Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,368

All time

Critical · Active

12,132

CVSS ≥ 9.0

New · 14 days

2,789

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 4321–4350 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-52773	critical	9.3/10	WordPress HieCOR Payment Gateway plugin plugin <= 1.5.11 - SQL Injection vulnerability	Nov 6, 2025 9mo ago
CVE-2025-52764	high	7.1/10	WordPress flexoslider plugin <= 1.0004 - Cross Site Scripting (XSS) vulnerability	Nov 6, 2025 9mo ago
CVE-2025-49909	high	7.1/10	WordPress Penci Bookmark & Follow plugin < 2.4 - Cross Site Scripting (XSS) vulnerability	Nov 6, 2025 9mo ago
CVE-2025-49905	high	7.1/10	WordPress Range Slider Addon for Gravity Forms plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability	Nov 6, 2025 9mo ago
CVE-2025-49904	high	7.1/10	WordPress Booking and Rental Manager plugin <= 2.5.3 - Cross Site Scripting (XSS) vulnerability	Nov 6, 2025 9mo ago
CVE-2025-49900	high	8.8/10	WordPress Advanced scrollbar plugin <= 1.1.8 - Privilege Escalation vulnerability	Nov 6, 2025 9mo ago
CVE-2025-49398	medium	6.5/10	WordPress Easy Appointments plugin <= 3.12.14 - Content Injection vulnerability	Nov 6, 2025 9mo ago
CVE-2025-49394	high	7.1/10	WordPress Image Gallery block – Create and display photo gallery/photo album. plugin <= 1.0.7 - Broken Authentication vulnerability	Nov 6, 2025 9mo ago
CVE-2025-49393	critical	9.8/10	WordPress Sign-up Sheets Plugin <= 2.3.2 - PHP Object Injection Vulnerability	Nov 6, 2025 9mo ago
CVE-2025-49390	high	7.1/10	WordPress Cookie Notice & Consent plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability	Nov 6, 2025 9mo ago
CVE-2025-49386	high	8.8/10	WordPress Preserve Code Formatting Plugin <= 4.0.1 - PHP Object Injection Vulnerability	Nov 6, 2025 9mo ago
CVE-2025-49372	critical	10.0/10	WordPress HAPPY plugin <= 1.0.7 - Remote Code Execution (RCE) vulnerability	Nov 6, 2025 9mo ago
CVE-2025-48330	high	7.5/10	WordPress Real Time Validation for Gravity Forms <= 1.7.0 - Local File Inclusion Vulnerability	Nov 6, 2025 9mo ago
CVE-2025-48290	high	8.1/10	WordPress Kinsley theme <= 3.4.4 - Local File Inclusion vulnerability	Nov 6, 2025 9mo ago
CVE-2025-48090	high	8.1/10	WordPress Blanka - One Page WordPress Theme Theme < 1.5 - Local File Inclusion Vulnerability	Nov 6, 2025 9mo ago
CVE-2025-48089	critical	9.3/10	WordPress Education WordPress Theme \| HiStudy theme < 3.1.0 - SQL Injection vulnerability	Nov 6, 2025 9mo ago
CVE-2025-48086	medium	5.5/10	WordPress Ajax Search Lite plugin <= 4.13.3 - PHP Object Injection vulnerability	Nov 6, 2025 9mo ago
CVE-2025-48085	high	7.1/10	WordPress Simple Stripe plugin <= 0.9.17 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability	Nov 6, 2025 9mo ago
CVE-2025-48083	high	7.1/10	WordPress wpNamedUsers plugin <= 0.5 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability	Nov 6, 2025 9mo ago
CVE-2025-48078	high	7.1/10	WordPress Slick Google Map plugin <= 0.3 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability	Nov 6, 2025 9mo ago
CVE-2025-48077	high	7.1/10	WordPress Block Country plugin <= 1.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability	Nov 6, 2025 9mo ago
CVE-2025-47588	critical	9.1/10	WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.9 - Arbitrary Code Execution vulnerability	Nov 6, 2025 9mo ago
CVE-2025-39468	high	8.1/10	WordPress Modal Survey plugin <= 2.0.2.0.1 - Local File Inclusion vulnerability	Nov 6, 2025 9mo ago
CVE-2025-39467	high	8.1/10	WordPress Wanderland theme <= 1.7.1 - Local File Inclusion Vulnerability	Nov 6, 2025 9mo ago
CVE-2025-39466	high	8.1/10	WordPress Dør theme <= 2.4 - Local File Inclusion Vulnerability	Nov 6, 2025 9mo ago
CVE-2025-39465	medium	4.3/10	WordPress Advanced Google Maps plugin <= 5.8.4 - Broken Access Control vulnerability	Nov 6, 2025 9mo ago
CVE-2025-39463	high	7.5/10	WordPress Dessau theme < 1.9 - Local File Inclusion vulnerability	Nov 6, 2025 9mo ago
CVE-2025-32222	critical	9.9/10	WordPress Widget Logic <= 6.0.5 - Remote Code Execution (RCE) Vulnerability	Nov 6, 2025 9mo ago
CVE-2025-31029	high	7.1/10	WordPress replyMail plugin <= 1.2.0 - Cross Site Request Forgery (CSRF) vulnerability	Nov 6, 2025 9mo ago
CVE-2025-28953	high	8.5/10	WordPress smart SEO plugin <= 4.0 - SQL Injection Vulnerability	Nov 6, 2025 9mo ago