Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

357,176

All time

Critical · Active

12,802

CVSS ≥ 9.0

New · 14 days

2,414

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 31–60 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-109701	high	7.1/10	WordPress PAYCOMET for WooCommerce plugin <= 5.45 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2026 9d ago
CVE-2026-110378	medium	5.3/10	WordPress Ninja Forms Signature Contract Add-On plugin <= 3.2.5 - Broken Access Control vulnerability	Oct 15, 2026 11d ago
CVE-2026-108175	medium	6.5/10	WordPress MDTF plugin <= 1.4.0 - Cross Site Scripting (XSS) vulnerability	Oct 15, 2026 11d ago
CVE-2026-110381	medium	6.3/10	WordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Insecure Direct Object References (IDOR) vulnerability	Oct 15, 2026 11d ago
CVE-2026-103350	medium	5.3/10	WordPress Booking and Rental Manager plugin <= 2.8.0 - Other vulnerability Type vulnerability	Oct 15, 2026 11d ago
CVE-2026-110888	medium	4.3/10	WordPress AI Engine plugin <= 3.8.3 - Broken Access Control vulnerability	Oct 15, 2026 11d ago
CVE-2026-109901	high	8.5/10	WordPress CP Multi View Event Calendar plugin <= 1.4.41 - SQL Injection vulnerability	Oct 14, 2026 13d ago
CVE-2026-54868	medium	6.5/10	WordPress FV Simpler SEO plugin <= 1.9.7 - Cross Site Scripting (XSS) vulnerability	Oct 13, 2026 14d ago
CVE-2026-54869	medium	6.5/10	WordPress IMPress for IDX Broker plugin <= 3.3.1 - Cross Site Scripting (XSS) vulnerability	Oct 13, 2026 14d ago
CVE-2026-54870	medium	6.5/10	WordPress Weaver Xtreme theme Support plugin <= 7.0.1 - Cross Site Scripting (XSS) vulnerability	Oct 13, 2026 14d ago
CVE-2026-61994	medium	5.4/10	WordPress WP-Members plugin <= 3.5.7 - Broken Access Control vulnerability	Oct 12, 2026 14d ago
CVE-2026-107863	medium	5.3/10	WordPress Products Restricted Users for WooCommerce plugin <= 0.7 - Broken Access Control vulnerability	Oct 12, 2026 15d ago
CVE-2026-27350	high	7.2/10	WordPress Builderius plugin <= 1.4-beta - Server Side Request Forgery (SSRF) vulnerability	Oct 10, 2026 16d ago
CVE-2026-78535	critical	9.8/10	WordPress Photolia theme <= 1.0.3 - PHP Object Injection vulnerability	Oct 10, 2026 16d ago
CVE-2026-78533	critical	9.8/10	WordPress Qwery theme <= 3.6.1 - PHP Object Injection vulnerability	Oct 10, 2026 16d ago
CVE-2026-78531	critical	9.8/10	WordPress Jacqueline theme <= 2.22 - PHP Object Injection vulnerability	Oct 10, 2026 16d ago
CVE-2026-78529	critical	9.8/10	WordPress Alliance theme <= 3.11 - PHP Object Injection vulnerability	Oct 10, 2026 16d ago
CVE-2026-66569	critical	9.8/10	WordPress Kicker theme <= 2.2.1 - PHP Object Injection vulnerability	Oct 10, 2026 16d ago
CVE-2026-66568	critical	9.8/10	WordPress Original theme <= 1.9.0 - PHP Object Injection vulnerability	Oct 10, 2026 16d ago
CVE-2026-66567	critical	9.8/10	WordPress Anesta theme <= 1.5.3 - PHP Object Injection vulnerability	Oct 10, 2026 16d ago
CVE-2026-66566	high	8.1/10	WordPress Ambient theme <= 1.7 - Local File Inclusion vulnerability	Oct 10, 2026 16d ago
CVE-2026-66565	critical	9.8/10	WordPress FC United theme <= 1.1.1 - PHP Object Injection vulnerability	Oct 10, 2026 16d ago
CVE-2026-66564	critical	9.8/10	WordPress ShiftCV theme <= 3.0.14 - PHP Object Injection vulnerability	Oct 10, 2026 16d ago
CVE-2026-66563	critical	9.8/10	WordPress Windsor theme <= 2.10 - PHP Object Injection vulnerability	Oct 10, 2026 16d ago
CVE-2026-66483	critical	9.8/10	WordPress Education Center theme <= 3.6.12 - PHP Object Injection vulnerability	Oct 10, 2026 16d ago
CVE-2026-66482	critical	9.8/10	WordPress Drone Media theme <= 2.2.0 - PHP Object Injection vulnerability	Oct 10, 2026 16d ago
CVE-2026-62125	critical	9.8/10	WordPress Asia Garden theme <= 1.3.1 - PHP Object Injection vulnerability	Oct 10, 2026 16d ago
CVE-2026-62124	critical	9.8/10	WordPress N7 \| Golf Club Sports & Events theme <= 2.21 - PHP Object Injection vulnerability	Oct 10, 2026 16d ago
CVE-2026-62123	critical	9.8/10	WordPress Invetex theme <= 2.18 - PHP Object Injection vulnerability	Oct 10, 2026 16d ago
CVE-2026-62120	critical	9.8/10	WordPress Law Office theme <= 3.20 - PHP Object Injection vulnerability	Oct 10, 2026 16d ago