01 Search console
The CVE corpus, on scope in milliseconds.
417,556 records · updated every 15 minutes
02 Telemetry
Total CVEs417,556
New today71
Known-exploited (KEV)1,765
Sync lag18 MIN
03 Severity mix
04 Latest published
CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished
CVE-2026-1013255.3Medium—Newsletters <= 4.18.1 - Authenticated (Subscriber+) SQL Injection via 'id' Parametercontrid newsletters37 MIN AGO
CVE-2026-1105307.2High—FeedWordPress <= 2026.0517 - Unauthenticated Stored Cross-Site Scripting via Syndicated Feed Contentradgeek feedwordpress37 MIN AGO
CVE-2026-1200757.2High—WP Activity Log <= 5.6.1 - Unauthenticated Stored Cross-Site Scriptingmelapress wp activity log37 MIN AGO
CVE-2026-1038829.1Critical—Acadlix LMS <= 1.1.9 - Unauthenticated Arbitrary File Deletion via 'delete_file_data.file_path' Parameteracadlix acadlix lms – ai quiz maker, online exam & course plugin for wordpress37 MIN AGO
CVE-2026-1191606.4Medium—Smart Post <= 4.0.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User display_name via Author Filter blockshapedplugin smart post – post grid, post carousel, post slider gutenberg blocks for blog & news37 MIN AGO
CVE-2026-1093675.3Medium—All in One SEO <= 5.0.3 - Unauthenticated Sensitive Information Disclosure in 's' Search Query Parametersmub all in one seo – ai seo plugin to boost seo rankings & traffic (schema, local seo, sitemap & seo insights)37 MIN AGO
CVE-2026-1182359.8Critical—SimpleForm <= 3.10.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename via Unknown File Key in simpleform_get_submit_datawpazleen simpleform – form maker to chat apps with quiz, poll and multi lead notifications37 MIN AGO
CVE-2026-1039155.3Medium—Booking for Appointments and Events Calendar <= 2.4.12 - Unauthenticated Sensitive Information Exposure in 'page' Parametermelograno booking for appointments and events calendar – amelia37 MIN AGO
CVE-2026-1200708.8High—User Frontend <= 4.3.13 - Authenticated (Subscriber+) Privilege Escalation via post_content Parameterwedevs user frontend – membership, user registration, user profile, user directory & content restriction with frontend post submission1 HR AGO
CVE-2026-1038988.1High—Wp Social Login and Register Social Counter <= 3.2.2 - Unauthenticated Authentication Bypass via Insufficient Email Verification in Social Login Callbackroxnor wp social login and register social counter1 HR AGO
CVE-2026-1110705.4Medium—Content Pilot <= 2.2.4 - Unauthenticated Stored Cross-Site Scripting via RSS-linked article `<meta name="description">`pluginever content pilot – autoblogging & affiliate marketing suite1 HR AGO
CVE-2026-1077597.2High—WPO365 | MICROSOFT 365 GRAPH MAILER <= 6.2 - Unauthenticated Stored Cross-Site Scripting via Email Subject via wp_mailwpo365 wpo365 | microsoft 365 graph mailer1 HR AGO
CVE-2026-1165129.8Critical—Project Manager <= 4.1.1 - Unauthenticated Remote Code Execution via 'id' Parameter Function Injectionwedevs project manager – ai powered project management, task management, kanban board & time tracker1 HR AGO
CVE-2026-1039976.5Medium—Redux Framework <= 4.5.15 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via /wp-admin/profile.php inline redux_<opt_name> JavaScriptdavidanderson redux framework1 HR AGO
CVE-2025-114554.3Medium—Perfect Images <= 7.2.0 - Missing Authorization to Authenticated (Author+) Image Replacementtigroumeow perfect images: regenerate thumbnails, image sizes, webp & avif1 HR AGO
05 Recently added to KEV
KEVCVE-2026-76418cisco cisco secure firewall adaptive security appliance (asa) software cisco cisco secure firewall threat defense (ftd) softwareAdded 2026-10-29
KEVCVE-2026-41709vmware cloud foundation vmware esx vmware telco cloud platform vmware vsphere foundationAdded 2026-10-28
KEVCVE-2026-48356adobe adobe commerce adobe adobe commerce b2b adobe adobe commerce events adobe magento open sourceAdded 2026-10-27