Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,965

All time

Critical · Active

12,189

CVSS ≥ 9.0

New · 14 days

3,271

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 6421–6450 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-28948	high	7.1/10	WordPress Mediabay - WordPress Media Library Folders plugin <= 1.4 - CSRF to Reflected XSS vulnerability	Jun 6, 2025 1y ago
CVE-2025-28954	high	7.4/10	WordPress Backwp plugin <= 2.0.2 - CSRF to Arbitrary File Deletion vulnerability	Jun 6, 2025 1y ago
CVE-2025-28952	medium	4.3/10	WordPress CubePoints plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) Vulnerability	Jun 6, 2025 1y ago
CVE-2025-28964	high	7.1/10	WordPress Personal Favicon plugin <= 2.0 - CSRF to Stored XSS vulnerability	Jun 6, 2025 1y ago
CVE-2025-28958	high	7.1/10	WordPress Bg Orthodox Calendar plugin <= 0.13.10 - CSRF to Stored XSS vulnerability	Jun 6, 2025 1y ago
CVE-2025-28974	high	7.1/10	WordPress Free WP Mail SMTP plugin <= 1.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability	Jun 6, 2025 1y ago
CVE-2025-28966	high	7.1/10	WordPress Recent Posts Slider Responsive plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) vulnerability	Jun 6, 2025 1y ago
CVE-2025-28984	medium	4.3/10	WordPress Subscription Renewal Reminders for WooCommerce plugin <= 1.4.1 - Cross Site Request Forgery (CSRF) vulnerability	Jun 6, 2025 1y ago
CVE-2025-28981	high	7.1/10	WordPress WP Mail Options plugin <= 0.2.3 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability	Jun 6, 2025 1y ago
CVE-2025-28989	medium	5.9/10	WordPress Read More Login plugin <= 2.0.3 - Cross Site Scripting (XSS) Vulnerability	Jun 6, 2025 1y ago
CVE-2025-28986	high	8.2/10	WordPress Epicwin Plugin plugin <= 1.5 - CSRF to SQL Injection vulnerability	Jun 6, 2025 1y ago
CVE-2025-28985	medium	5.4/10	WordPress Elastic Email Subscribe Form plugin <= 1.2.2 - Broken Access Control Vulnerability	Jun 6, 2025 1y ago
CVE-2025-28995	medium	5.3/10	WordPress Viral Loops WP Integration plugin <= 3.8.1 - Broken Access Control Vulnerability	Jun 6, 2025 1y ago
CVE-2025-28994	medium	4.3/10	WordPress Viral Loops WP Integration plugin <= 3.8.1 - Broken Access Control Vulnerability	Jun 6, 2025 1y ago
CVE-2025-28997	medium	5.3/10	WordPress WP AutoKeyword plugin <= 1.0 - Broken Access Control Vulnerability	Jun 6, 2025 1y ago
CVE-2025-28996	medium	4.3/10	WordPress GPP Slideshow plugin <= 1.3.5 - Broken Access Control Vulnerability	Jun 6, 2025 1y ago
CVE-2025-29005	medium	4.3/10	WordPress HR Management Lite plugin <= 3.6 - Cross Site Request Forgery (CSRF) vulnerability	Jun 6, 2025 1y ago
CVE-2025-29003	medium	6.5/10	WordPress The Holiday Calendar plugin <= 1.18.2.1 - Cross Site Scripting (XSS) Vulnerability	Jun 6, 2025 1y ago
CVE-2025-29008	medium	4.9/10	WordPress SocialMark plugin <= 2.0.7 - Server Side Request Forgery (SSRF) Vulnerability	Jun 6, 2025 1y ago
CVE-2025-29006	medium	5.3/10	WordPress Direct Checkout for WooCommerce Lite plugin <= 1.0.3 - Broken Access Control Vulnerability	Jun 6, 2025 1y ago
CVE-2025-29013	medium	5.4/10	WordPress Custom Category/Post Type Post order plugin <= 1.6.0 - Broken Access Control Vulnerability	Jun 6, 2025 1y ago
CVE-2025-29011	medium	6.5/10	WordPress YouTube Simple Gallery plugin <= 2.2.0 - Cross Site Scripting (XSS) Vulnerability	Jun 6, 2025 1y ago
CVE-2025-29010	medium	4.3/10	WordPress Behance Portfolio Manager plugin <= 1.7.5 - Broken Access Control vulnerability	Jun 6, 2025 1y ago
CVE-2025-30625	medium	5.9/10	WordPress AppBanners plugin <= 1.5.14 - Cross Site Scripting (XSS) Vulnerability	Jun 6, 2025 1y ago
CVE-2025-30624	medium	4.3/10	WordPress WordLift plugin <= 3.54.4 - Broken Access Control Vulnerability	Jun 6, 2025 1y ago
CVE-2025-30629	medium	4.3/10	WordPress Bitly URL Shortener plugin <= 1.4.1 - Cross Site Request Forgery (CSRF) vulnerability	Jun 6, 2025 1y ago
CVE-2025-30627	medium	5.9/10	WordPress Elegant Visitor Counter plugin <= 3.1 - Cross Site Scripting (XSS) Vulnerability	Jun 6, 2025 1y ago
CVE-2025-30632	medium	5.4/10	WordPress Global Translator plugin <= 2.0.2 - Cross Site Request Forgery (CSRF) Vulnerability	Jun 6, 2025 1y ago
CVE-2025-30630	medium	5.9/10	WordPress Global Translator plugin <= 2.0.2 - Cross Site Scripting (XSS) Vulnerability	Jun 6, 2025 1y ago
CVE-2025-30636	medium	5.4/10	WordPress Accessibility Suite plugin <= 4.19 - Broken Access Control Vulnerability	Jun 6, 2025 1y ago