Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,893All CVEsplus 19,117 rejected
- 444Last 24 hours2,910 in the last 7 days
- 16,794Last 30 days1,551 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 7 | 25 | 0 | 0 | 32 | 115 |
| 2025 | 0 | 0 | 14 | 0 | 0 | 14 | 83 |
| 2024 | 1 | 4 | 52 | 0 | 0 | 57 | 69 |
| 2023 | 0 | 2 | 10 | 0 | 0 | 12 | 12 |
| Title | ||
|---|---|---|
| CVE-2026-112365 | easy.jobs <= 2.8.4 - Unauthenticated Stored Cross-Site Scripting via 'cover_letter' Parameterwpdevteam · easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution | High7.2 |
| CVE-2026-118205 | Essential Addons for Elementor <= 6.8.7 - Unauthenticated Privilege Escalation to 'page_id' Parameter via Elementor Revisionwpdevteam · Essential Addons for Elementor – Popular Elementor Templates & Widgets | High7.4 |
| CVE-2026-108366 | easy.jobs <= 2.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon' Block Attributewpdevteam · easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution | Medium6.4 |
| CVE-2026-109985 | xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'post_content' Parameterwpdevteam · xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN | Medium6.4 |
| CVE-2026-109513 | NotificationX <= 3.3.3 - Unauthenticated Stored Cross-Site Scripting via 'name' Parameter via popup-submit REST Routewpdevteam · NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar | High7.2 |
| CVE-2026-110721 | NotificationX <= 3.3.3 - Missing Authorization to Unauthenticated Arbitrary Content Injection via 'nx_id' Parameter on /popup-submit REST Routewpdevteam · NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar | Medium5.3 |
| CVE-2026-92727 | EmbedPress <= 4.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slidesShow' Block Attributewpdevteam · EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents | Medium6.4 |
| CVE-2026-96256 | Gutenberg Essential Blocks <= 6.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marker' Attributewpdevteam · Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | Medium6.4 |
| CVE-2026-89330 | EmbedPress <= 4.6.5 - Reflected Cross-Site Scripting via 'hash' and 'unique' Parameterswpdevteam · EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents | Medium6.1 |
| CVE-2026-75980 | BetterDocs <= 4.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading 'id' Attribute in Post Contentwpdevteam · BetterDocs – AI Documentation, Knowledge Base, MCP Server, Docs, Wikis, FAQ & Chatbot | Medium6.4 |
| CVE-2026-19801 | BetterLinks <= 3.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Short URL Creation via create_fbs_link AJAX Actionwpdevteam · BetterLinks – Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP | Medium4.3 |
| CVE-2026-18438 | Templately <= 3.7.1 - Authenticated (Contributor+) Arbitrary File Upload to Remote Code Execution via Gutenberg Cloud Import Attachment Filename Mismatchwpdevteam · Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! | High8.8 |
| CVE-2026-15145 | Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widgetwpdevteam · Essential Addons for Elementor – Popular Elementor Templates & Widgets | Medium6.4 |
| CVE-2026-15156 | Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reading Progress Global Color Settingswpdevteam · Essential Addons for Elementor – Popular Elementor Templates & Widgets | Medium6.4 |
| CVE-2026-15155 | Essential Addons for Elementor <= 6.6.10 - Authenticated (Contributor+) Account Takeover via Email Header Injectionwpdevteam · Essential Addons for Elementor – Popular Elementor Templates & Widgets | High8.8 |
| CVE-2026-15104 | BetterDocs <= 4.6.0 - Authenticated (Custom+) SQL Injection via 'lang' Parameterwpdevteam · BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot | Medium6.5 |
| CVE-2026-6459 | Essential Addons for Elementor <= 6.6.2 - Authenticated (Author+) Stored Cross-Site Scripting via Event Calendar Widget Popupwpdevteam · Essential Addons for Elementor – Popular Elementor Templates & Widgets | Medium6.4 |
| CVE-2026-10833 | Gutenberg Essential Blocks - Page Builder for Gutenberg Blocks & Patterns <= 6.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'configurablePrefix' Block Attributewpdevteam · Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | Medium6.4 |
| CVE-2026-12157 | BetterDocs <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'blockId' Block Attributewpdevteam · BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot | Medium6.4 |
| CVE-2026-7796 | EmbedPress <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block 'url' Attributewpdevteam · EmbedPress – PDF Embedder, Embed PDF viewer, YouTube Videos, 3D FlipBook, Social feeds & more | Medium6.4 |
| CVE-2026-7665 | Essential Addons for Elementor <= 6.6.4 - Missing Authorization to Unauthenticated Information Exposure via 'load_more' AJAX Handlerwpdevteam · Essential Addons for Elementor – Popular Elementor Templates & Widgets | Medium5.3 |
| CVE-2026-10586 | Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 6.1.3 - Authenticated (Author+) Server-Side Request Forgerywpdevteam · Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | High7.2 |
| CVE-2026-5193 | Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.13 - Authenticated (Author+) Limited Privilege Escalation via register_userwpdevteam · Essential Addons for Elementor – Popular Elementor Templates & Widgets | Medium6.5 |
| CVE-2026-4658 | Gutenberg Essential Blocks <= 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributeswpdevteam · Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | Medium6.4 |
| CVE-2026-6393 | BetterDocs <= 4.3.11 - Missing Authorization to Authenticated (Subscriber+) Unauthorized AI API Usagewpdevteam · BetterDocs – Knowledge Base Docs & FAQ Solution for Elementor & Block Editor | Medium4.3 |
| CVE-2026-3875 | BetterDocs <= 4.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributeswpdevteam · BetterDocs – Knowledge Base Docs & FAQ Solution for Elementor & Block Editor | Medium6.4 |
| CVE-2026-1512 | Essential Addons for Elementor <= 6.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info Box Widgetwpdevteam · Essential Addons for Elementor – Popular Elementor Templates & Widgets | Medium6.4 |
| CVE-2026-0554 | NotificationX <= 3.1.11 - Missing Authorization to Authenticated (Contributor+) Analytics Resetwpdevteam · NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar | Medium4.3 |
| CVE-2025-15380 | NotificationX <= 3.2.0 - Unauthenticated DOM-Based Cross-Site Scripting via 'nx-preview'wpdevteam · NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar | High7.2 |
| CVE-2026-1004 | Essential Addons for Elementor <= 6.5.5 - Missing Authorization to Unauthenticated Sensitive Information Exposurewpdevteam · Essential Addons for Elementor – Popular Elementor Templates & Widgets | Medium5.3 |
| CVE-2026-0831 | Templately <= 3.4.8 - Unauthenticated Limited Arbitrary JSON File Writewpdevteam · Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! | Medium5.3 |
| CVE-2025-14980 | BetterDocs <= 4.3.3 - Authenticated (Contributor+) Sensitive Information Exposurewpdevteam · BetterDocs – Knowledge Base Docs & FAQ Solution for Elementor & Block Editor | Medium6.5 |
| CVE-2025-13977 | Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.3 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpdevteam · Essential Addons for Elementor – Popular Elementor Templates & Widgets | Medium6.4 |
| CVE-2025-11369 | Essential Blocks <= 5.7.2 - Missing Authorization To Authenticated (Author+) Information Disclosurewpdevteam · Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | Medium4.3 |
| CVE-2025-11270 | Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 5.7.1 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpdevteam · Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | Medium6.4 |
| CVE-2025-11361 | Essential Blocks <= 5.7.1 - Authenticated (Author+) Server-Side Request Forgerywpdevteam · Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | Medium6.4 |
| CVE-2025-7499 | BetterDocs <= 4.1.1 - Missing Authorization to Private And Password-Protected Posts Information Disclosurewpdevteam · BetterDocs – Knowledge Base Docs & FAQ Solution for Elementor & Block Editor | Medium5.3 |
| CVE-2025-8451 | Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'data-gallery-items'wpdevteam · Essential Addons for Elementor – Popular Elementor Templates & Widgets | Medium6.4 |
| CVE-2025-6244 | Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Calendar` And `Business Reviews` Widgetswpdevteam · Essential Addons for Elementor – Popular Elementor Templates & Widgets | Medium6.4 |
| CVE-2024-5647 | Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Libraryblossomthemes · BlossomThemes Social Feed | Medium6.4 |
| CVE-2024-9993 | Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Event Calendar Widgetwpdevteam · Essential Addons for Elementor – Popular Elementor Templates & Widgets | Medium6.4 |
| CVE-2024-9994 | Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Pricing Table Widgetwpdevteam · Essential Addons for Elementor – Popular Elementor Templates & Widgets | Medium6.4 |
| CVE-2025-4682 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider and Post Carousel Widgetswpdevteam · Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | Medium6.4 |
| CVE-2025-1664 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpdevteam · Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | Medium6.4 |
| CVE-2024-13803 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.2.3 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpdevteam · Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | Medium6.4 |
| CVE-2024-12045 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.0.9 - Authenticated (Admin+) Stored Cross-Site Scriptingwpdevteam · Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | Medium4.4 |
| CVE-2024-11727 | NotificationX – Live Sales Notification, WooCommerce Sales Popup, FOMO, Social Proof, Announcement Banner & Floating Notification Top Bar <= 2.9.3 - Authenticated (Admin+) Stored Cross-Site Scriptingwpdevteam · NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar | Medium4.4 |
| CVE-2024-11203 | EmbedPress – Embed PDF, 3D Flipbook, Social Feeds, Google Docs, Vimeo, Wistia, YouTube Videos, Audios, Google Maps in Gutenberg Block & Elementor <= 4.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'provider_name'wpdevteam · EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more | Medium6.4 |
| CVE-2024-8978 | Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Contributor+) Sensitive Information Exposurewpdevteam · Essential Addons for Elementor – Popular Elementor Templates & Widgets | Medium5.7 |
| CVE-2024-8979 | Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Author+) Sensitive Information Exposure to Privilege Escalationwpdevteam · Essential Addons for Elementor – Popular Elementor Templates & Widgets | High8.0 |