Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,106All CVEsplus 19,119 rejected
- 463Last 24 hours2,828 in the last 7 days
- 16,884Last 30 days1,550 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 1 | 0 | 0 | 1 | 6 |
| 2025 | 0 | 1 | 3 | 0 | 0 | 4 | 5 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2023 | 0 | 0 | 0 | 1 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-24535 | WordPress Automatic Featured Images from Videos plugin <= 1.2.7 - Broken Access Control vulnerabilitywebdevstudios · Automatic Featured Images from Videos | Medium4.3 |
| CVE-2025-14056 | Custom Post Type UI <= 1.18.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'label' Import Parameterwebdevstudios · Custom Post Type UI | Medium4.4 |
| CVE-2025-12826 | Custom Post Type UI <= 1.18.0 - Missing Authorization to Unauthenticated (Previously Administrator+) Custom Post Type Modificationwebdevstudios · Custom Post Type UI | Medium4.8 |
| CVE-2025-48101 | WordPress Constant Contact for WordPress Plugin <= 4.1.1 - PHP Object Injection Vulnerabilitywebdevstudios · Constant Contact for WordPress | High8.8 |
| CVE-2025-31820 | WordPress Automatic Featured Images from Videos plugin <= 1.2.4 - Broken Access Control vulnerabilitywebdevstudios · Automatic Featured Images from Videos | Medium4.3 |
| CVE-2015-10013 | WebDevStudios taxonomy-switcher Plugin taxonomy-switcher.php taxonomy_switcher_init cross site scriptingWebDevStudios · taxonomy-switcher Plugin | Low3.5 |