01 Search console

The CVE corpus, on scope in milliseconds.

413,941 records · updated every 15 minutes

02 Telemetry

Total CVEs413,941

New today23

Known-exploited (KEV)1,756

Sync lag35 MIN

03 Severity mix

04 Latest published

CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished

CVE-2026-1160464.8Medium—4.8Mediumeventcatalog sdk Custom Documentation Helpers custom-docs.ts rmCustomDoc path traversaleventcatalog sdk47 MIN AGO

CVE-2026-1160455.3Medium—5.3Medium1999AZZAR designer-mcp MCP motion-dev-guidelines.md get_reference path traversal1999azzar designer-mcp1 HR AGO

CVE-2026-115251—Unrated——UnratedDuplicator 1.5.17 - Multisite Subsite Admin+ Network-Wide PHP Code Execution via One-Click Upgradeunknown duplicator1 HR AGO

CVE-2026-115214—Unrated——UnratedDatawiza Proxy Auth Plugin 1.1.0 - Unauthenticated Privilege Escalation via X-User and Role Headersunknown datawiza proxy auth plugin1 HR AGO

CVE-2026-115183—Unrated——UnratedQi Addons For Elementor < 1.11.2 - Contributor+ Content Injection via Animated Text Widgetunknown qi addons for elementor1 HR AGO

CVE-2026-114743—Unrated——UnratedInstaWP Connect < 0.1.4.2 - Authenticated Plugin Settings Update via instawp_update_settingsunknown instawp connect1 HR AGO

CVE-2026-114742—Unrated——UnratedWP VR 8.3.0 - 9.0.2 - Contributor+ Arbitrary Tour Update via IDORunknown wpvr1 HR AGO

CVE-2026-114741—Unrated——UnratedWP VR 9.0.0 - 9.0.2 - Contributor+ Arbitrary Tour Update and Disclosure via IDORunknown wpvr1 HR AGO

CVE-2026-114740—Unrated——UnratedWP VR 8.5.55 - 9.1.2 - Contributor+ Arbitrary Tour Creation and Publishing via Setup Wizardunknown wpvr1 HR AGO

CVE-2026-111981—Unrated——UnratedGiveWP < 4.19.0.1 - Authenticated Arbitrary Donor Address Modification via donor_manage_addressesunknown givewp1 HR AGO

CVE-2026-111980—Unrated——UnratedGiveWP < 4.19.0.1 - Give Worker+ Arbitrary Page Modification via Campaign Page Capability Grantunknown givewp1 HR AGO

CVE-2026-111979—Unrated——UnratedGiveWP < 4.19.0.1 - Give Worker+ Stored XSS via Form Template Primary Colorunknown givewp1 HR AGO

CVE-2026-111978—Unrated——UnratedGiveWP < 4.19.0.1 - Give Manager+ Path Traversal via Core Settings Importunknown givewp1 HR AGO

CVE-2026-111976—Unrated——UnratedGiveWP < 4.19.0.1 - Unauthenticated Unpublished Donation Form Disclosure via Form View Routeunknown givewp1 HR AGO

CVE-2026-110285—Unrated——UnratedWP Stripe Checkout < 1.2.2.62 - Unauthenticated Forged Payment Completion via an Unset Webhook Signing Secretunknown wp stripe checkout1 HR AGO

View all 413,941 records

05 Recently added to KEV

KEVCVE-2026-114625arista networks velocloud orchestratorAdded 2026-10-23

KEVCVE-2026-110447collabora collabora online - built-in code serverAdded 2026-10-23

KEVCVE-2026-96656plex media serverAdded 2026-10-20

KEVCVE-2026-96655plex media serverAdded 2026-10-20

KEVCVE-2026-96654plex media serverAdded 2026-10-20

KEVCVE-2026-96652plex media serverAdded 2026-10-20