.5 |
| CVE-2025-58594 | WordPress Brizy Plugin <= 2.7.12 - Broken Access Control Vulnerabilitythemefusecom · Brizy | Medium4.3 |
| CVE-2025-4370 | Brizy <= 2.6.20 - Missing Authorization to Unauthenticated Limited File Uploadthemefusecom · Brizy – Page Builder | Medium5.3 |
| CVE-2025-32198 | WordPress Brizy plugin <= 2.7.7 - Cross Site Scripting (XSS) vulnerabilitythemefusecom · Brizy | Medium6.5 |
| CVE-2024-10322 | Brizy – Page Builder <= 2.6.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadthemefusecom · Brizy – Page Builder | Medium6.4 |
| CVE-2024-10960 | Brizy – Page Builder <= 2.6.4 - Authenticated (Contributor+) Arbitrary File Upload via storeUploadsthemefusecom · Brizy – Page Builder | Critical9.9 |
| CVE-2024-51645 | WordPress ThemeFuse Maintenance Mode plugin <= 1.1.3 - CSRF to Stored XSS vulnerabilitythemefusecom · ThemeFuse Maintenance Mode | High7.1 |
| CVE-2024-6254 | Brizy – Page Builder <= 2.5.1 - Cross-Site Request Forgerythemefusecom · Brizy – Page Builder | Medium4.3 |
| CVE-2024-3242 | Brizy – Page Builder <= 2.4.44 - Authenticated (Contributor+) Arbitrary File Uploadthemefusecom · Brizy – Page Builder | High8.8 |
| CVE-2024-1937 | Brizy – Page Builder <= 2.4.44 - Missing Authorization to Authenticated (Contributor+) Post Modificationthemefusecom · Brizy – Page Builder | High7.1 |
| CVE-2024-1164 | Brizy – Page Builder <= 2.4.43 - Authenticated(Contributor+) Stored Cross-Site Scripting via Form Functionalitythemefusecom · Brizy – Page Builder | Medium6.4 |
| CVE-2024-3667 | Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget Link To URLthemefusecom · Brizy – Page Builder | High7.4 |
| CVE-2024-1940 | Brizy – Page Builder <= 2.4.41 - Authenticated(Contributor+) Stored Cross-Site Scriptingthemefusecom · Brizy – Page Builder | High7.1 |
| CVE-2024-2087 | Brizy – Page Builder <= 2.4.43 - Unauthenticated Stored Cross-Site Scripting via Formthemefusecom · Brizy – Page Builder | High7.2 |
| CVE-2024-1161 | Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributesthemefusecom · Brizy – Page Builder | Medium6.4 |
| CVE-2024-3711 | Brizy – Page Builder <= 2.4.43 - Missing Authorizationthemefusecom · Brizy – Page Builder | Medium4.3 |
| CVE-2024-1291 | Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scriptingthemefusecom · Brizy – Page Builder | Medium6.4 |
| CVE-2024-1311 | Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Arbitrary File Uploadthemefusecom · Brizy – Page Builder | High8.8 |
| CVE-2024-1293 | Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scriptingthemefusecom · Brizy – Page Builder | Medium6.4 |
| CVE-2024-1296 | Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scriptingthemefusecom · Brizy – Page Builder | Medium6.4 |
| CVE-2024-1165 | Brizy – Page Builder <= 2.4.39 - Authenticated (Contributor+) Directory Traversalthemefusecom · Brizy – Page Builder | Medium4.3 |
| CVE-2020-36714 | Brizy < 1.0.126 - Authorization Bypass to Settings Updatesthemefusecom · Brizy – Page Builder | High7.4 |
| CVE-2023-2897 | Brizy Page Builder <= 2.4.18 - IP Address Spoofing to Protection Mechanism Bypassthemefusecom · Brizy – Page Builder | Low3.7 |