Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,132

All time

Critical · Active

11,967

CVSS ≥ 9.0

New · 14 days

2,658

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 511–540 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-57782	medium	5.3/10	WordPress Universal Clocks plugin <= 1.2.0 - Broken Access Control vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57781	medium	5.3/10	WordPress MeetingHub plugin <= 1.25.10 - Broken Access Control vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57780	medium	6.5/10	WordPress Envision Page Builder plugin <= 0.22 - Cross Site Scripting (XSS) vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57779	medium	5.3/10	WordPress Fascinate theme <= 1.1.5 - Broken Access Control vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57778	medium	5.3/10	WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Broken Access Control vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57776	medium	5.3/10	WordPress VW Wedding theme <= 1.3.7 - Broken Access Control vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57774	medium	5.3/10	WordPress VW Food Corner theme <= 1.1.0 - Broken Access Control vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57773	high	7.6/10	WordPress Advanced Shipment Tracking for WooCommerce plugin <= 4.0 - SQL Injection vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57772	high	8.5/10	WordPress WP Inventory Manager plugin <= 2.4.0 - SQL Injection vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57771	high	8.5/10	WordPress GD Rating System plugin <= 3.7 - SQL Injection vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57770	critical	9.8/10	WordPress Grand Photography theme <= 5.7.8 - PHP Object Injection vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57768	high	8.2/10	WordPress Houzez Login Register plugin <= 3.3.3 - Privilege Escalation vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57745	high	7.1/10	WordPress RT-Theme 18 \| Extensions plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57744	critical	9.8/10	WordPress RT-Theme 18 \| Extensions plugin <= 2.5 - PHP Object Injection vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57743	high	8.1/10	WordPress RT-Theme 18 \| Extensions plugin <= 2.5 - Local File Inclusion vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57741	high	7.1/10	WordPress AcyMailing SMTP Newsletter plugin <= 10.11.0 - Cross Site Scripting (XSS) vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57740	high	7.1/10	WordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Broken Access Control vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57739	critical	9.3/10	WordPress AcyMailing SMTP Newsletter plugin <= 10.11.0 - SQL Injection vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57738	critical	9.8/10	WordPress 777 theme <= 1.13.0 - PHP Object Injection vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57734	high	7.1/10	WordPress tagDiv Composer plugin <= 5.4.3 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57733	high	7.1/10	WordPress tagDiv Cloud Library plugin <= 3.9.4 - Cross Site Scripting (XSS) vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57732	high	7.1/10	WordPress tagDiv Opt-In Builder plugin <= 1.7.4 - Cross Site Scripting (XSS) vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57729	high	7.5/10	WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57728	high	7.1/10	WordPress Flatsome theme <= 3.20.5 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57727	high	7.5/10	WordPress Kirki plugin <= 6.0.13 - Broken Access Control vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57726	critical	9.3/10	WordPress Kirki plugin <= 6.0.12 - SQL Injection vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57725	high	7.1/10	WordPress Kirki plugin <= 6.0.11 - Cross Site Scripting (XSS) vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57724	critical	9.8/10	WordPress Kirki plugin <= 6.0.12 - PHP Object Injection vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57719	critical	10.0/10	WordPress Aimogen Pro plugin <= 2.8.3 - Arbitrary File Upload vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57718	high	7.1/10	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.12 - Cross Site Scripting (XSS) vulnerability	Jul 13, 2026 1mo ago