Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

341,415

All time

Critical · Active

11,077

CVSS ≥ 9.0

New · 14 days

3,143

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 4801–4830 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-10690	critical	9.8/10	Goza - Nonprofit Charity WordPress Theme <= 3.2.2 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation	Sep 19, 2025 10mo ago
CVE-2025-8565	high	8.1/10	Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages <= 3.4.3 - Missing Authorization to Authenticated (Contributor+) Arbitrary Plugin Installation	Sep 18, 2025 10mo ago
CVE-2025-9216	high	8.8/10	StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File Upload	Sep 17, 2025 10mo ago
CVE-2025-9215	medium	6.5/10	StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File Download	Sep 17, 2025 10mo ago
CVE-2025-10057	high	8.8/10	WP Import – Ultimate CSV XML Importer for WordPress 7.20 - 7.28 - Authenticated (Subscriber+) Remote Code Execution via Code Injection	Sep 17, 2025 10mo ago
CVE-2025-10058	high	8.1/10	WP Import – Ultimate CSV XML Importer for WordPress <= 7.27 - Authenticated (Subscriber+) Arbitrary File Deletion	Sep 17, 2025 10mo ago
CVE-2025-9776	medium	6.5/10	CatFolders – Tame Your WordPress Media Library by Category <= 2.5.2 - Authenticated (Author+) SQL Injection via CSV Import	Sep 11, 2025 10mo ago
CVE-2025-7718	high	8.8/10	Resideo Plugin for Resideo - Real Estate WordPress Theme <= 2.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Privilege Escalation via Account Takeover	Sep 10, 2025 10mo ago
CVE-2025-10001	high	7.2/10	Import any XML, CSV or Excel File to WordPress <= 3.9.3 - Authenticated (Admin+) Limited Unsafe File Upload	Sep 10, 2025 10mo ago
CVE-2025-10040	high	7.7/10	WP Import – Ultimate CSV XML Importer for WordPress <= 7.27 - Missing Authorization to Authenticated (Subscriber+) FTP/SFTP Credential Exposure	Sep 10, 2025 10mo ago
CVE-2025-7049	high	8.8/10	WPGYM - Wordpress Gym Management System <= 67.7.0 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover	Sep 10, 2025 10mo ago
CVE-2025-58976	medium	4.3/10	WordPress Accessibility Checker by Equalize Digital Plugin <= 1.31.0 - Broken Access Control Vulnerability	Sep 9, 2025 10mo ago
CVE-2025-58975	medium	4.3/10	WordPress Advanced Settings Plugin <= 3.1.1 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 9, 2025 10mo ago
CVE-2025-58978	medium	5.3/10	WordPress PDF Generator for WordPress Plugin <= 1.5.4 - Broken Access Control Vulnerability	Sep 9, 2025 10mo ago
CVE-2025-58977	medium	4.9/10	WordPress WP eBay Product Feeds Plugin <= 3.4.8 - Server Side Request Forgery (SSRF) Vulnerability	Sep 9, 2025 10mo ago
CVE-2025-58979	medium	5.3/10	WordPress BerqWP Plugin <= 2.2.53 - Broken Access Control Vulnerability	Sep 9, 2025 10mo ago
CVE-2025-58981	medium	5.4/10	WordPress Accessibility Checker by Equalize Digital Plugin <= 1.31.0 - Broken Access Control Vulnerability	Sep 9, 2025 10mo ago
CVE-2025-58980	medium	5.3/10	WordPress Export WP Page to Static HTML/CSS Plugin <= 4.1.0 - Broken Access Control Vulnerability	Sep 9, 2025 10mo ago
CVE-2025-58982	medium	5.9/10	WordPress Pixeline's Email Protector Plugin <= 1.3.8 - Cross Site Scripting (XSS) Vulnerability	Sep 9, 2025 10mo ago
CVE-2025-58984	medium	5.9/10	WordPress Welcart e-Commerce Plugin <= 2.11.20 - Cross Site Scripting (XSS) Vulnerability	Sep 9, 2025 10mo ago
CVE-2025-58983	medium	5.9/10	WordPress Include Me Plugin <= 1.3.2 - Cross Site Scripting (XSS) Vulnerability	Sep 9, 2025 10mo ago
CVE-2025-58985	medium	6.5/10	WordPress Additional Custom Product Tabs for WooCommerce Plugin <= 1.7.3 - Cross Site Scripting (XSS) Vulnerability	Sep 9, 2025 10mo ago
CVE-2025-58987	medium	6.5/10	WordPress Football Pool Plugin <= 2.12.6 - Cross Site Scripting (XSS) Vulnerability	Sep 9, 2025 10mo ago
CVE-2025-58988	medium	6.5/10	WordPress My Tickets Plugin <= 2.0.22 - Cross Site Scripting (XSS) Vulnerability	Sep 9, 2025 10mo ago
CVE-2025-58989	medium	6.5/10	WordPress Dynamic Text Field For Contact Form 7 Plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability	Sep 9, 2025 10mo ago
CVE-2025-58991	high	7.1/10	WordPress WooCommerce Booking Bundle Hours Plugin <= 0.7.4 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 9, 2025 10mo ago
CVE-2025-58993	high	7.6/10	WordPress Tutor LMS Plugin <= 3.7.4 - SQL Injection Vulnerability	Sep 9, 2025 10mo ago
CVE-2025-58990	medium	6.5/10	WordPress ShopLentor Plugin <= 3.2.0 - Cross Site Scripting (XSS) Vulnerability	Sep 9, 2025 10mo ago
CVE-2025-58997	critical	9.6/10	WordPress Mow Theme <= 4.10 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 9, 2025 10mo ago
CVE-2025-53303	high	8.8/10	WordPress ThemeMove Core Plugin <= 1.4.2 - PHP Object Injection Vulnerability	Sep 9, 2025 10mo ago