Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,702All CVEsplus 19,141 rejected
- 647Last 24 hours3,003 in the last 7 days
- 17,172Last 30 days1,609 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 3 | 9 | 0 | 0 | 12 | 44 |
| 2025 | 0 | 0 | 2 | 0 | 0 | 2 | 32 |
| 2024 | 0 | 2 | 20 | 0 | 0 | 22 | 30 |
| 2023 | 1 | 2 | 5 | 0 | 0 | 8 | 8 |
| Title | ||
|---|---|---|
| CVE-2026-119465 | WordPress Elementor Addon Elements plugin <= 1.15 - Sensitive Data Exposure vulnerabilityWPVibes · Elementor Addon Elements | Medium5.3 |
| CVE-2026-119467 | WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerabilityWPVibes · AnyWhere Elementor | Medium5.4 |
| CVE-2026-114187 | WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerabilityWPVibes · AnyWhere Elementor | Medium5.3 |
| CVE-2026-114185 | WordPress AnyWhere Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerabilityWPVibes · AnyWhere Elementor | Medium6.5 |
| CVE-2026-114183 | WordPress AnyWhere Elementor plugin <= 1.3.0 - Sensitive Data Exposure vulnerabilityWPVibes · AnyWhere Elementor | Medium6.5 |
| CVE-2026-114184 | WordPress Elementor Addon Elements plugin <= 1.14.4 - Cross Site Scripting (XSS) vulnerabilityWPVibes · Elementor Addon Elements | Medium6.5 |
| CVE-2026-61947 | WordPress Form Vibes – Database Manager for Forms plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerabilityWPVibes · Form Vibes – Database Manager for Forms | High7.1 |
| CVE-2026-13378 | Form Vibes <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting via Contact Form 7 Form Fieldwpvibes · Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database | High7.2 |
| CVE-2023-33999 | WordPress WP Mail Log plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerabilityWPVibes · WP Mail Log | High7.1 |
| CVE-2026-28131 | WordPress Elementor Addon Elements plugin <= 1.14.4 - Sensitive Data Exposure vulnerabilityWPVibes · Elementor Addon Elements | Medium6.5 |
| CVE-2025-13409 | Form Vibes – Database Manager for Forms <= 1.4.13 - Authenticated (Admin+) SQL Injectionwpvibes · Form Vibes – Database Manager for Forms | Medium4.9 |
| CVE-2025-31046 | WordPress AnyWhere Elementor Pro plugin <= 2.29 - Broken Access Control VulnerabilityWPvibes · AnyWhere Elementor Pro | Medium4.3 |
| CVE-2025-12537 | Addon Elements for Elementor <= 1.14.3 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpvibes · Addon Elements for Elementor (formerly Elementor Addon Elements) | Medium6.4 |
| CVE-2024-13215 | Elementor Addon Elements <= 1.13.10 - Authenticated (Contributor+) Sensitive Information Exposure via Modal Popupwpvibes · Addon Elements for Elementor (formerly Elementor Addon Elements) | Medium4.3 |
| CVE-2024-10777 | AnyWhere Elementor <= 1.2.11 - Authenticated (Contributor+) Post Disclosurewpvibes · Dynific Addons for Elementor (formerly AnyWhere Elementor) | Medium4.3 |
| CVE-2024-47361 | WordPress Elementor Addon Elements plugin <= 1.13.6 - Broken Access Control vulnerabilityWPVibes · Elementor Addon Elements | Medium6.5 |
| CVE-2022-4974 | Freemius SDK <= 2.4.2 - Missing Authorization Checksdashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress | Medium6.3 |
| CVE-2024-8902 | Elementor Addon Elements <= 1.13.8 - Authenticated (Contributor+) Sensitive Information Exposure via table_saved_sectionswpvibes · Addon Elements for Elementor (formerly Elementor Addon Elements) | Medium4.3 |
| CVE-2024-47366 | WordPress Elementor Addon Elements plugin <= 1.13.6 - Cross Site Scripting (XSS) vulnerabilityWPVibes · Elementor Addon Elements | Medium6.5 |
| CVE-2024-5309 | Form Vibes – Database Manager for Forms <= 1.4.12 - Missing Authorization in Multiple Functionswpvibes · Form Vibes – Database Manager for Forms | Medium5.4 |
| CVE-2024-7122 | Elementor Addon Elements <= 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgetswpvibes · Addon Elements for Elementor (formerly Elementor Addon Elements) | Medium6.4 |
| CVE-2024-4401 | Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via id and eae_slider_animation Parameterswpvibes · Addon Elements for Elementor (formerly Elementor Addon Elements) | Medium6.4 |
| CVE-2024-5325 | Form Vibes <= 1.4.10 - Authenticated (Subscriber+) SQL Injection via fv_export_datawpvibes · Form Vibes – Database Manager for Forms | High8.8 |
| CVE-2024-4570 | Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpvibes · Addon Elements for Elementor (formerly Elementor Addon Elements) | Medium6.4 |
| CVE-2024-4569 | Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpvibes · Addon Elements for Elementor (formerly Elementor Addon Elements) | Medium6.4 |
| CVE-2024-2092 | Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Widgetwpvibes · Addon Elements for Elementor (formerly Elementor Addon Elements) | Medium5.4 |
| CVE-2024-3743 | Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpvibes · Addon Elements for Elementor (formerly Elementor Addon Elements) | Medium6.4 |
| CVE-2024-2792 | Elementor Addon Elements <= 1.13.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Text Separator' and 'Image Compare' Widgetwpvibes · Addon Elements for Elementor (formerly Elementor Addon Elements) | Medium6.4 |
| CVE-2024-30422 | WordPress Elementor Addon Elements plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerabilityWPVibes · Elementor Addon Elements | Medium6.5 |
| CVE-2024-2091 | Elementor Addon Elements <= 1.13.2 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpvibes · Addon Elements for Elementor (formerly Elementor Addon Elements) | Medium5.4 |
| CVE-2024-29107 | WordPress Elementor Addon Elements plugin <= 1.12.10 - Cross Site Scripting (XSS) vulnerabilityWPVibes · Elementor Addon Elements | Medium6.5 |
| CVE-2024-1393 | Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Content Switcher Widgetwpvibes · Addon Elements for Elementor (formerly Elementor Addon Elements) | Medium6.4 |
| CVE-2024-1391 | Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Thumbnail Slider Widgetwpvibes · Addon Elements for Elementor (formerly Elementor Addon Elements) | Medium6.4 |
| CVE-2024-1422 | Elementor Addon Elements <= 1.12.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Modal Popup effetwpvibes · Addon Elements for Elementor (formerly Elementor Addon Elements) | Medium6.4 |
| CVE-2024-1392 | Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dual Button Widgetwpvibes · Addon Elements for Elementor (formerly Elementor Addon Elements) | Medium6.4 |
| CVE-2024-1358 | Elementor Addon Elements <= 1.12.12 - Directory Traversal to Local File Inclusionwpvibes · Addon Elements for Elementor (formerly Elementor Addon Elements) | High8.8 |
| CVE-2023-51410 | WordPress WP Mail Log Plugin <= 1.1.2 is vulnerable to Arbitrary File UploadWPVibes · WP Mail Log | Critical9.9 |
| CVE-2023-47530 | WordPress Redirect 404 Error Page to Homepage or Custom Page with Logs Plugin <= 1.8.7 is vulnerable to SQL InjectionWPVibes · Redirect 404 Error Page to Homepage or Custom Page with Logs | High7.6 |
| CVE-2023-4690 | Elementor Addon Elements <= 1.12.7 - Cross-Site Request Forgerywpvibes · Addon Elements for Elementor (formerly Elementor Addon Elements) | Medium5.4 |
| CVE-2023-5381 | Elementor Addon Elements <= 1.12.7 - Authenticated (Administrator+) Stored Cross-Site Scriptingwpvibes · Addon Elements for Elementor (formerly Elementor Addon Elements) | Medium4.4 |
| CVE-2023-4723 | Elementor Addon Elements <= 1.12.7 - Missing Authorization to Sensitive Information Exposurewpvibes · Addon Elements for Elementor (formerly Elementor Addon Elements) | Medium5.3 |
| CVE-2023-4689 | Elementor Addon Elements <= 1.12.7 - Cross-Site Request Forgerywpvibes · Addon Elements for Elementor (formerly Elementor Addon Elements) | Medium5.4 |
| CVE-2023-3088 | WP Mail Log <= 1.1.1 - Unauthenticated Stored Cross-Site Scripting via Emailwpvibes · WP Mail Log | High7.2 |
| CVE-2022-45807 | WordPress WP Mail Log Plugin <= 1.0.1 is vulnerable to Cross Site Request Forgery (CSRF)WPVibes · WP Mail Log | Medium5.4 |