A clear view of public CVE records.

Search the official CVE List, read source records directly, and distinguish published, reserved, and rejected identifiers.

420,810 indexed CVE records · CVE intelligence checked every 15 minutes.
Last successful database refresh: 7 November 2026, 09:31 UTC

Recently published

CVE-2026-121762 PUBLISHED

WordPress PowerPress Podcasting plugin <= 11.18.0 - Cross Site Request Forgery (CSRF) vulnerability

7 November 2026, 09:27 UTC

CVE-2026-107616 PUBLISHED

Booking for Appointments and Events Calendar <= 9.9.1 - Missing Authorization to Unauthenticated Arbitrary Event Attendee Data Exposure via '/report/event/attendees' Endpoint

7 November 2026, 09:25 UTC

CVE-2026-120532 PUBLISHED

wpForo Forum <= 3.2.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Reply Body in Moderation Forms

7 November 2026, 09:25 UTC

CVE-2026-95870 PUBLISHED

wpForo Forum <= 3.2.1 - Unauthenticated SQL Injection via 'data' Parameter

7 November 2026, 09:25 UTC

CVE-2026-119164 PUBLISHED

wpForo Forum <= 3.2.2 - Authenticated (Subscriber+) Privilege Escalation to 'data[secondary_groupids]' CSV Parameter

7 November 2026, 09:25 UTC

CVE-2026-103900 PUBLISHED

WPJAM Basic <= 7.1 - Unauthenticated Privilege Escalation to 'data[args][role]' Parameter

7 November 2026, 09:25 UTC

CVE-2026-118784 PUBLISHED

WPSpeed <= 2.6.10 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User Nickname/Display Name

7 November 2026, 09:25 UTC

CVE-2026-104992 PUBLISHED

Booking for Appointments and Events Calendar <= 9.9.1 - Missing Authorization to Authenticated (Custom+) Sensitive Information Disclosure via '/report/event/bookings' Endpoint

7 November 2026, 09:25 UTC

A clear view of public CVE records.

Recently published

Recently updated