Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,738

All time

Critical · Active

12,169

CVSS ≥ 9.0

New · 14 days

3,056

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 5161–5190 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-58980	medium	5.3/10	WordPress Export WP Page to Static HTML/CSS Plugin <= 4.1.0 - Broken Access Control Vulnerability	Sep 9, 2025 11mo ago
CVE-2025-58982	medium	5.9/10	WordPress Pixeline's Email Protector Plugin <= 1.3.8 - Cross Site Scripting (XSS) Vulnerability	Sep 9, 2025 11mo ago
CVE-2025-58984	medium	5.9/10	WordPress Welcart e-Commerce Plugin <= 2.11.20 - Cross Site Scripting (XSS) Vulnerability	Sep 9, 2025 11mo ago
CVE-2025-58983	medium	5.9/10	WordPress Include Me Plugin <= 1.3.2 - Cross Site Scripting (XSS) Vulnerability	Sep 9, 2025 11mo ago
CVE-2025-58985	medium	6.5/10	WordPress Additional Custom Product Tabs for WooCommerce Plugin <= 1.7.3 - Cross Site Scripting (XSS) Vulnerability	Sep 9, 2025 11mo ago
CVE-2025-58987	medium	6.5/10	WordPress Football Pool Plugin <= 2.12.6 - Cross Site Scripting (XSS) Vulnerability	Sep 9, 2025 11mo ago
CVE-2025-58988	medium	6.5/10	WordPress My Tickets Plugin <= 2.0.22 - Cross Site Scripting (XSS) Vulnerability	Sep 9, 2025 11mo ago
CVE-2025-58989	medium	6.5/10	WordPress Dynamic Text Field For Contact Form 7 Plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability	Sep 9, 2025 11mo ago
CVE-2025-58991	high	7.1/10	WordPress WooCommerce Booking Bundle Hours Plugin <= 0.7.4 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 9, 2025 11mo ago
CVE-2025-58993	high	7.6/10	WordPress Tutor LMS Plugin <= 3.7.4 - SQL Injection Vulnerability	Sep 9, 2025 11mo ago
CVE-2025-58990	medium	6.5/10	WordPress ShopLentor Plugin <= 3.2.0 - Cross Site Scripting (XSS) Vulnerability	Sep 9, 2025 11mo ago
CVE-2025-58997	critical	9.6/10	WordPress Mow Theme <= 4.10 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 9, 2025 11mo ago
CVE-2025-53303	high	8.8/10	WordPress ThemeMove Core Plugin <= 1.4.2 - PHP Object Injection Vulnerability	Sep 9, 2025 11mo ago
CVE-2025-58215	high	8.1/10	WordPress Ziston Theme < 1.4.5 - Local File Inclusion Vulnerability	Sep 9, 2025 11mo ago
CVE-2025-48101	high	8.8/10	WordPress Constant Contact for WordPress Plugin <= 4.1.1 - PHP Object Injection Vulnerability	Sep 9, 2025 11mo ago
CVE-2025-49430	high	7.2/10	WordPress Ultimate Video Player Plugin <= 10.1 - Server Side Request Forgery (SSRF) Vulnerability	Sep 9, 2025 11mo ago
CVE-2025-30875	medium	5.9/10	WordPress WP Weixin plugin <= 1.3.16 - Cross Site Scripting (XSS) vulnerability	Sep 9, 2025 11mo ago
CVE-2025-53340	medium	5.3/10	WordPress Awesome Support plugin <= 6.3.6 - Sensitive Data Exposure vulnerability	Sep 9, 2025 11mo ago
CVE-2025-53291	medium	5.4/10	WordPress Spreadconnect plugin <= 2.1.5 - Broken Access Control Vulnerability	Sep 9, 2025 11mo ago
CVE-2025-53348	medium	5.3/10	WordPress Kalium Theme <= 3.18.3 - Broken Access Control Vulnerability	Sep 9, 2025 11mo ago
CVE-2025-54709	high	8.1/10	WordPress Sala Theme <= 1.1.6 - Local File Inclusion Vulnerability	Sep 9, 2025 11mo ago
CVE-2025-32486	critical	9.8/10	WordPress Material Dashboard plugin <= 1.4.6 - Privilege Escalation Vulnerability	Sep 9, 2025 11mo ago
CVE-2025-32689	high	7.5/10	WordPress Download Manager and Payment Form plugin <= 2.8.2 - Price Manipulation vulnerability	Sep 9, 2025 11mo ago
CVE-2025-32688	medium	5.4/10	WordPress Target Video Easy Publish plugin <= 3.8.9 - Arbitrary Code Execution vulnerability	Sep 9, 2025 11mo ago
CVE-2025-39541	medium	6.5/10	WordPress WP Simple Booking Calendar plugin <= 2.0.13 - Broken Access Control vulnerability	Sep 9, 2025 11mo ago
CVE-2025-39523	medium	4.7/10	WordPress GoodBarber plugin <= 1.0.26 - Open Redirection Vulnerability	Sep 9, 2025 11mo ago
CVE-2025-39553	medium	4.3/10	WordPress Church Admin plugin <= 5.0.9 - Sensitive Data Exposure vulnerability	Sep 9, 2025 11mo ago
CVE-2025-47569	critical	9.3/10	WordPress WooCommerce Ultimate Gift Card plugin <= 2.9.6 - SQL Injection vulnerability	Sep 9, 2025 11mo ago
CVE-2025-47437	medium	6.4/10	WordPress LiteSpeed Cache plugin <= 7.0.1 - Server Side Request Forgery (SSRF) vulnerability	Sep 9, 2025 11mo ago
CVE-2025-47571	high	7.5/10	WordPress Super Store Finder plugin < 7.8 - Local File Inclusion vulnerability	Sep 9, 2025 11mo ago