Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,298All CVEsplus 19,140 rejected
- 452Last 24 hours2,722 in the last 7 days
- 16,916Last 30 days1,557 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 8 | 15 | 0 | 0 | 25 | 37 |
| 2025 | 0 | 0 | 3 | 0 | 0 | 3 | 12 |
| 2024 | 1 | 0 | 8 | 0 | 0 | 9 | 9 |
| Title | ||
|---|---|---|
| CVE-2026-25450 | WordPress User Registration plugin <= 5.3.0 - Broken Access Control vulnerabilityThemeGrill · User Registration | Medium5.3 |
| CVE-2026-25467 | WordPress User Registration plugin <= 5.3.0 - Content Injection vulnerabilityThemeGrill · User Registration | Medium5.3 |
| CVE-2026-108485 | WordPress eStore theme <= 1.6.13 - Cross Site Scripting (XSS) vulnerabilityThemeGrill · eStore | High7.1 |
| CVE-2026-105882 | WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerabilityThemeGrill · User Registration | Medium6.5 |
| CVE-2026-109692 | WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerabilityThemeGrill · User Registration | High7.1 |
| CVE-2026-109699 | WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerabilityThemeGrill · User Registration | Medium5.4 |
| CVE-2026-106598 | WordPress User Registration plugin <= 5.2.8 - Sensitive Data Exposure vulnerabilityThemeGrill · User Registration | Medium5.3 |
| CVE-2026-105881 | WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerabilityThemeGrill · User Registration | Medium6.5 |
| CVE-2026-103076 | WordPress User Registration plugin <= 5.2.8 - Cross Site Request Forgery (CSRF) vulnerabilityThemeGrill · User Registration | Medium5.4 |
| CVE-2026-106597 | WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerabilityThemeGrill · User Registration | Medium5.3 |
| CVE-2026-96334 | WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerabilityThemeGrill · User Registration | Medium5.6 |
| CVE-2026-78290 | WordPress Magazine Blocks plugin <= 1.8.6 - Cross Site Scripting (XSS) vulnerabilityThemeGrill · Magazine Blocks | Medium6.5 |
| CVE-2026-66606 | WordPress SmartSMTP plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerabilityThemeGrill · SmartSMTP | High7.1 |
| CVE-2026-73996 | WordPress Masteriyo - LMS plugin <= 2.3.2 - Arbitrary File Upload vulnerabilityThemeGrill · Masteriyo - LMS | Critical9.8 |
| CVE-2025-9266 | Accelerate <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installationthemegrill · Accelerate | Medium4.3 |
| CVE-2026-4804 | Zakra <= 4.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta REST APIthemegrill · Zakra | Medium6.4 |
| CVE-2026-52701 | WordPress User Registration plugin <= 5.2.2 - Broken Access Control vulnerabilityThemegrill · User Registration | Medium6.5 |
| CVE-2026-54807 | WordPress Registration Form for WooCommerce plugin <= 1.0.9 - Privilege Escalation vulnerabilityThemeGrill · Registration Form for WooCommerce | Critical9.8 |
| CVE-2026-49081 | WordPress User Registration Stripe plugin <= 1.3.12 - Broken Access Control vulnerabilityThemeGrill · User Registration Stripe | High8.2 |
| CVE-2026-40726 | WordPress User Registration Stripe plugin <= 1.3.14 - Broken Access Control vulnerabilityThemeGrill · User Registration Stripe | High8.2 |
| CVE-2026-42743 | WordPress Masteriyo - LMS plugin <= 2.1.8 - Broken Authentication vulnerabilityThemeGrill · Masteriyo - LMS | Medium6.5 |
| CVE-2026-39524 | WordPress Masteriyo - LMS plugin <= 2.1.5 - Payment Bypass vulnerabilityThemeGrill · Masteriyo - LMS | High7.5 |
| CVE-2026-25425 | WordPress User Registration plugin <= 5.1.2 - Broken Access Control vulnerabilityThemeGrill · User Registration | High7.5 |
| CVE-2026-49111 | WordPress Masteriyo - LMS plugin <= 2.2.0 - Privilege Escalation vulnerabilityThemeGrill · Masteriyo - LMS | High8.8 |
| CVE-2026-40730 | WordPress ThemeGrill Demo Importer plugin <= 2.0.0.6 - Broken Access Control vulnerabilityThemeGrill · ThemeGrill Demo Importer | Medium5.3 |
| CVE-2025-9331 | Spacious <= 1.9.11 - Missing Authorization to Autheticated (Subscriber+) Demo Data Importthemegrill · Spacious | Medium4.3 |
| CVE-2025-9202 | ColorMag <= 4.0.19 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installationthemegrill · ColorMag | Medium4.3 |
| CVE-2025-8595 | Zakra <= 4.1.5 - Missing Authorization to Subscriber+ Demo Importthemegrill · Zakra | Medium4.3 |
| CVE-2020-36837 | ThemeGrill Demo Importer 1.3.4 - 1.6.1 - Authorization Bypass to Site Resetthemegrill · ThemeGrill Demo Importer | Critical9.9 |
| CVE-2024-39629 | WordPress Himalayas theme <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilityThemeGrill · Himalayas | Medium5.9 |
| CVE-2024-37432 | WordPress Esteem theme <= 1.5.0 - Cross Site Scripting (XSS) vulnerabilityThemeGrill · Esteem | Medium5.9 |
| CVE-2024-34571 | WordPress Himalayas theme <= 1.3.0 - Cross Site Scripting (XSS) vulnerabilityThemeGrill · Himalayas | Medium6.5 |
| CVE-2024-33540 | WordPress ColorNews theme <= 1.2.6 - Cross Site Scripting (XSS) vulnerabilityThemeGrill · ColorNews | Medium6.5 |
| CVE-2024-2500 | ColorMag <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Namethemegrill · ColorMag | Medium6.4 |
| CVE-2024-1462 | Maintenance Page <= 1.0.8 - Security Mechanism Bypass via REST APIthemegrill · Maintenance Page | Medium5.3 |
| CVE-2024-1370 | Maintenance Page <= 1.0.8 - Missing Authorization to Sensitive Information Exposurethemegrill · Maintenance Page | Medium5.3 |
| CVE-2024-0679 | ColorMag <= 3.1.2 - Missing Authorization to Arbitrary Plugin Installationthemegrill · ColorMag | Medium6.5 |