Synchronized NVD + CISA KEV records
CVE Database
Search medium-to-critical vulnerability records by CVE ID, title, product, severity, year, or known-exploited status.
- Catalog records
- 302,587
- medium through critical
- Critical
- 46,554
- highest-impact records
- CISA KEV
- 1,506
- known exploited
- Agent-ready
- 302,587
- bounded composed plans
- CVE-2026-89079The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 7.2.1CriticalCVSS 9.8Open remediation record
- CVE-2026-103768Elextensions Elex Wordpress Helpdesk & Customer Ticketing System security vulnerabilityCriticalCVSS 9.8Open remediation record
- CVE-2026-104798Joedolson My Calendar – Accessible Event Manager security vulnerabilityCriticalCVSS 9.8Open remediation record
- CVE-2026-109219Kitae-Park Mang Board security vulnerabilityCriticalCVSS 9.8Open remediation record
- CVE-2026-109515The MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber EtcCriticalCVSS 9.8Open remediation record
- CVE-2026-111444Wheels security vulnerabilityCriticalCVSS 9.8Open remediation record
- CVE-2026-85659The PilotPress plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 2.0.43HighCVSS 8.8Open remediation record
- CVE-2026-111380Freerdp security vulnerabilityHighCVSS 8.8Open remediation record
- CVE-2026-111382Freerdp security vulnerabilityHighCVSS 8.8Open remediation record
- CVE-2026-111378Freerdp security vulnerabilityHighCVSS 8.7Open remediation record
No JavaScript? Browse the plain-HTML CVE archive by publication year: 2026 · 2025 · 2024 · 2023 · 2022 · 2021 · 2018. Ready to act on a finding? Use the AI vulnerability remediation playbooks, vulnerable dependency workflow, or CVE intelligence intake gate.
Fast lanes
Start with the queue that matters.
Each link opens a shareable filter. Refine by publication year, title, product, or an exact CVE ID in the catalog.