Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,738

All time

Critical · Active

12,169

CVSS ≥ 9.0

New · 14 days

3,056

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 5281–5310 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-58817	medium	4.3/10	WordPress SoftMe Theme <= 1.1.27 - Broken Access Control Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58816	low	3.5/10	WordPress Product Carousel Slider for Elementor Plugin <= 2.1.3 - Broken Access Control Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58815	high	7.2/10	WordPress Aitasi Coming Soon Plugin <= 2.0.2 - Deserialization of untrusted data Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58814	medium	6.5/10	WordPress Stagtools Plugin <= 2.3.8 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58813	medium	4.3/10	WordPress Consultstreet Theme <= 3.0.0 - Broken Access Control Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58812	medium	6.5/10	WordPress Best Restaurant Menu by PriceListo Plugin <= 1.4.3 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58811	medium	5.9/10	WordPress Ultimate Client Dash Plugin <= 4.7 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58810	medium	5.9/10	WordPress Simple Link List Widget Plugin <= 0.3.2 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58809	high	7.1/10	WordPress To Lead For Salesforce Plugin <= 2.7.3.9 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58808	medium	6.5/10	WordPress prettyPhoto Plugin <= 1.2.5 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58807	high	7.1/10	WordPress Purge Varnish Cache Plugin <= 2.6 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58806	high	7.1/10	WordPress WordPress Error Monitoring by Bugsnag Plugin <= 1.6.3 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58805	medium	5.9/10	WordPress Widgetize Pages Light Plugin <= 3.0 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58804	medium	4.3/10	WordPress WooCommerce Single Page Checkout Plugin <= 1.2.7 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58802	medium	4.3/10	WordPress TrustMate.io – WooCommerce integration plugin <= 1.16.0 - Cross Site Request Forgery (CSRF) vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58801	medium	5.4/10	WordPress Responder Plugin <= 4.3.8 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58800	medium	4.3/10	WordPress WP Email Template plugin <= 2.8.5 - Cross Site Request Forgery (CSRF) vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58799	medium	4.3/10	WordPress Custom WooCommerce Checkout Fields Editor Plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58798	medium	4.3/10	WordPress BCM Duplicate Menu plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58797	medium	5.3/10	WordPress Ninja Charts plugin <= 3.3.5 - Sensitive Data Exposure vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58796	medium	6.5/10	WordPress Elementor Element Condition Plugin <= 1.0.5 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58795	medium	4.3/10	WordPress Payoneer Checkout Plugin <= 3.4.0 - Content Spoofing Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58794	medium	4.3/10	WordPress Notification for Telegram plugin <= 3.5 - Cross Site Request Forgery (CSRF) vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58793	medium	6.5/10	WordPress WPB Elementor Addons plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58792	medium	4.3/10	WordPress Authors List plugin <= 2.0.6.2 - Cross Site Request Forgery (CSRF) vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58791	medium	5.9/10	WordPress SEO Auto Linker Plugin <= 1.5.3 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58790	medium	6.5/10	WordPress Kiwi Plugin <= 2.1.8 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58789	high	7.6/10	WordPress WP Full Stripe Free Plugin <= 8.2.5 - SQL Injection Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58788	high	7.6/10	WordPress License Manager for WooCommerce Plugin <= 3.0.12 - SQL Injection Vulnerability	Sep 5, 2025 11mo ago
CVE-2025-58787	medium	6.5/10	WordPress Themify Popup Plugin <= 1.4.2 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 11mo ago