Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,738

All time

Critical · Active

12,169

CVSS ≥ 9.0

New · 14 days

3,054

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 5341–5370 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-58613	medium	5.3/10	WordPress Posts Table with Search & Sort Plugin <= 1.4.10 - Broken Access Control Vulnerability	Sep 3, 2025 11mo ago
CVE-2025-58612	medium	6.5/10	WordPress PropertyHive Plugin <= 2.1.5 - Cross Site Scripting (XSS) Vulnerability	Sep 3, 2025 11mo ago
CVE-2025-58611	medium	4.3/10	WordPress Tickera Plugin <= 3.5.5.6 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 3, 2025 11mo ago
CVE-2025-58610	medium	6.5/10	WordPress Gallery PhotoBlocks Plugin <= 1.3.1 - Cross Site Scripting (XSS) Vulnerability	Sep 3, 2025 11mo ago
CVE-2025-58609	medium	6.5/10	WordPress Latest Post Shortcode Plugin <= 14.0.3 - Cross Site Scripting (XSS) Vulnerability	Sep 3, 2025 11mo ago
CVE-2025-58608	high	7.5/10	WordPress MediaPress Plugin <= 1.5.9.1 - Local File Inclusion Vulnerability	Sep 3, 2025 11mo ago
CVE-2025-58607	medium	6.5/10	WordPress Cookie Notice & Consent Banner for GDPR & CCPA Compliance Plugin <= 1.7.11 - Cross Site Scripting (XSS) Vulnerability	Sep 3, 2025 11mo ago
CVE-2025-58606	medium	5.0/10	WordPress SaasLauncher Theme <= 1.3.0 - Broken Access Control Vulnerability	Sep 3, 2025 11mo ago
CVE-2025-58605	medium	6.5/10	WordPress WP Delicious Plugin <= 1.8.7 - Cross Site Scripting (XSS) Vulnerability	Sep 3, 2025 11mo ago
CVE-2025-58604	high	7.6/10	WordPress Mail Mint Plugin <= 1.18.5 - SQL Injection Vulnerability	Sep 3, 2025 11mo ago
CVE-2025-58603	medium	5.3/10	WordPress Surfer Plugin <= 1.6.4.574 - Broken Access Control Vulnerability	Sep 3, 2025 11mo ago
CVE-2025-58602	medium	6.5/10	WordPress If-So Dynamic Content Personalization Plugin <= 1.9.4 - Cross Site Scripting (XSS) Vulnerability	Sep 3, 2025 11mo ago
CVE-2025-58601	medium	4.3/10	WordPress Classified Listing Plugin <= 5.0.6 - Broken Access Control Vulnerability	Sep 3, 2025 11mo ago
CVE-2025-58600	medium	5.3/10	WordPress Paid Member Subscriptions Plugin <= 2.15.9 - Broken Access Control Vulnerability	Sep 3, 2025 11mo ago
CVE-2025-58599	medium	4.3/10	WordPress Order Delivery Date for WooCommerce Plugin <= 4.1.0 - Broken Access Control Vulnerability	Sep 3, 2025 11mo ago
CVE-2025-58598	medium	6.6/10	WordPress Klarna Order Management for WooCommerce Plugin <= 1.9.8 - Sensitive Data Exposure Vulnerability	Sep 3, 2025 11mo ago
CVE-2025-58597	medium	4.3/10	WordPress wpForo Forum Plugin <= 2.4.6 - Insecure Direct Object References (IDOR) Vulnerability	Sep 3, 2025 11mo ago
CVE-2025-58596	medium	5.9/10	WordPress MailOptin Plugin <= 1.2.75.0 - Cross Site Scripting (XSS) Vulnerability	Sep 3, 2025 11mo ago
CVE-2025-58594	medium	4.3/10	WordPress Brizy Plugin <= 2.7.12 - Broken Access Control Vulnerability	Sep 3, 2025 11mo ago
CVE-2025-58593	medium	6.5/10	WordPress Orbit Fox by ThemeIsle Plugin <= 3.0.0 - Cross Site Scripting (XSS) Vulnerability	Sep 3, 2025 11mo ago
CVE-2025-3701	medium	4.3/10	WordPress Malcure Malware Scanner plugin <= 16.8 - Broken Access Control vulnerability	Sep 3, 2025 11mo ago
CVE-2025-58210	medium	5.3/10	WordPress Makeaholic Theme <= 1.8.5 - Broken Access Control Vulnerability	Sep 3, 2025 11mo ago
CVE-2024-32444	critical	9.8/10	WordPress RealHomes theme <= 4.3.6 - Privilege Escalation vulnerability	Sep 3, 2025 11mo ago
CVE-2025-31100	critical	9.9/10	WordPress School Management Plugin <= 1.93.1 (02-07-2025) - Arbitrary File Upload Vulnerability	Aug 31, 2025 12mo ago
CVE-2025-47696	high	8.1/10	WordPress Blog Designer PRO plugin <= 3.4.7 - Unauthenticated Non-Arbitrary Local File Inclusion vulnerability	Aug 31, 2025 12mo ago
CVE-2024-32832	critical	9.8/10	WordPress Login with Phone Number plugin <= 1.6.93 - Broken Access Control vulnerability	Aug 31, 2025 12mo ago
CVE-2024-32589	high	7.1/10	WordPress Barcode Scanner and Inventory manager plugin <= 1.5.3 - Broken Access Control to XSS vulnerability	Aug 31, 2025 12mo ago
CVE-2025-4956	medium	4.3/10	WordPress Pro Bulk Watermark Plugin for WordPress Theme <= 2.0 - Path Traversal Vulnerability	Aug 30, 2025 12mo ago
CVE-2025-54742	high	8.8/10	WordPress WpEvently Plugin <= 4.4.8 - PHP Object Injection Vulnerability	Aug 28, 2025 12mo ago
CVE-2025-54738	critical	9.8/10	WordPress Jobmonster Theme <= 4.7.9 - Broken Authentication Vulnerability	Aug 28, 2025 12mo ago