Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

354,811

All time

Critical · Active

12,639

CVSS ≥ 9.0

New · 14 days

1,500

Newly disclosed

Feed last synced

21 mins ago

Data freshness

Showing 6241–6270 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-31428	high	7.1/10	WordPress HYDRO theme <= 2.8 - Reflected Cross Site Scripting (XSS) vulnerability	Jun 27, 2025 1y ago
CVE-2025-32298	high	7.5/10	WordPress CTUsers plugin <= 1.0.0 - Local File Inclusion Vulnerability	Jun 27, 2025 1y ago
CVE-2025-32281	medium	4.3/10	WordPress DarkMySite plugin <= 1.2.8 - Cross Site Request Forgery (CSRF) vulnerability	Jun 27, 2025 1y ago
CVE-2025-39478	high	7.1/10	WordPress Smart Notification Plugin <= 10.3 - Reflected Cross Site Scripting (XSS) vulnerability	Jun 27, 2025 1y ago
CVE-2025-39474	critical	9.3/10	WordPress Amely theme <= 3.1.4 - SQL Injection vulnerability	Jun 27, 2025 1y ago
CVE-2025-39488	high	7.1/10	WordPress MagOne theme <= 8.8 - Reflected Cross Site Scripting (XSS) vulnerability	Jun 27, 2025 1y ago
CVE-2025-47654	high	7.1/10	WordPress FormLift for Infusionsoft Web Forms plugin <= 7.5.20 - Reflected Cross Site Scripting (XSS) vulnerability	Jun 27, 2025 1y ago
CVE-2025-47574	high	7.1/10	WordPress School Management System Plugin <= 92.0.0 - Reflected Cross Site Scripting (XSS) vulnerability	Jun 27, 2025 1y ago
CVE-2025-49321	high	7.1/10	WordPress Eventin plugin <= 4.0.28 - Cross Site Scripting (XSS) Vulnerability	Jun 27, 2025 1y ago
CVE-2025-49290	high	7.1/10	WordPress Off-Canvas Sidebars & Menus (Slidebars) plugin <= 0.5.8.4 - Reflected Cross Site Scripting (XSS) vulnerability	Jun 27, 2025 1y ago
CVE-2025-49883	high	8.1/10	WordPress Greenmart theme <= 4.2.3 - Local File Inclusion Vulnerability	Jun 27, 2025 1y ago
CVE-2025-49886	high	8.1/10	WordPress Zikzag Core plugin <= 1.4.5 - Local File Inclusion Vulnerability	Jun 27, 2025 1y ago
CVE-2025-49885	critical	10.0/10	WordPress Drag and Drop Multiple File Upload (Pro) - WooCommerce plugin <= 5.0.6 - Arbitrary File Upload Vulnerability	Jun 27, 2025 1y ago
CVE-2025-50052	high	7.1/10	WordPress Flexo Counter plugin <= 1.0001 - Cross Site Scripting (XSS) Vulnerability	Jun 27, 2025 1y ago
CVE-2025-52717	critical	9.3/10	WordPress LifterLMS plugin <= 8.0.6 - SQL Injection Vulnerability	Jun 27, 2025 1y ago
CVE-2025-52723	high	8.1/10	WordPress Networker theme <= 1.2.0 - Local File Inclusion Vulnerability	Jun 27, 2025 1y ago
CVE-2025-52722	critical	9.3/10	WordPress Classiera theme <= 4.0.34 - SQL Injection Vulnerability	Jun 27, 2025 1y ago
CVE-2025-52725	critical	9.8/10	WordPress CouponXxL theme <= 3.0.0 - PHP Object Injection Vulnerability	Jun 27, 2025 1y ago
CVE-2025-52724	critical	9.8/10	WordPress Amwerk theme <= 1.2.0 - PHP Object Injection Vulnerability	Jun 27, 2025 1y ago
CVE-2025-52726	high	8.6/10	WordPress CouponXxL Custom Post Types plugin <= 3.0 - Privilege Escalation Vulnerability	Jun 27, 2025 1y ago
CVE-2025-52729	high	8.1/10	WordPress Diza theme <= 1.3.9 - Local File Inclusion Vulnerability	Jun 27, 2025 1y ago
CVE-2025-52727	high	7.1/10	WordPress CSS3 Vertical Web Pricing Tables plugin <= 1.9 - Cross Site Scripting (XSS) Vulnerability	Jun 27, 2025 1y ago
CVE-2025-52778	high	7.1/10	WordPress xili-dictionary plugin <= 2.12.5.2 - Cross Site Scripting (XSS) Vulnerability	Jun 27, 2025 1y ago
CVE-2025-52774	high	7.1/10	WordPress Infility Global plugin <= 2.15.06 - Cross Site Scripting (XSS) vulnerability	Jun 27, 2025 1y ago
CVE-2025-52808	high	8.1/10	WordPress RealtyElite theme <= 1.0.0 - Local File Inclusion Vulnerability	Jun 27, 2025 1y ago
CVE-2025-52799	high	7.1/10	WordPress LMS theme <= 9.2 - Reflected Cross Site Scripting (XSS) Vulnerability	Jun 27, 2025 1y ago
CVE-2025-52809	high	8.1/10	WordPress National Weather Service Alerts plugin <= 1.3.5 - Local File Inclusion Vulnerability	Jun 27, 2025 1y ago
CVE-2025-52811	high	8.1/10	WordPress Davenport - Versatile Blog and Magazine WordPress Theme <= 1.3 - Local File Inclusion Vulnerability	Jun 27, 2025 1y ago
CVE-2025-52810	high	8.1/10	WordPress Katerio - Magazine theme <= 1.5.1 - Local File Inclusion Vulnerability	Jun 27, 2025 1y ago
CVE-2025-52812	high	8.1/10	WordPress Domnoo theme <= 1.49 - Local File Inclusion Vulnerability	Jun 27, 2025 1y ago