01 Search console

The CVE corpus, on scope in milliseconds.

424,122 records · updated every 15 minutes

02 Telemetry

Total CVEs424,122

New today254

Known-exploited (KEV)1,779

Sync lag14 MIN

03 Severity mix

04 Latest published

CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished

CVE-2026-1257665.3Medium—5.3MediumWordPress WPZOOM Social Feed Widget & Block plugin <= 2.4.1 - Sensitive Data Exposure vulnerabilitywpzoom wpzoom social feed widget & block16 MIN AGO

CVE-2026-123374—Unrated——UnratedApache Roller: Deserialization of untrusted data in weblog update ping responsesapache software foundation apache roller17 MIN AGO

CVE-2026-1234806.5Medium—6.5MediumWordPress Display Eventbrite Events plugin <= 6.9.1 - Cross Site Scripting (XSS) vulnerabilityfullworks plugins display eventbrite events17 MIN AGO

CVE-2026-122300—Unrated——UnratedApache Roller: Limited weblog members can remove or change published entriesapache software foundation apache roller18 MIN AGO

CVE-2026-1254485.3Medium—5.3MediumWordPress Kali Forms plugin <= 2.4.31 - Broken Access Control vulnerabilitykaliforms kali forms18 MIN AGO

CVE-2026-1184145.4Medium—5.4MediumApache Roller: Stored cross-site scripting through the weblog descriptionapache software foundation apache roller18 MIN AGO

CVE-2026-1184135.4Medium—5.4MediumApache Roller: Stored cross-site scripting through imported blogroll linksapache software foundation apache roller18 MIN AGO

CVE-2026-1234814.3Medium—4.3MediumWordPress The Ultimate WordPress Toolkit – WP Extended plugin <= 3.4.2 - Broken Access Control vulnerabilitywp extended the ultimate wordpress toolkit – wp extended18 MIN AGO

CVE-2026-1184123.1Low—3.1LowApache Roller: Disabled accounts can sign in through OpenIDapache software foundation apache roller19 MIN AGO

CVE-2026-1257635.3Medium—5.3MediumWordPress SureForms plugin <= 2.13.0 - Broken Access Control vulnerabilitybrainstorm force sureforms19 MIN AGO

CVE-2026-1184118.8High—8.8HighApache Roller: Cross-site request forgery through GET requests to administrative actionsapache software foundation apache roller19 MIN AGO

CVE-2026-1257436.5Medium—6.5MediumWordPress Elementor Addon Elements plugin <= 1.5 - Cross Site Scripting (XSS) vulnerabilitywpvibes elementor addon elements19 MIN AGO

CVE-2026-1184103.7Low—3.7LowApache Roller: Unpublished entries remain readable through search after AtomPub unpublishapache software foundation apache roller19 MIN AGO

CVE-2026-1184095.3Medium—5.3MediumApache Roller: Commenter email addresses recoverable through public searchapache software foundation apache roller19 MIN AGO

CVE-2026-1254364.3Medium—4.3MediumWordPress The Post Grid plugin <= 7.9.9 - Broken Access Control vulnerabilitymamunur rashid the post grid19 MIN AGO

View all 424,122 records

05 Recently added to KEV

KEVCVE-2026-20320cisco cisco broadworksAdded 2026-11-10

KEVCVE-2026-125350google chromeAdded 2026-11-10

KEVCVE-2026-124194microsoft microsoft 365 apps for enterprise microsoft microsoft office ltsc 2021 microsoft microsoft office ltsc 2024Added 2026-11-10

KEVCVE-2026-116606barracuda networks barracuda email security gateway (esg)Added 2026-11-10

KEVCVE-2026-111793openwave messaging (ireland) limited webtop media transcoderAdded 2026-11-10

KEVCVE-2026-111560barracuda networks barracuda email security gateway (esg) barracuda networks barracuda load balancer application delivery controller (adc) barracuda networks barracuda message archiver (bma) barracuda networks barracuda waf control center (wcc) barracuda networks barracuda web application firewall (waf) barracuda networks barracuda web security gateway (wsg)Added 2026-11-10