Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

341,394

All time

Critical · Active

11,074

CVSS ≥ 9.0

New · 14 days

3,184

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 4141–4170 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-62918	medium	5.4/10	WordPress IgnitionDeck plugin <= 2.0.15 - Broken Access Control vulnerability	Oct 27, 2025 9mo ago
CVE-2025-62917	medium	6.5/10	WordPress Tooltipy plugin <= 5.5.9 - Cross Site Scripting (XSS) vulnerability	Oct 27, 2025 9mo ago
CVE-2025-62916	medium	5.4/10	WordPress Flights & Hotels Booking WP Plugin plugin <= 3.1 - Broken Access Control vulnerability	Oct 27, 2025 9mo ago
CVE-2025-62915	medium	4.3/10	WordPress SMS Contact Form 7 Notifications by ClickSend plugin <= 1.4.0 - Broken Access Control vulnerability	Oct 27, 2025 9mo ago
CVE-2025-62913	medium	6.5/10	WordPress Opal Service plugin <= 1.9.1 - Cross Site Scripting (XSS) vulnerability	Oct 27, 2025 9mo ago
CVE-2025-62912	medium	6.5/10	WordPress SiteGround Email Marketing plugin <= 1.7.1 - Cross Site Scripting (XSS) vulnerability	Oct 27, 2025 9mo ago
CVE-2025-62911	medium	6.5/10	WordPress Rock Convert plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerability	Oct 27, 2025 9mo ago
CVE-2025-62910	medium	6.5/10	WordPress Video Gallery by Huzzaz plugin <= 10.5 - Cross Site Scripting (XSS) vulnerability	Oct 27, 2025 9mo ago
CVE-2025-62909	medium	4.3/10	WordPress Smart WeTransfer plugin <= 1.3 - Broken Access Control vulnerability	Oct 27, 2025 9mo ago
CVE-2025-62907	medium	6.5/10	WordPress Custom Post Type Attachment plugin <= 3.4.6 - Cross Site Scripting (XSS) vulnerability	Oct 27, 2025 9mo ago
CVE-2025-62906	medium	4.3/10	WordPress Referral Link Tracker plugin <= 1.1.4 - Broken Access Control vulnerability	Oct 27, 2025 9mo ago
CVE-2025-62905	medium	6.5/10	WordPress Query Posts plugin <= 0.3.2 - Cross Site Scripting (XSS) vulnerability	Oct 27, 2025 9mo ago
CVE-2025-62904	medium	6.5/10	WordPress WP Geo plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability	Oct 27, 2025 9mo ago
CVE-2025-62903	medium	6.5/10	WordPress WPC Smart Messages for WooCommerce plugin <= 4.2.8 - Cross Site Scripting (XSS) vulnerability	Oct 27, 2025 9mo ago
CVE-2025-62902	medium	5.3/10	WordPress WP Popup Builder plugin <= 1.3.8 - Sensitive Data Exposure vulnerability	Oct 27, 2025 9mo ago
CVE-2025-62900	medium	6.5/10	WordPress Popular Posts by Webline plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability	Oct 27, 2025 9mo ago
CVE-2025-62899	medium	5.9/10	WordPress Photospace Responsive plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability	Oct 27, 2025 9mo ago
CVE-2025-62898	medium	6.5/10	WordPress Links shortcode plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability	Oct 27, 2025 9mo ago
CVE-2025-62897	medium	5.3/10	WordPress WP Recipe Maker plugin < 10.1.0 - Content Injection vulnerability	Oct 27, 2025 9mo ago
CVE-2025-62896	high	7.1/10	WordPress Multilang Contact Form plugin <= 1.5 - Cross Site Request Forgery (CSRF) vulnerability	Oct 27, 2025 9mo ago
CVE-2025-62895	medium	5.3/10	WordPress Atarim plugin <= 4.2.1 - Sensitive Data Exposure vulnerability	Oct 27, 2025 9mo ago
CVE-2025-62894	medium	6.5/10	WordPress ACF Recent Posts Widget plugin <= 5.9.3 - Cross Site Scripting (XSS) vulnerability	Oct 27, 2025 9mo ago
CVE-2025-62892	medium	5.3/10	WordPress Sunshine Photo Cart plugin <= 3.5.3 - Broken Access Control vulnerability	Oct 27, 2025 9mo ago
CVE-2025-62891	medium	4.3/10	WordPress Off-Canvas Sidebars & Menus (Slidebars) plugin <= 0.5.8.5 - Cross Site Request Forgery (CSRF) vulnerability	Oct 27, 2025 9mo ago
CVE-2025-62890	medium	4.3/10	WordPress Premmerce Brands for WooCommerce plugin <= 1.2.13 - Cross Site Request Forgery (CSRF) vulnerability	Oct 27, 2025 9mo ago
CVE-2025-62889	medium	6.5/10	WordPress King Addons for Elementor plugin <= 51.1.61 - Broken Access Control vulnerability	Oct 27, 2025 9mo ago
CVE-2025-62887	medium	6.5/10	WordPress King Addons for Elementor plugin <= 51.1.61 - Cross Site Scripting (XSS) vulnerability	Oct 27, 2025 9mo ago
CVE-2025-62886	high	7.1/10	WordPress Pricing Table builder plugin <= 1.5.3 - Cross Site Request Forgery (CSRF) vulnerability	Oct 27, 2025 9mo ago
CVE-2025-62885	medium	6.5/10	WordPress WP VR plugin <= 8.5.48 - Cross Site Scripting (XSS) vulnerability	Oct 27, 2025 9mo ago
CVE-2025-62884	medium	5.3/10	WordPress Coupon Affiliates plugin <= 7.2.0 - Broken Access Control vulnerability	Oct 27, 2025 9mo ago