Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,976All CVEsplus 19,118 rejected
- 409Last 24 hours2,835 in the last 7 days
- 16,800Last 30 days1,544 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 3 | 5 | 0 | 0 | 8 | 32 |
| 2025 | 0 | 2 | 4 | 0 | 0 | 6 | 24 |
| 2024 | 0 | 9 | 8 | 0 | 0 | 17 | 18 |
| 2023 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-18561 | Unlimited Elements For Elementor <= 2.0.16 - Unauthenticated SQL Injectionunitecms · Unlimited Elements For Elementor | High7.5 |
| CVE-2026-77150 | Unlimited Elements For Elementor <= 2.0.16 - Reflected Cross-Site Scriptingunitecms · Unlimited Elements For Elementor | Medium6.1 |
| CVE-2026-75586 | Unlimited Elements For Elementor <= 2.0.17 - Reflected Cross-Site Scripting via 'formData[id]' Parameterunitecms · Unlimited Elements For Elementor | Medium6.1 |
| CVE-2026-5486 | Unlimited Elements For Elementor <= 2.0.7 - Authenticated (Contributor+) SQL Injection via 'filter_search' Parameterunitecms · Unlimited Elements For Elementor | Medium6.5 |
| CVE-2024-13362 | Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parametersebet · Go Fetch Jobs (for WP Job Manager) | Medium6.1 |
| CVE-2026-4659 | Unlimited Elements For Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read via Path Traversal in Repeater JSON/CSV URL with Path Traversalunitecms · Unlimited Elements For Elementor | High7.5 |
| CVE-2026-2724 | Unlimited Elements For Elementor <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via Form Entry Fieldsunitecms · Unlimited Elements For Elementor | High7.2 |
| CVE-2025-14274 | Unlimited Elements for Elementor <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Border Hero Widgetunitecms · Unlimited Elements For Elementor | Medium5.4 |
| CVE-2025-14476 | Doubly <= 1.0.46 - Authenticated (Subscriber+) PHP Object Injection via ZIP File Importunitecms · Doubly – Cross Domain Copy Paste for WordPress | High8.8 |
| CVE-2025-13692 | Unlimited Elements For Elementor and Unlimited Elements For Elementor (Premium) <= 2.0 - Unauthenticated Stored Cross-Site Scripting via SVG File Uploadunitecms · Unlimited Elements for Elementor (Premium) | High7.2 |
| CVE-2025-8603 | Unlimited Elements For Elementor <= 1.5.148 - Authenticated (Contributor+) Stored Cross-Site Scriptingunitecms · Unlimited Elements For Elementor | Medium6.4 |
| CVE-2025-1663 | Unlimited Elements For Elementor <= 1.5.142 - Authenticated (Contributor+) Stored Cross-Site Scriptingunitecms · Unlimited Elements For Elementor | Medium6.4 |
| CVE-2024-13155 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.140 - Authenticated (Contributor+) Stored Cross-Site Scripting via Transparent Split Hero Widgetunitecms · Unlimited Elements For Elementor | Medium6.4 |
| CVE-2024-13153 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.135 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgetsunitecms · Unlimited Elements For Elementor | Medium6.4 |
| CVE-2024-10784 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.126 - Authenticated (Contributor+) Stored Cross-Site Scriptingunitecms · Unlimited Elements For Elementor | Medium6.4 |
| CVE-2022-4974 | Freemius SDK <= 2.4.2 - Missing Authorization Checksdashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress | Medium6.3 |
| CVE-2024-6315 | Blox Page Builder <= 1.0.65 - Authenticated (Contributor+) Arbitrary File Uploadunitecms · Blox Page Builder | High8.8 |
| CVE-2024-6169 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'username'unitecms · Unlimited Elements For Elementor | Medium6.4 |
| CVE-2024-6170 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'email'unitecms · Unlimited Elements For Elementor | Medium6.4 |
| CVE-2024-6166 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Time-Based SQL Injectionunitecms · Unlimited Elements For Elementor | High8.8 |
| CVE-2024-6171 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - IP Address Spoofing to Antispam Bypassunitecms · Unlimited Elements For Elementor | Medium5.3 |
| CVE-2024-5329 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.109 - Authenticated (Contributor+) Blind SQL Injection via data[addonID] Parameterunitecms · Unlimited Elements For Elementor | High8.8 |
| CVE-2024-3190 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.107 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Fieldunitecms · Unlimited Elements For Elementor | Medium5.4 |
| CVE-2023-6743 | Unlimited Elements for Elementor <= 1.5.89 - Authenticated(Contributor+) Remote Code Execution via template importunitecms · Unlimited Elements For Elementor | High8.8 |
| CVE-2024-4779 | Unlimited Elements for Elementor <= 1.5.107 - Authenticated (Contributor+) SQL Injection via data[post_ids][0]unitecms · Unlimited Elements For Elementor | High8.8 |
| CVE-2024-3055 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Contributor+) SQL Injectionunitecms · Unlimited Elements For Elementor | High8.8 |
| CVE-2024-3547 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Reflected Cross-Site Scriptingunitecms · Unlimited Elements For Elementor | Medium6.1 |
| CVE-2024-2662 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Admin+) Command Injectionunitecms · Unlimited Elements For Elementor | High7.2 |
| CVE-2024-0367 | Unlimited Elements For Elementor <= 1.5.96 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Linkunitecms · Unlimited Elements For Elementor | Medium6.4 |
| CVE-2024-1710 | Addon Library <= 1.3.76 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Uploadunitecms · Addon Library | High8.8 |
| CVE-2023-6925 | Unlimited Addons for WPBakery Page Builder <= 1.0.42 - Authenticated (Editor+) Arbitrary File Uploadunitecms · Unlimited Addons for WPBakery Page Builder | High7.2 |
| CVE-2023-3295 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.66 - Authenticated (Contributor+) Arbitrary File Uploadunitecms · Unlimited Elements For Elementor | High8.8 |