Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,738

All time

Critical · Active

12,169

CVSS ≥ 9.0

New · 14 days

3,054

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 5371–5400 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-54734	medium	5.8/10	WordPress B Slider Plugin <= 1.1.30 - Broken Access Control Vulnerability	Aug 28, 2025 12mo ago
CVE-2025-54733	medium	6.5/10	WordPress All Bootstrap Blocks Plugin <= 1.3.28 - Broken Access Control Vulnerability	Aug 28, 2025 12mo ago
CVE-2025-54731	high	8.1/10	WordPress YouTube Showcase Plugin <= 3.5.1 - PHP Object Injection Vulnerability	Aug 28, 2025 12mo ago
CVE-2025-54725	critical	9.8/10	WordPress Golo Theme <= 1.7.0 - Broken Authentication Vulnerability	Aug 28, 2025 12mo ago
CVE-2025-54724	high	7.1/10	WordPress Golo Theme <= 1.7.1 - Cross Site Scripting (XSS) Vulnerability	Aug 28, 2025 12mo ago
CVE-2025-54720	critical	9.3/10	WordPress Nest Addons Plugin <= 1.6.3 - SQL Injection Vulnerability	Aug 28, 2025 12mo ago
CVE-2025-54716	high	8.1/10	WordPress Ireca Theme <= 1.8.5 - Local File Inclusion Vulnerability	Aug 28, 2025 12mo ago
CVE-2025-54714	high	7.1/10	WordPress Zephyr Project Manager Plugin <= 3.3.201 - Broken Access Control Vulnerability	Aug 28, 2025 12mo ago
CVE-2025-54710	high	7.1/10	WordPress Tiktok Feed Plugin <= 1.0.21 - Broken Access Control Vulnerability	Aug 28, 2025 12mo ago
CVE-2025-54029	high	7.7/10	WordPress WooCommerce csv import export Plugin <= 2.0.6 - Arbitrary File Deletion Vulnerability	Aug 28, 2025 12mo ago
CVE-2025-53588	high	7.7/10	WordPress UPC/EAN/GTIN Code Generator Plugin <= 2.0.2 - Arbitrary File Deletion Vulnerability	Aug 28, 2025 12mo ago
CVE-2025-53584	high	8.1/10	WordPress WP Ticket Customer Service Software & Support Ticket System Plugin <= 6.0.2 - PHP Object Injection Vulnerability	Aug 28, 2025 12mo ago
CVE-2025-53583	high	8.1/10	WordPress Employee Spotlight Plugin <= 5.1.1 - PHP Object Injection Vulnerability	Aug 28, 2025 12mo ago
CVE-2025-53579	high	7.1/10	WordPress Captcha.eu Plugin < 1.0.61 - Cross Site Scripting (XSS) Vulnerability	Aug 28, 2025 12mo ago
CVE-2025-53578	high	8.1/10	WordPress Kipso Theme <= 1.3.4 - Local File Inclusion Vulnerability	Aug 28, 2025 12mo ago
CVE-2025-53576	high	8.1/10	WordPress Ovatheme Events Plugin <= 1.2.8 - Local File Inclusion Vulnerability	Aug 28, 2025 12mo ago
CVE-2025-53572	high	8.1/10	WordPress WP Easy Contact Plugin <= 4.0.1 - PHP Object Injection Vulnerability	Aug 28, 2025 12mo ago
CVE-2025-53337	medium	5.4/10	WordPress LifePress plugin <= 2.1.3 - Broken Access Control vulnerability	Aug 28, 2025 12mo ago
CVE-2025-53334	high	8.1/10	WordPress Jannah Theme < 7.5.1 - Local File Inclusion Vulnerability	Aug 28, 2025 12mo ago
CVE-2025-53328	high	7.5/10	WordPress Poll, Survey & Quiz Maker Plugin by Opinion Stage Plugin <= 19.11.0 - Local File Inclusion Vulnerability	Aug 28, 2025 12mo ago
CVE-2025-53326	high	7.5/10	WordPress Gutenify Plugin <= 1.5.4 - Local File Inclusion Vulnerability	Aug 28, 2025 12mo ago
CVE-2025-53289	high	7.1/10	WordPress Theme Blvd Widget Areas Plugin <= 1.3.0 - Cross Site Scripting (XSS) Vulnerability	Aug 28, 2025 12mo ago
CVE-2025-53250	medium	6.4/10	WordPress Chartbeat Plugin <= 2.0.7 - Server Side Request Forgery (SSRF) Vulnerability	Aug 28, 2025 12mo ago
CVE-2025-53248	high	8.1/10	WordPress Magazine Theme <= 1.2.2 - Local File Inclusion Vulnerability	Aug 28, 2025 12mo ago
CVE-2025-53247	high	8.1/10	WordPress BlogMarks Theme <= 1.0.8 - Local File Inclusion Vulnerability	Aug 28, 2025 12mo ago
CVE-2025-53244	high	8.1/10	WordPress Magazine Elite Theme <= 1.2.4 - Local File Inclusion Vulnerability	Aug 28, 2025 12mo ago
CVE-2025-53243	high	8.1/10	WordPress Employee Directory – Staff Listing & Team Directory plugin for WordPress plugin <= 4.5.5 - PHP Object Injection vulnerability	Aug 28, 2025 12mo ago
CVE-2025-53230	high	7.6/10	WordPress Page Manager for Elementor Plugin <= 2.0.5 - Broken Access Control Vulnerability	Aug 28, 2025 12mo ago
CVE-2025-53227	high	8.1/10	WordPress Magazine Saga Theme <= 1.2.7 - Local File Inclusion Vulnerability	Aug 28, 2025 12mo ago
CVE-2025-53225	high	7.1/10	WordPress e-Boekhouden.nl Plugin <= 1.9.3 - Cross Site Scripting (XSS) Vulnerability	Aug 28, 2025 12mo ago