Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,965All CVEsplus 19,118 rejected
- 398Last 24 hours2,833 in the last 7 days
- 16,817Last 30 days1,548 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 3 | 5 | 0 | 0 | 8 | 29 |
| 2025 | 1 | 0 | 6 | 0 | 0 | 7 | 21 |
| 2024 | 0 | 1 | 8 | 1 | 0 | 10 | 14 |
| 2023 | 0 | 0 | 4 | 0 | 0 | 4 | 4 |
| Title | ||
|---|---|---|
| CVE-2026-100518 | WordPress Advanced Google reCAPTCHA plugin <= 5.40 - Broken Authentication vulnerabilityWebFactory · Advanced Google reCAPTCHA | Medium5.3 |
| CVE-2026-97308 | WordPress Login Lockdown plugin <= 2.17 - Bypass Vulnerability vulnerabilityWebFactory · Login Lockdown | Medium4.8 |
| CVE-2026-94457 | WordPress Captcha Code plugin <= 3.32 - Bypass Vulnerability vulnerabilityWebFactory · Captcha Code | Medium4.8 |
| CVE-2026-94174 | WordPress Email Log plugin <= 2.63 - SQL Injection vulnerabilityWebFactory · Email Log | High7.6 |
| CVE-2026-11426 | UnderConstructionPage PRO <= 5.76 - Authenticated (Subscriber+) Arbitrary File Read via template_thumbnail ParameterWebFactory · Under Construction Page (Pro) | Medium6.5 |
| CVE-2026-5411 | WP Captcha PRO <= 5.38 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Uploadwebfactory · Advanced Google reCAPTCHA | High8.8 |
| CVE-2026-5415 | WP Captcha PRO <= 5.38 - Authenticated (Subscriber+) Authentication Bypass via Temporary Login Linkwebfactory · Advanced Google reCAPTCHA | High8.8 |
| CVE-2024-13362 | Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parametersebet · Go Fetch Jobs (for WP Job Manager) | Medium6.1 |
| CVE-2025-11707 | Login Lockdown & Protection <= 2.14 - IP Block Bypasswebfactory · Login Lockdown & Protection | Medium5.3 |
| CVE-2025-10645 | WP Reset <= 2.05 - Unauthenticated Sensitive Information Exposure via wf-licensing.logwebfactory · WP Reset | Medium5.3 |
| CVE-2025-23968 | WordPress AiBud WP plugin <= 1.9 - Arbitrary File Upload vulnerabilityWebFactory · AiBud WP | Critical9.1 |
| CVE-2025-3766 | Login Lockdown & Protection <= 2.11 - Missing Authorization to Authenticated (Subscriber+) Arbitrary IP Whitelistingwebfactory · Login Lockdown & Protection | Medium5.4 |
| CVE-2025-2074 | Advanced Google reCAPTCHA <= 1.29 - Authenticated (Subscriber+) Limited SQL Injection via 'sSearch' Parameterwebfactory · Advanced Google reCAPTCHA | Medium5.3 |
| CVE-2025-1262 | Advanced Google reCaptcha <= 1.27 - Built-in Math CAPTCHA Bypasswebfactory · Advanced Google reCAPTCHA | Medium5.3 |
| CVE-2024-13623 | Order Export for WooCommerce <= 3.24 - Unauthenticated Sensitive Information Exposure Through Unprotected Directorywebfactory · Order Export for WooCommerce | Medium5.9 |
| CVE-2024-12034 | Advanced Google reCAPTCHA <= 1.25 - Brute Force Protection IP Unblockwebfactory · Advanced Google reCAPTCHA | Medium5.3 |
| CVE-2024-43259 | WordPress Order Export for WooCommerce plugin <= 3.23 - Sensitive Data Exposure vulnerabilityWebFactory · Order Export for WooCommerce | Medium5.3 |
| CVE-2024-5087 | Minimal Coming Soon – Coming Soon Page <= 2.38 - Missing Authorization to Limited Settings Changewebfactory · Minimal Coming Soon – Coming Soon Page | Medium6.3 |
| CVE-2024-4661 | WP Reset <= 2.02 - Missing Authorization to License Key Modificationwebfactory · WP Reset | Medium4.3 |
| CVE-2024-5770 | WP Force SSL & HTTPS SSL Redirect <= 1.66 - Missing Authorization to Settings Updatewebfactory · WP Force SSL & HTTPS SSL Redirect | Medium4.2 |
| CVE-2024-0867 | Email Log <= 2.4.8 - Unauthenticated Hook Injectionwebfactory · Email Log | High8.1 |
| CVE-2023-6799 | WP Reset <= 2.0 - Sensitive Information Exposure due to Insufficient Randomnesswebfactory · WP Reset | Medium5.9 |
| CVE-2024-1501 | Database Reset <= 3.22 - Cross-Site Request Forgery to WP Reset Plugin Installationwebfactory · Database Reset | Medium4.7 |
| CVE-2024-1340 | Login Lockdown – Protect Login Form <= 2.08 - Missing Authorizationwebfactory · Login Lockdown & Protection | Medium5.4 |
| CVE-2024-1075 | Minimal Coming Soon – Coming Soon Page <= 2.37 - Unauthenticated Maintenance Mode Bypasswebfactory · Minimal Coming Soon – Coming Soon Page | Low3.7 |
| CVE-2023-5062 | WordPress Charts <= 0.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodewebfactory · WordPress Charts | Medium6.4 |
| CVE-2023-0832 | Under Construction <= 3.96 - Cross-Site Request Forgery via admin_action_install_weglotwebfactory · Under Construction | Medium4.3 |
| CVE-2023-0831 | Under Construction <= 3.96 - Cross-Site Request Forgery via admin_action_ucp_dismiss_noticewebfactory · Under Construction | Medium4.3 |
| CVE-2023-1913 | Maps Widget for Google Maps <= 4.24 - Authenticated (Administrator+) Stored Cross-Site Scriptingwebfactory · Maps Widget for Google Maps | Medium4.4 |