Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

354,537

All time

Critical · Active

12,623

CVSS ≥ 9.0

New · 14 days

1,385

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 5491–5520 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-58621	medium	6.5/10	WordPress PuzzleMe for WordPress Plugin <= 1.2.0 - Cross Site Scripting (XSS) Vulnerability	Sep 3, 2025 1y ago
CVE-2025-58620	medium	6.5/10	WordPress PDF for WPForms Plugin <= 6.2.1 - Cross Site Scripting (XSS) Vulnerability	Sep 3, 2025 1y ago
CVE-2025-58618	medium	6.5/10	WordPress Pie Calendar Plugin <= 1.2.8 - Cross Site Scripting (XSS) Vulnerability	Sep 3, 2025 1y ago
CVE-2025-58617	medium	4.3/10	WordPress F4 Media Taxonomies Plugin <= 1.1.4 - Broken Access Control Vulnerability	Sep 3, 2025 1y ago
CVE-2025-58616	medium	6.5/10	WordPress Frisbii Pay Plugin <= 1.8.2.1 - Broken Access Control Vulnerability	Sep 3, 2025 1y ago
CVE-2025-58615	medium	4.4/10	WordPress WP Bannerize Pro Plugin <= 1.10.0 - Server Side Request Forgery (SSRF) Vulnerability	Sep 3, 2025 1y ago
CVE-2025-58614	medium	6.5/10	WordPress Tooltipy Plugin <= 5.5.6 - Cross Site Scripting (XSS) Vulnerability	Sep 3, 2025 1y ago
CVE-2025-58613	medium	5.3/10	WordPress Posts Table with Search & Sort Plugin <= 1.4.10 - Broken Access Control Vulnerability	Sep 3, 2025 1y ago
CVE-2025-58612	medium	6.5/10	WordPress PropertyHive Plugin <= 2.1.5 - Cross Site Scripting (XSS) Vulnerability	Sep 3, 2025 1y ago
CVE-2025-58611	medium	4.3/10	WordPress Tickera Plugin <= 3.5.5.6 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 3, 2025 1y ago
CVE-2025-58610	medium	6.5/10	WordPress Gallery PhotoBlocks Plugin <= 1.3.1 - Cross Site Scripting (XSS) Vulnerability	Sep 3, 2025 1y ago
CVE-2025-58609	medium	6.5/10	WordPress Latest Post Shortcode Plugin <= 14.0.3 - Cross Site Scripting (XSS) Vulnerability	Sep 3, 2025 1y ago
CVE-2025-58608	high	7.5/10	WordPress MediaPress Plugin <= 1.5.9.1 - Local File Inclusion Vulnerability	Sep 3, 2025 1y ago
CVE-2025-58607	medium	6.5/10	WordPress Cookie Notice & Consent Banner for GDPR & CCPA Compliance Plugin <= 1.7.11 - Cross Site Scripting (XSS) Vulnerability	Sep 3, 2025 1y ago
CVE-2025-58606	medium	5.0/10	WordPress SaasLauncher Theme <= 1.3.0 - Broken Access Control Vulnerability	Sep 3, 2025 1y ago
CVE-2025-58605	medium	6.5/10	WordPress WP Delicious Plugin <= 1.8.7 - Cross Site Scripting (XSS) Vulnerability	Sep 3, 2025 1y ago
CVE-2025-58604	high	7.6/10	WordPress Mail Mint Plugin <= 1.18.5 - SQL Injection Vulnerability	Sep 3, 2025 1y ago
CVE-2025-58603	medium	5.3/10	WordPress Surfer Plugin <= 1.6.4.574 - Broken Access Control Vulnerability	Sep 3, 2025 1y ago
CVE-2025-58602	medium	6.5/10	WordPress If-So Dynamic Content Personalization Plugin <= 1.9.4 - Cross Site Scripting (XSS) Vulnerability	Sep 3, 2025 1y ago
CVE-2025-58601	medium	4.3/10	WordPress Classified Listing Plugin <= 5.0.6 - Broken Access Control Vulnerability	Sep 3, 2025 1y ago
CVE-2025-58600	medium	5.3/10	WordPress Paid Member Subscriptions Plugin <= 2.15.9 - Broken Access Control Vulnerability	Sep 3, 2025 1y ago
CVE-2025-58599	medium	4.3/10	WordPress Order Delivery Date for WooCommerce Plugin <= 4.1.0 - Broken Access Control Vulnerability	Sep 3, 2025 1y ago
CVE-2025-58598	medium	6.6/10	WordPress Klarna Order Management for WooCommerce Plugin <= 1.9.8 - Sensitive Data Exposure Vulnerability	Sep 3, 2025 1y ago
CVE-2025-58597	medium	4.3/10	WordPress wpForo Forum Plugin <= 2.4.6 - Insecure Direct Object References (IDOR) Vulnerability	Sep 3, 2025 1y ago
CVE-2025-58596	medium	5.9/10	WordPress MailOptin Plugin <= 1.2.75.0 - Cross Site Scripting (XSS) Vulnerability	Sep 3, 2025 1y ago
CVE-2025-58594	medium	4.3/10	WordPress Brizy Plugin <= 2.7.12 - Broken Access Control Vulnerability	Sep 3, 2025 1y ago
CVE-2025-58593	medium	6.5/10	WordPress Orbit Fox by ThemeIsle Plugin <= 3.0.0 - Cross Site Scripting (XSS) Vulnerability	Sep 3, 2025 1y ago
CVE-2025-3701	medium	4.3/10	WordPress Malcure Malware Scanner plugin <= 16.8 - Broken Access Control vulnerability	Sep 3, 2025 1y ago
CVE-2025-58210	medium	5.3/10	WordPress Makeaholic Theme <= 1.8.5 - Broken Access Control Vulnerability	Sep 3, 2025 1y ago
CVE-2024-32444	critical	9.8/10	WordPress RealHomes theme <= 4.3.6 - Privilege Escalation vulnerability	Sep 3, 2025 1y ago