Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,738

All time

Critical · Active

12,169

CVSS ≥ 9.0

New · 14 days

3,056

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 5221–5250 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-58878	medium	6.5/10	WordPress Woocommerce Gifts Product Plugin <= 1.0.0 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58876	medium	6.5/10	WordPress Aparat Video Shortcode Plugin <= 0.2.4 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58875	medium	6.5/10	WordPress WP Github Gist Plugin <= 0.5 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58874	medium	6.5/10	WordPress StoryMap Plugin <= 2.1 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58873	medium	5.9/10	WordPress Pushe Web Push Notification Plugin <= 0.5.0 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58872	medium	6.5/10	WordPress Simple Price Calculator Plugin <= 1.3 - Broken Access Control Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58871	medium	6.5/10	WordPress Master Paper Collapse Toggle Plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58870	medium	6.5/10	WordPress WP-GraphViz Plugin <= 1.5.1 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58869	medium	6.5/10	WordPress SimaCookie Plugin <= 1.3.2 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58868	medium	6.5/10	WordPress SimaCookie Plugin <= 1.3.2 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58867	medium	6.5/10	WordPress Easy Download Media Counter Plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58866	low	2.7/10	WordPress Site Info Plugin <= 1.1 - Sensitive Data Exposure Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58865	medium	4.3/10	WordPress Compact Admin plugin <= 1.3.3 - Cross Site Request Forgery (CSRF) vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58864	medium	6.5/10	WordPress 金数据 Plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58863	medium	6.5/10	WordPress Zoomify embed for WP Plugin <= 1.5.2 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58862	medium	6.5/10	WordPress WordPress Events Calendar Plugin – connectDaily Plugin <= 1.5.5 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58861	high	7.1/10	WordPress Quick Event Calendar Plugin <= 1.4.9 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58860	high	7.1/10	WordPress Enable Latex Plugin <= 1.2.16 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58859	high	7.1/10	WordPress Add to Feedly Plugin <= 1.2.11 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58858	medium	6.5/10	WordPress WPB Image Widget Plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58857	high	7.1/10	WordPress Table of content Plugin <= 1.5.3.1 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58856	medium	6.5/10	WordPress Woocommerce Notify Updated Product Plugin <= 1.6 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58855	high	7.1/10	WordPress AP HoneyPot WordPress Plugin Plugin <= 1.4 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58854	high	7.1/10	WordPress Ultimate AJAX Login Plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58853	high	7.1/10	WordPress Popping Sidebars and Widgets Light Plugin <= 1.27 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58852	high	7.1/10	WordPress MSTW League Manager Plugin <= 2.10 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58851	medium	6.5/10	WordPress Boxed Content Plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58850	medium	6.5/10	WordPress Showpass WordPress Extension Plugin <= 4.0.3 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58849	high	7.1/10	WordPress Hide Real Download Path Plugin <= 1.6 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58848	high	7.1/10	WordPress WP likes Plugin <= 3.1.1 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 11mo ago