Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,080

All time

Critical · Active

12,093

CVSS ≥ 9.0

New · 14 days

2,552

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 3751–3780 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-53431	high	8.1/10	WordPress Emberlyn theme <= 1.3.1 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-53430	high	8.1/10	WordPress Etta theme <= 1.14.0 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-53429	high	8.1/10	WordPress Exit Game theme <= 1.4.3 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-52768	high	8.1/10	WordPress Faith & Hope theme <= 2.13.0 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-52745	high	8.1/10	WordPress Farm Agrico theme <= 1.3.11 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-49943	high	8.1/10	WordPress Femme theme <= 1.3.11 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-49942	high	8.1/10	WordPress Gardis theme <= 1.2.13 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-49941	high	8.1/10	WordPress GlamChic theme <= 1.0.11 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-49919	medium	5.8/10	WordPress eRoom plugin <= 1.5.6 - Sensitive Data Exposure vulnerability	Dec 18, 2025 8mo ago
CVE-2025-49918	medium	5.9/10	WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.2 - Sensitive Data Exposure vulnerability	Dec 18, 2025 8mo ago
CVE-2025-49914	medium	6.5/10	WordPress Restaurant Menu by MotoPress plugin <= 2.4.7 - Sensitive Data Exposure vulnerability	Dec 18, 2025 8mo ago
CVE-2025-49902	medium	6.5/10	WordPress Login Page Customizer – Customizer Login Page, Admin Page, Custom Design plugin <= 2.1.1 - Broken Access Control vulnerability	Dec 18, 2025 8mo ago
CVE-2025-49379	high	7.2/10	WordPress Custom Fields Account Registration For Woocommerce plugin <= 1.2 - Privilege Escalation vulnerability	Dec 18, 2025 8mo ago
CVE-2025-49371	high	8.1/10	WordPress Strux theme <= 1.9 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-49370	high	8.1/10	WordPress Lymcoin theme <= 1.3.12 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-49369	high	8.1/10	WordPress Lettuce theme <= 1.1.7 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-49368	high	8.1/10	WordPress Palladio theme <= 1.1.10 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-49367	high	8.1/10	WordPress Monyxi theme <= 1.1.8 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-49366	high	8.1/10	WordPress Hanani theme <= 1.2.11 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-49365	high	8.1/10	WordPress Jack Well theme <= 1.0.14 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-49364	high	8.1/10	WordPress Ludos Paradise theme <= 2.1.3 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-49363	high	8.1/10	WordPress Kings & Queens theme <= 1.1.16 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-49362	high	8.1/10	WordPress Gracioza theme <= 1.0.15 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-49361	high	8.1/10	WordPress Mamita theme <= 1.0.9 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-49360	high	8.1/10	WordPress Militarology theme <= 1.0.15 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-49359	high	8.1/10	WordPress ShieldGroup theme <= 2.13 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-49041	medium	6.5/10	WordPress Get Cash plugin <= 3.2.3 - Broken Access Control vulnerability	Dec 18, 2025 8mo ago
CVE-2025-14314	high	8.5/10	WordPress PopupKit plugin <= 2.1.5 - SQL Injection vulnerability	Dec 18, 2025 8mo ago
CVE-2025-10019	medium	6.5/10	WordPress Contact Form Email plugin <= 1.3.60 - Insecure Direct Object References (IDOR) vulnerability	Dec 18, 2025 8mo ago
CVE-2025-13537	medium	6.4/10	Live Composer – Free WordPress Website Builder <= 2.0.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting	Dec 17, 2025 8mo ago