Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,359All CVEsplus 19,141 rejected
- 467Last 24 hours2,745 in the last 7 days
- 16,936Last 30 days1,563 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 5 | 3 | 0 | 0 | 9 | 33 |
| 2025 | 5 | 16 | 3 | 0 | 0 | 24 | 24 |
| Title | ||
|---|---|---|
| CVE-2026-28150 | WordPress Golo Framework plugin < 1.7.5 - Local File Inclusion vulnerabilityuxper · Golo Framework | High8.1 |
| CVE-2026-65525 | WordPress Civi Framework plugin <= 2.2.0 - Broken Access Control vulnerabilityuxper · Civi Framework | Medium5.3 |
| CVE-2026-65476 | WordPress Civi theme <= 2.2.4 - Broken Access Control vulnerabilityuxper · Civi | Medium5.3 |
| CVE-2026-57799 | WordPress Nuss theme <= 1.3.6 - Local File Inclusion vulnerabilityuxper · Nuss | High7.5 |
| CVE-2026-57794 | WordPress Golo Framework plugin <= 1.7.3 - Local File Inclusion vulnerabilityuxper · Golo Framework | High7.5 |
| CVE-2026-27051 | WordPress Golo theme <= 1.7.0 - Privilege Escalation vulnerabilityuxper · Golo | Critical9.8 |
| CVE-2026-23973 | WordPress Golo theme < 1.7.5 - Reflected Cross Site Scripting (XSS) vulnerabilityuxper · Golo | High7.1 |
| CVE-2026-23975 | WordPress Golo theme < 1.7.5 - Local File Inclusion vulnerabilityuxper · Golo | High7.5 |
| CVE-2026-23974 | WordPress Golo theme < 1.7.5 - Broken Access Control vulnerabilityuxper · Golo | Medium5.3 |
| CVE-2025-52739 | WordPress Sala theme <= 1.1.3 - Cross Site Scripting (XSS) vulnerabilityuxper · Sala | High7.1 |
| CVE-2025-62037 | WordPress Togo theme < 1.0.4 - Broken Access Control vulnerabilityuxper · Togo | Medium6.5 |
| CVE-2025-62036 | WordPress Togo theme < 1.0.4 - Cross Site Scripting (XSS) vulnerabilityuxper · Togo | High7.1 |
| CVE-2025-62035 | WordPress Togo theme < 1.0.4 - PHP Object Injection vulnerabilityuxper · Togo | High8.8 |
| CVE-2025-62034 | WordPress Togo theme < 1.0.4 - Privilege Escalation vulnerabilityuxper · Togo | High8.8 |
| CVE-2025-62033 | WordPress Togo theme < 1.0.4 - Broken Access Control vulnerabilityuxper · Togo | Medium6.5 |
| CVE-2025-54709 | WordPress Sala Theme <= 1.1.6 - Local File Inclusion Vulnerabilityuxper · Sala | High8.1 |
| CVE-2025-54725 | WordPress Golo Theme <= 1.7.0 - Broken Authentication Vulnerabilityuxper · Golo | Critical9.8 |
| CVE-2025-54724 | WordPress Golo Theme <= 1.7.1 - Cross Site Scripting (XSS) Vulnerabilityuxper · Golo | High7.1 |
| CVE-2025-49891 | WordPress Uxper Booking Plugin <= 1.3.3 - SQL Injection Vulnerabilityuxper · Uxper Booking | High8.5 |
| CVE-2025-49892 | WordPress Uxper Booking Plugin <= 1.3.3 - Local File Inclusion Vulnerabilityuxper · Uxper Booking | High8.1 |
| CVE-2025-49893 | WordPress Nuss Theme <= 1.3.3 - Cross Site Scripting (XSS) Vulnerabilityuxper · Nuss | High7.1 |
| CVE-2025-49894 | WordPress Nuss Theme <= 1.3.3 - Local File Inclusion Vulnerabilityuxper · Nuss | High8.1 |
| CVE-2025-52803 | WordPress Sala theme <= 1.1.3 - Broken Access Control Vulnerabilityuxper · Sala | High7.5 |
| CVE-2025-52804 | WordPress Nuss theme <= 1.3.7.1 - Broken Access Control Vulnerabilityuxper · Nuss | High7.5 |
| CVE-2025-4606 | Sala - Startup & SaaS WordPress Theme <= 1.1.4 - Unauthenticated Privilege Escalation via Password Reset/Account Takeoveruxper · Sala - Startup & SaaS WordPress Theme | Critical9.8 |
| CVE-2025-52826 | WordPress Sala theme <= 1.1.3 - PHP Object Injection Vulnerabilityuxper · Sala | High8.8 |
| CVE-2025-52827 | WordPress Nuss theme <= 1.3.3 - PHP Object Injection Vulnerabilityuxper · Nuss | High8.8 |
| CVE-2025-49511 | WordPress Civi Framework plugin <= 2.1.6 - Cross Site Request Forgery (CSRF) to User Deactivation vulnerabilityuxper · Civi Framework | High7.1 |
| CVE-2025-4797 | Golo <= 1.7.0 - Authentication Bypass to Account Takeoveruxper · Golo - City Travel Guide WordPress Theme | Critical9.8 |
| CVE-2024-13773 | Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.4 - Sensitive Information Exposureuxper · Civi - Job Board & Freelance Marketplace WordPress Theme | High7.3 |
| CVE-2024-13772 | Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.6.1 - Authentication Bypassuxper · Civi - Job Board & Freelance Marketplace WordPress Theme | Medium5.6 |
| CVE-2024-13771 | Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.4 - Authentication Bypass via Password Updateuxper · Civi - Job Board & Freelance Marketplace WordPress Theme | Critical9.8 |
| CVE-2024-12876 | Golo - Directory & Listing, Travel WordPress Theme <= 1.6.10 - Missing Authorization to Privilege Escalation via Unauthenticated Arbitrary User Password Changeuxper · Golo - City Travel Guide WordPress Theme | Critical9.8 |