Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

354,537

All time

Critical · Active

12,623

CVSS ≥ 9.0

New · 14 days

1,385

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 5431–5460 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-58824	medium	4.3/10	WordPress Shk Corporate Theme <= 2.4.1.1 - Broken Access Control Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58823	medium	6.5/10	WordPress Get Cash plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability	Sep 5, 2025 1y ago
CVE-2025-58822	medium	6.5/10	WordPress WP Mail Plugin <= 1.3 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58821	medium	5.9/10	WordPress WP Notification Bell plugin <= 1.4.6 - Cross Site Scripting (XSS) vulnerability	Sep 5, 2025 1y ago
CVE-2025-58820	medium	5.9/10	WordPress Carousel Ultimate Plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58819	critical	9.1/10	WordPress Bulk Featured Image plugin <= 1.2.4 - Arbitrary File Upload vulnerability	Sep 5, 2025 1y ago
CVE-2025-58818	medium	5.4/10	WordPress Developer Tools Blocker Plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58817	medium	4.3/10	WordPress SoftMe Theme <= 1.1.27 - Broken Access Control Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58816	low	3.5/10	WordPress Product Carousel Slider for Elementor Plugin <= 2.1.3 - Broken Access Control Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58815	high	7.2/10	WordPress Aitasi Coming Soon Plugin <= 2.0.2 - Deserialization of untrusted data Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58814	medium	6.5/10	WordPress Stagtools Plugin <= 2.3.8 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58813	medium	4.3/10	WordPress Consultstreet Theme <= 3.0.0 - Broken Access Control Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58812	medium	6.5/10	WordPress Best Restaurant Menu by PriceListo Plugin <= 1.4.3 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58811	medium	5.9/10	WordPress Ultimate Client Dash Plugin <= 4.7 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58810	medium	5.9/10	WordPress Simple Link List Widget Plugin <= 0.3.2 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58809	high	7.1/10	WordPress To Lead For Salesforce Plugin <= 2.7.3.9 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58808	medium	6.5/10	WordPress prettyPhoto Plugin <= 1.2.5 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58807	high	7.1/10	WordPress Purge Varnish Cache Plugin <= 2.6 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58806	high	7.1/10	WordPress WordPress Error Monitoring by Bugsnag Plugin <= 1.6.3 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58805	medium	5.9/10	WordPress Widgetize Pages Light Plugin <= 3.0 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58804	medium	4.3/10	WordPress WooCommerce Single Page Checkout Plugin <= 1.2.7 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58802	medium	4.3/10	WordPress TrustMate.io – WooCommerce integration plugin <= 1.16.0 - Cross Site Request Forgery (CSRF) vulnerability	Sep 5, 2025 1y ago
CVE-2025-58801	medium	5.4/10	WordPress Responder Plugin <= 4.3.8 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58800	medium	4.3/10	WordPress WP Email Template plugin <= 2.8.5 - Cross Site Request Forgery (CSRF) vulnerability	Sep 5, 2025 1y ago
CVE-2025-58799	medium	4.3/10	WordPress Custom WooCommerce Checkout Fields Editor Plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58798	medium	4.3/10	WordPress BCM Duplicate Menu plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability	Sep 5, 2025 1y ago
CVE-2025-58797	medium	5.3/10	WordPress Ninja Charts plugin <= 3.3.5 - Sensitive Data Exposure vulnerability	Sep 5, 2025 1y ago
CVE-2025-58796	medium	6.5/10	WordPress Elementor Element Condition Plugin <= 1.0.5 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58795	medium	4.3/10	WordPress Payoneer Checkout Plugin <= 3.4.0 - Content Spoofing Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58794	medium	4.3/10	WordPress Notification for Telegram plugin <= 3.5 - Cross Site Request Forgery (CSRF) vulnerability	Sep 5, 2025 1y ago