Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,158

All time

Critical · Active

11,973

CVSS ≥ 9.0

New · 14 days

2,676

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 541–570 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-57715	high	7.1/10	WordPress Fluent CRM plugin <= 3.1.7 - Cross Site Scripting (XSS) vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57714	critical	9.3/10	WordPress LatePoint plugin <= 5.6.3 - SQL Injection vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57713	high	8.8/10	WordPress Events Manager plugin <= 7.3.6 - PHP Object Injection vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57712	high	7.1/10	WordPress WPZOOM Portfolio plugin <= 1.4.29 - Cross Site Scripting (XSS) vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57711	medium	6.5/10	WordPress SupportCandy plugin <= 3.4.8 - Cross Site Scripting (XSS) vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57710	critical	9.9/10	WordPress WoowBot Pro Max plugin <= 14.1.7 - Arbitrary File Upload vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57709	high	8.6/10	WordPress Membership For WooCommerce plugin <= 3.1.0 - Arbitrary File Deletion vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57708	high	7.1/10	WordPress Contact Form Entries plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57707	critical	9.3/10	WordPress Simple Business Directory Pro plugin <= 15.9.4 - SQL Injection vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57706	high	7.1/10	WordPress Dokan plugin <= 5.0.6 - Cross Site Scripting (XSS) vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57705	high	7.5/10	WordPress Event Tickets plugin <= 5.28.5 - Broken Access Control vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57702	critical	9.3/10	WordPress Amelia plugin <= 2.4.2 - SQL Injection vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57698	medium	6.5/10	WordPress Abandoned Cart Recovery for WooCommerce plugin <= 1.1.12 - Broken Authentication vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57697	high	7.5/10	WordPress ProfileGrid plugin <= 5.9.9.6 - Broken Authentication vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57695	high	7.1/10	WordPress Document Gallery plugin <= 5.1.0 - Cross Site Scripting (XSS) vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57694	medium	6.5/10	WordPress Tutor LMS plugin <= 3.9.13 - Insecure Direct Object References (IDOR) vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57693	medium	6.5/10	WordPress Ad Inserter plugin <= 2.8.11 - Cross Site Scripting (XSS) vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57691	medium	5.8/10	WordPress Anti-Malware Security and Brute-Force Firewall plugin <= 4.23.89 - Cross Site Scripting (XSS) vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57668	high	7.1/10	WordPress NEX-Forms plugin <= 9.2.2 - Cross Site Scripting (XSS) vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57424	medium	6.5/10	WordPress Razorpay Payment Links for WooCommerce plugin <= 2.1.4 - Broken Access Control vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57423	high	7.1/10	WordPress Message Filter for Contact Form 7 plugin <= 1.6.3.8 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57422	high	7.1/10	WordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57421	high	7.1/10	WordPress CRM Perks Forms plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57420	medium	6.5/10	WordPress Author Box WP Lens plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57419	medium	6.5/10	WordPress Stock Locations for WooCommerce plugin <= 3.1.8 - Broken Access Control vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57418	medium	6.5/10	WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.13 - Broken Access Control vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57417	high	7.1/10	WordPress Cart Lift plugin <= 3.1.57 - Cross Site Scripting (XSS) vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57416	high	7.1/10	WordPress SiteGround Email Marketing plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57415	high	7.1/10	WordPress Gift Vouchers plugin <= 4.7.0 - Cross Site Scripting (XSS) vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57414	medium	6.5/10	WordPress ChatBot for eCommerce – WoowBot plugin <= 4.6.1 - Cross Site Scripting (XSS) vulnerability	Jul 13, 2026 1mo ago