Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,321All CVEsplus 19,140 rejected
- 471Last 24 hours2,738 in the last 7 days
- 16,929Last 30 days1,560 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 5 | 7 | 0 | 0 | 12 | 39 |
| 2025 | 0 | 5 | 8 | 0 | 0 | 13 | 27 |
| 2024 | 0 | 3 | 10 | 0 | 0 | 13 | 14 |
| 2023 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-104313 | WPC Estimated Delivery Date for WooCommerce <= 4.0.1 - Reflected Cross-Site Scripting via 'rule_data' Parameterwpclever · WPC Estimated Delivery Date for WooCommerce | Medium6.1 |
| CVE-2026-97660 | WPC Product Options for WooCommerce <= 4.0.5 - Unauthenticated Stored Cross-Site Scripting via wpcpo-* Array Key via Multipart Field Namewpclever · WPC Product Options for WooCommerce | High7.2 |
| CVE-2026-103888 | WPC Smart Quick View for WooCommerce <= 4.4.0 - Reflected Cross-Site Scripting via 'woosq-redirect' Parameterwpclever · WPC Smart Quick View for WooCommerce | Medium6.1 |
| CVE-2026-95687 | WPC Shop as a Customer for WooCommerce <= 2.0.0 - Authenticated (Subscriber+) Privilege Escalation via Missing Role Check on Target User to wpcsa_login AJAX Endpointwpclever · WPC Shop as a Customer for WooCommerce | High8.8 |
| CVE-2026-93836 | WPC Product Bundles for WooCommerce <= 8.6.6 - Unauthenticated Stored Cross-Site Scripting via 'qty' Parameterwpclever · WPC Product Bundles for WooCommerce | High7.2 |
| CVE-2026-7436 | WPC Badge Management for WooCommerce <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'text' Attributewpclever · WPC Badge Management for WooCommerce | Medium6.4 |
| CVE-2026-49061 | WordPress WPC Product Options for WooCommerce plugin <= 3.2.1 - Arbitrary File Download vulnerabilityWPClever · WPC Product Options for WooCommerce | High7.5 |
| CVE-2026-48883 | WordPress WPC Product Bundles for WooCommerce plugin <= 8.5.3 - Broken Access Control vulnerabilityWPClever · WPC Product Bundles for WooCommerce | High7.5 |
| CVE-2025-14767 | WPC Badge Management for WooCommerce <= 3.1.6 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'text' Attributewpclever · WPC Badge Management for WooCommerce | Medium5.5 |
| CVE-2026-6725 | WPC Smart Messages for WooCommerce <= 4.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributewpclever · WPC Smart Messages for WooCommerce | Medium6.4 |
| CVE-2026-32407 | WordPress WPC Smart Wishlist for WooCommerce plugin <= 5.0.8 - Broken Access Control vulnerabilityWPClever · WPC Smart Wishlist for WooCommerce | Medium4.3 |
| CVE-2026-32406 | WordPress WPC Product Bundles for WooCommerce plugin <= 8.4.5 - Broken Access Control vulnerabilityWPClever · WPC Product Bundles for WooCommerce | Medium4.3 |
| CVE-2025-60248 | WordPress WPC Product Options for WooCommerce plugin <= 3.1.3 - Local File Inclusion vulnerabilityWPClever · WPC Product Options for WooCommerce | High7.5 |
| CVE-2025-12115 | WPC Name Your Price for WooCommerce <= 2.1.9 - Unauthenticated Price Alterationwpclever · WPC Name Your Price for WooCommerce | High7.5 |
| CVE-2025-62903 | WordPress WPC Smart Messages for WooCommerce plugin <= 4.2.8 - Cross Site Scripting (XSS) vulnerabilityWPClever · WPC Smart Messages for WooCommerce | Medium6.5 |
| CVE-2025-49908 | WordPress WPC Countdown Timer for WooCommerce plugin <= 3.1.4 - Cross Site Scripting (XSS) vulnerabilityWPClever · WPC Countdown Timer for WooCommerce | Medium6.5 |
| CVE-2025-11741 | WPC Smart Quick View for WooCommerce <= 4.2.5 - Insecure Direct Object Reference to Unauthenticated Private Product Exposurewpclever · WPC Smart Quick View for WooCommerce | Medium5.3 |
| CVE-2025-11742 | WPC Smart Wishlist for WooCommerce <= 5.0.4 - Missing Authorization to Authenticated (Subscriber+) Information Exposurewpclever · WPC Smart Wishlist for WooCommerce | Medium4.3 |
| CVE-2025-11518 | WPC Smart Wishlist for WooCommerce <= 5.0.3 - Insecure Direct Object Reference to Unauthenticated Wishlist Manipulationwpclever · WPC Smart Wishlist for WooCommerce | Medium5.3 |
| CVE-2025-8618 | WPC Smart Quick View for WooCommerce <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via woosq_btn Shortcodewpclever · WPC Smart Quick View for WooCommerce | Medium6.4 |
| CVE-2025-7496 | WPC Smart Compare for WooCommerce <= 6.4.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scriptingwpclever · WPC Smart Compare for WooCommerce | Medium6.4 |
| CVE-2025-5530 | WPC Smart Compare for WooCommerce <= 6.4.6 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpclever · WPC Smart Compare for WooCommerce | Medium6.4 |
| CVE-2025-3418 | WPC Admin Columns 2.0.6 - 2.1.0 - Authenticated (Subscriber+) Privilege Escalation via User Meta Updatewpclever · WPC Admin Columns | High8.8 |
| CVE-2025-30825 | WordPress WPC Smart Linked Products plugin <= 1.3.5 - Privilege Escalation vulnerabilityWPClever · WPC Smart Linked Products - Upsells & Cross-sells for WooCommerce | High8.8 |
| CVE-2025-30772 | WordPress WPC Smart Upsell Funnel for WooCommerce plugin <= 3.0.4 - Arbitrary Option Update to Privilege Escalation vulnerabilityWPClever · WPC Smart Upsell Funnel for WooCommerce | High8.8 |
| CVE-2024-12432 | WPC Shop as a Customer for WooCommerce <= 1.2.8 - Authentication Bypass Due to Insufficiently Unique Keywpclever · WPC Shop as a Customer for WooCommerce | High8.1 |
| CVE-2024-12004 | WPC Order Notes for WooCommerce <= 1.5.2 - Cross-Site Request Forgery to Reflected Cross-Site Scriptingwpclever · WPC Order Notes for WooCommerce | Medium6.1 |
| CVE-2024-5020 | Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Libraryextendthemes · Colibri Page Builder | Medium6.4 |
| CVE-2024-43312 | WordPress WPC Frequently Bought Together for WooCommerce plugin <= 7.1.9 - Broken Access Control vulnerabilityWPClever · WPC Frequently Bought Together for WooCommerce | Medium5.4 |
| CVE-2024-10437 | WPC Smart Messages for WooCommerce <= 4.2.1 - Missing Authorization to Authenticated (Subscriber+) Message Activation/Deactivationwpclever · WPC Smart Messages for WooCommerce | Medium4.3 |
| CVE-2024-10436 | WPC Smart Messages for WooCommerce <= 4.2.1 - Authenticated (Subscriber+) Local File Inclusionwpclever · WPC Smart Messages for WooCommerce | High8.8 |
| CVE-2024-50416 | WordPress WPC Shop as a Customer for WooCommerce plugin <= 1.2.6 - PHP Object Injection vulnerabilityWPClever · WPC Shop as a Customer for WooCommerce | High8.8 |
| CVE-2024-30537 | WordPress WPC Badge Management for WooCommerce plugin <= 2.4.0 - Broken Access Control vulnerabilityWPClever · WPC Badge Management for WooCommerce | Medium4.3 |
| CVE-2024-2838 | WPC Composite Products for WooCommerce <= 7.2.7 - Authenticated (Subscriber+) Stored Cross-Site Scriptingwpclever · WPC Composite Products for WooCommerce | Medium6.4 |
| CVE-2024-32687 | WordPress WPC Frequently Bought Together for WooCommerce plugin <= 7.0.3 - Broken Access Control vulnerabilityWPClever · WPC Frequently Bought Together for WooCommerce | Medium4.3 |
| CVE-2024-32520 | WordPress WPC Grouped Product for WooCommerce plugin <= 4.4.2 - Broken Access Control vulnerabilityWPClever · WPC Grouped Product for WooCommerce | Medium4.3 |
| CVE-2023-6494 | WPC Smart Quick View for WooCommerce <= 4.0.2 - Authenticated (Administrator+) Stored Cross-Site Scriptingwpclever · WPC Smart Quick View for WooCommerce | Medium4.4 |
| CVE-2023-52127 | WordPress WPC Product Bundles for WooCommerce Plugin <= 7.3.1 is vulnerable to Cross Site Request Forgery (CSRF)WPClever · WPC Product Bundles for WooCommerce | Medium4.3 |
| CVE-2023-34386 | WordPress WPC Smart Wishlist for WooCommerce Plugin <= 4.7.1 is vulnerable to Cross Site Request Forgery (CSRF)WPClever · WPC Smart Wishlist for WooCommerce | Medium4.3 |