Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,368

All time

Critical · Active

12,132

CVSS ≥ 9.0

New · 14 days

2,789

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 4291–4320 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-58636	critical	9.8/10	WordPress WP Gravity Forms Keap/Infusionsoft Plugin <= 1.2.3 - Deserialization of untrusted data Vulnerability	Nov 6, 2025 9mo ago
CVE-2025-58629	high	7.5/10	WordPress Miraculous theme < 2.0.9 - Arbitrary Content Deletion vulnerability	Nov 6, 2025 9mo ago
CVE-2025-58627	critical	9.8/10	WordPress Miraculous Core Plugin plugin < 2.0.9 - Insecure Direct Object References (IDOR) vulnerability	Nov 6, 2025 9mo ago
CVE-2025-58619	high	8.8/10	WordPress Falang multilanguage Plugin <= 1.3.65 - PHP Object Injection Vulnerability	Nov 6, 2025 9mo ago
CVE-2025-58595	medium	5.3/10	WordPress All In One Login plugin <= 2.0.8 - Bypass Vulnerability vulnerability	Nov 6, 2025 9mo ago
CVE-2025-58592	high	8.1/10	WordPress TranslatePress Plugin <= 2.10.2 - Deserialization of untrusted data Vulnerability	Nov 6, 2025 9mo ago
CVE-2025-58243	medium	5.3/10	WordPress imEvent Theme <= 3.4.0 - Broken Access Control Vulnerability	Nov 6, 2025 9mo ago
CVE-2025-58207	high	8.2/10	WordPress Ai Image Alt Text Generator for WP Plugin <= 1.1.5 - Broken Access Control Vulnerability	Nov 6, 2025 9mo ago
CVE-2025-5803	medium	5.3/10	WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.2 - Broken Access Control vulnerability	Nov 6, 2025 9mo ago
CVE-2025-54737	high	7.1/10	WordPress Jobmonster theme <= 4.7.8 - Cross Site Scripting (XSS) vulnerability	Nov 6, 2025 9mo ago
CVE-2025-54722	high	7.1/10	WordPress WooTour plugin <= 3.6.3 - Cross Site Scripting (XSS) vulnerability	Nov 6, 2025 9mo ago
CVE-2025-54721	high	7.1/10	WordPress Resca theme <= 3.0.2 - Cross Site Scripting (XSS) vulnerability	Nov 6, 2025 9mo ago
CVE-2025-54719	high	8.8/10	WordPress Yogi - Health Beauty & Yoga Theme <= 2.9.2 - Deserialization of untrusted data Vulnerability	Nov 6, 2025 9mo ago
CVE-2025-54718	high	7.1/10	WordPress Yogi - Health Beauty & Yoga theme <= 2.9.2 - Cross Site Scripting (XSS) vulnerability	Nov 6, 2025 9mo ago
CVE-2025-54711	high	7.1/10	WordPress Info Cards Plugin <= 1.0.11 - Broken Access Control Vulnerability	Nov 6, 2025 9mo ago
CVE-2025-53586	high	8.8/10	WordPress WeMusic Theme <= 1.9.1 - PHP Object Injection Vulnerability	Nov 6, 2025 9mo ago
CVE-2025-53585	high	7.1/10	WordPress WeMusic theme <= 1.9.1 - Cross Site Scripting (XSS) vulnerability	Nov 6, 2025 9mo ago
CVE-2025-53574	high	7.1/10	WordPress Doliconnect Plugin <= 9.3.2 - Cross Site Scripting (XSS) Vulnerability	Nov 6, 2025 9mo ago
CVE-2025-53573	high	7.1/10	WordPress Epic Review Plugin <= 1.0.2 - Cross Site Scripting (XSS) Vulnerability	Nov 6, 2025 9mo ago
CVE-2025-53349	high	7.1/10	WordPress Kalium Theme <= 3.18.3 - Cross Site Scripting (XSS) Vulnerability	Nov 6, 2025 9mo ago
CVE-2025-53324	high	7.1/10	WordPress Gutenify Plugin <= 1.5.7 - Cross Site Scripting (XSS) Vulnerability	Nov 6, 2025 9mo ago
CVE-2025-53316	high	7.1/10	WordPress WP GDPR Cookie Consent plugin <= 1.0.0 - Cross Site Request Forgery (CSRF) Vulnerability	Nov 6, 2025 9mo ago
CVE-2025-53286	high	7.1/10	WordPress Dropify plugin <= 4.7.2 - Cross Site Scripting (XSS) vulnerability	Nov 6, 2025 9mo ago
CVE-2025-53283	critical	10.0/10	WordPress Drop Uploader for CF7 - Drag&Drop File Uploader Addon Plugin <= 2.4.1 - Arbitrary File Upload Vulnerability	Nov 6, 2025 9mo ago
CVE-2025-53252	high	7.5/10	WordPress Zegen Theme <= 1.1.9 - Local File Inclusion Vulnerability	Nov 6, 2025 9mo ago
CVE-2025-53246	medium	6.5/10	WordPress Backup and Move Plugin <= 0.1 - Broken Access Control Vulnerability	Nov 6, 2025 9mo ago
CVE-2025-53245	high	7.1/10	WordPress WP Logo Changer Plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability	Nov 6, 2025 9mo ago
CVE-2025-53242	critical	9.8/10	WordPress Seil Theme <= 1.7.1 - Deserialization of untrusted data Vulnerability	Nov 6, 2025 9mo ago
CVE-2025-53239	high	7.1/10	WordPress User Registration Aide Plugin <= 1.5.3.8 - Cross Site Scripting (XSS) Vulnerability	Nov 6, 2025 9mo ago
CVE-2025-53214	medium	6.5/10	WordPress Sertifier Certificate & Badge Maker plugin <= 1.21 - Broken Access Control Vulnerability	Nov 6, 2025 9mo ago