Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,163

All time

Critical · Active

11,974

CVSS ≥ 9.0

New · 14 days

2,675

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 661–690 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-57673	high	7.1/10	WordPress Optimole plugin <= 4.2.7 - Cross Site Scripting (XSS) vulnerability	Jul 2, 2026 1mo ago
CVE-2026-57672	high	7.1/10	WordPress wpDataTables plugin <= 6.5.1.1 - Cross Site Scripting (XSS) vulnerability	Jul 2, 2026 1mo ago
CVE-2026-57671	high	7.1/10	WordPress perfmatters plugin <= 2.6.4 - Cross Site Scripting (XSS) vulnerability	Jul 2, 2026 1mo ago
CVE-2026-57670	high	7.1/10	WordPress Google Maps CP plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability	Jul 2, 2026 1mo ago
CVE-2026-57669	medium	6.5/10	WordPress Advanced Contact form 7 DB plugin <= 2.0.9 - Broken Access Control vulnerability	Jul 2, 2026 1mo ago
CVE-2026-57625	critical	9.6/10	WordPress Admin and Site Enhancements (ASE) Pro plugin <= 8.8.5 - Cross Site Scripting (XSS) vulnerability	Jul 2, 2026 1mo ago
CVE-2026-57624	critical	10.0/10	WordPress Blocksy Companion Pro plugin <= 2.1.46 - Remote Code Execution (RCE) vulnerability	Jul 2, 2026 1mo ago
CVE-2026-57623	critical	9.0/10	WordPress W3 Total Cache plugin <= 2.9.4 - Arbitrary Code Execution vulnerability	Jul 2, 2026 1mo ago
CVE-2026-57621	critical	9.8/10	WordPress Booktics plugin <= 1.0.21 - PHP Object Injection vulnerability	Jul 2, 2026 1mo ago
CVE-2026-57426	high	7.1/10	WordPress Modula - PRO plugin <= 2.10.8 - Cross Site Scripting (XSS) vulnerability	Jul 2, 2026 1mo ago
CVE-2026-57366	high	7.1/10	WordPress WPAdverts plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability	Jul 2, 2026 1mo ago
CVE-2026-57362	high	7.1/10	WordPress ChatBot plugin <= 8.3.2 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 2, 2026 1mo ago
CVE-2026-57361	high	7.1/10	WordPress Survey Maker plugin <= 5.2.2.5 - Cross Site Scripting (XSS) vulnerability	Jul 2, 2026 1mo ago
CVE-2026-57360	high	7.1/10	WordPress eCommerce Product Catalog plugin <= 3.5.4 - Cross Site Scripting (XSS) vulnerability	Jul 2, 2026 1mo ago
CVE-2026-57359	high	7.1/10	WordPress ReviewX plugin <= 2.3.10 - Cross Site Scripting (XSS) vulnerability	Jul 2, 2026 1mo ago
CVE-2026-57358	high	7.1/10	WordPress Customize My Account for WooCommerce plugin <= 4.3.9 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 2, 2026 1mo ago
CVE-2026-57357	high	7.1/10	WordPress Search Atlas SEO plugin <= 2.6.6 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 2, 2026 1mo ago
CVE-2026-57356	high	7.1/10	WordPress MC Woocommerce Wishlist plugin <= 1.9.19 - Cross Site Scripting (XSS) vulnerability	Jul 2, 2026 1mo ago
CVE-2026-57355	medium	6.5/10	WordPress Classified Listing plugin <= 5.4.2 - Broken Access Control vulnerability	Jul 2, 2026 1mo ago
CVE-2026-57354	medium	6.5/10	WordPress JetReviews plugin <= 3.0.0.1 - Cross Site Scripting (XSS) vulnerability	Jul 2, 2026 1mo ago
CVE-2026-57353	medium	6.5/10	WordPress Link Whisper Premium plugin <= 2.9.0 - Broken Access Control vulnerability	Jul 2, 2026 1mo ago
CVE-2026-57352	medium	4.8/10	WordPress ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce plugin <= 2.2.0 - Broken Authentication vulnerability	Jul 2, 2026 1mo ago
CVE-2026-57351	high	7.1/10	WordPress HandL UTM Grabber plugin <= 2.9.2 - Cross Site Scripting (XSS) vulnerability	Jul 2, 2026 1mo ago
CVE-2026-57350	high	7.1/10	WordPress WP Debugging plugin <= 2.12.2 - Cross Site Scripting (XSS) vulnerability	Jul 2, 2026 1mo ago
CVE-2026-57349	high	7.1/10	WordPress WPeMatico RSS Feed Fetcher plugin <= 2.8.17 - Cross Site Scripting (XSS) vulnerability	Jul 2, 2026 1mo ago
CVE-2026-57348	high	7.2/10	WordPress Paid Member Subscriptions plugin <= 3.0.4 - Server Side Request Forgery (SSRF) vulnerability	Jul 2, 2026 1mo ago
CVE-2026-57347	medium	6.5/10	WordPress Hotel Booking Lite plugin <= 6.0.3 - Sensitive Data Exposure vulnerability	Jul 2, 2026 1mo ago
CVE-2026-57345	high	7.1/10	WordPress Internal Links Manager plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerability	Jul 2, 2026 1mo ago
CVE-2026-57344	high	7.1/10	WordPress Classified Listing plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerability	Jul 2, 2026 1mo ago
CVE-2026-57343	high	7.1/10	WordPress Real Estate 7 theme <= 3.5.9 - Cross Site Scripting (XSS) vulnerability	Jul 2, 2026 1mo ago