Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,805

All time

Critical · Active

12,186

CVSS ≥ 9.0

New · 14 days

3,112

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 6391–6420 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-49421	high	7.6/10	WordPress WP Text Expander plugin <= 1.0.1 - SQL Injection Vulnerability	Jun 6, 2025 1y ago
CVE-2025-49429	medium	6.5/10	WordPress Video Embeds plugin <= 0.1.1 - Cross Site Scripting (XSS) Vulnerability	Jun 6, 2025 1y ago
CVE-2025-49427	medium	6.5/10	WordPress Abbie Expander plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability	Jun 6, 2025 1y ago
CVE-2025-49439	medium	4.3/10	WordPress Atelier Create CV plugin <= 1.1.5 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability	Jun 6, 2025 1y ago
CVE-2025-49435	medium	4.3/10	WordPress Wp Easy Allopass plugin <= 4.1.1 - Cross Site Request Forgery (CSRF) Vulnerability	Jun 6, 2025 1y ago
CVE-2025-49441	medium	5.3/10	WordPress Interactive Regional Map of Florida plugin <= 1.0 - Broken Access Control Vulnerability	Jun 6, 2025 1y ago
CVE-2025-49440	medium	4.3/10	WordPress WP Security Master plugin <= 1.0.2 - Cross Site Request Forgery (CSRF) Vulnerability	Jun 6, 2025 1y ago
CVE-2025-49443	medium	6.5/10	WordPress Bacon Ipsum plugin <= 2.4 - Cross Site Scripting (XSS) Vulnerability	Jun 6, 2025 1y ago
CVE-2025-49442	medium	6.5/10	WordPress Simple Nested Menu plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability	Jun 6, 2025 1y ago
CVE-2025-49446	medium	4.3/10	WordPress Admin Notes plugin <=1.1 - Cross Site Request Forgery (CSRF) Vulnerability	Jun 6, 2025 1y ago
CVE-2025-49445	medium	4.3/10	WordPress Interactive UK Regional Map plugin <= 2.0 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability	Jun 6, 2025 1y ago
CVE-2025-49450	medium	6.5/10	WordPress SEPA Girocode plugin <= 0.5.1 - Cross Site Scripting (XSS) Vulnerability	Jun 6, 2025 1y ago
CVE-2025-49449	medium	4.3/10	WordPress Interactive Regional Map of Africa plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability	Jun 6, 2025 1y ago
CVE-2025-49453	high	7.1/10	WordPress BP Profile as Homepage plugin <= 1.1 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability	Jun 6, 2025 1y ago
CVE-2023-25995	high	7.5/10	WordPress AI Mortgage Calculator <= 1.0.1 - Local File Inclusion Vulnerability	Jun 6, 2025 1y ago
CVE-2023-26000	medium	5.9/10	WordPress Bang tinh vay <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability	Jun 6, 2025 1y ago
CVE-2023-25997	medium	6.5/10	WordPress Sola Support Ticket <= 3.17 - Arbitrary Content Deletion Vulnerability	Jun 6, 2025 1y ago
CVE-2023-26002	medium	4.3/10	WordPress 6Storage Rentals <= 2.19.5 - Broken Access Control Vulnerability	Jun 6, 2025 1y ago
CVE-2023-26001	medium	5.9/10	WordPress Next Event Calendar <= 1.2 - Cross Site Scripting (XSS) Vulnerability	Jun 6, 2025 1y ago
CVE-2025-23969	medium	5.3/10	WordPress KI Live Video Conferences plugin <= 5.5.15 - Sensitive Data Exposure Vulnerability	Jun 6, 2025 1y ago
CVE-2023-26003	high	7.6/10	WordPress WP Post Corrector <= 1.0.2 - SQL Injection Vulnerability	Jun 6, 2025 1y ago
CVE-2025-24762	medium	5.4/10	WordPress TicketBAI Facturas para WooCommerce plugin <= 3.45 - Broken Access Control vulnerability	Jun 6, 2025 1y ago
CVE-2025-23971	medium	5.3/10	WordPress KI Live Video Conferences plugin <= 5.5.15 - Broken Access Control Vulnerability	Jun 6, 2025 1y ago
CVE-2025-24772	medium	5.4/10	WordPress Pay with Contact Form 7 plugin <= 1.0.4 - Cross Site Request Forgery (CSRF) Vulnerability	Jun 6, 2025 1y ago
CVE-2025-24763	medium	5.3/10	WordPress bbPress API plugin <= 1.0.14 - Broken Access Control Vulnerability	Jun 6, 2025 1y ago
CVE-2025-24778	medium	5.4/10	WordPress No Spam At All plugin <= 1.3 - Broken Access Control Vulnerability	Jun 6, 2025 1y ago
CVE-2025-24776	medium	5.4/10	WordPress Responsive Flipbooks plugin <= 1.0 - Broken Access Control Vulnerability	Jun 6, 2025 1y ago
CVE-2025-26593	medium	4.3/10	WordPress FastBook plugin <= 1.1 - Cross Site Request Forgery (CSRF) Vulnerability	Jun 6, 2025 1y ago
CVE-2025-26590	high	7.6/10	WordPress Complete Google Seo Scan plugin <= 3.5.1 - SQL Injection Vulnerability	Jun 6, 2025 1y ago
CVE-2025-28950	high	7.1/10	WordPress Post Author plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) Vulnerability	Jun 6, 2025 1y ago