Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,172

All time

Critical · Active

11,976

CVSS ≥ 9.0

New · 14 days

2,680

Newly disclosed

Feed last synced

53 mins ago

Data freshness

Showing 721–750 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-57722	medium	5.9/10	WordPress Enable Media Replace plugin <= 4.2.1 - Cross Site Scripting (XSS) vulnerability	Jul 1, 2026 1mo ago
CVE-2026-27409	medium	5.3/10	WordPress Webba Booking plugin <= 6.4.13 - Broken Access Control vulnerability	Jul 1, 2026 1mo ago
CVE-2026-57692	critical	9.8/10	WordPress PrivateContent plugin <= 9.9.2 - Privilege Escalation vulnerability	Jul 1, 2026 1mo ago
CVE-2026-27435	medium	5.3/10	WordPress Woffice theme < 5.4.33 - Broken Access Control vulnerability	Jul 1, 2026 1mo ago
CVE-2026-9711	critical	9.8/10	EventON - WordPress Virtual Event Calendar Plugin <= 5.0.11 - Unauthenticated Blind SQL Injection via Search Parameter	Jun 30, 2026 1mo ago
CVE-2026-57341	medium	6.5/10	WordPress Colissimo Officiel : Méthodes de livraison pour WooCommerce plugin <= 2.9.0 - Insecure Direct Object References (IDOR) vulnerability	Jun 29, 2026 1mo ago
CVE-2026-57340	medium	6.5/10	WordPress Japanized For WooCommerce plugin <= 2.9.12 - Broken Access Control vulnerability	Jun 29, 2026 1mo ago
CVE-2026-57339	medium	6.6/10	WordPress Business Directory plugin <= 6.4.23 - Broken Access Control vulnerability	Jun 29, 2026 1mo ago
CVE-2026-57338	high	7.1/10	WordPress ARForms plugin <= 7.1.2 - Reflected Cross Site Scripting (XSS) vulnerability	Jun 29, 2026 1mo ago
CVE-2026-57337	high	7.1/10	WordPress Landing Page Builder plugin <= 1.5.3.5 - Cross Site Scripting (XSS) vulnerability	Jun 29, 2026 1mo ago
CVE-2026-57336	high	7.1/10	WordPress Jobify theme <= 4.3.2 - Cross Site Scripting (XSS) vulnerability	Jun 29, 2026 1mo ago
CVE-2026-57335	medium	6.5/10	WordPress Ads by WPQuads plugin <= 3.0.3 - Broken Access Control vulnerability	Jun 29, 2026 1mo ago
CVE-2026-57334	medium	6.5/10	WordPress WP User Frontend plugin <= 4.3.7 - Broken Access Control vulnerability	Jun 29, 2026 1mo ago
CVE-2026-57333	high	7.1/10	WordPress Link Whisper Free plugin <= 0.9.4 - Reflected Cross Site Scripting (XSS) vulnerability	Jun 29, 2026 1mo ago
CVE-2026-57332	high	7.1/10	WordPress Wallet System for WooCommerce plugin <= 2.7.6 - Broken Access Control vulnerability	Jun 29, 2026 1mo ago
CVE-2026-57331	critical	9.9/10	WordPress Paid Videochat Turnkey Site plugin <= 7.4.8 - Arbitrary File Deletion vulnerability	Jun 29, 2026 1mo ago
CVE-2026-57330	medium	6.5/10	WordPress MasterStudy LMS plugin <= 3.7.27 - Cross Site Scripting (XSS) vulnerability	Jun 29, 2026 1mo ago
CVE-2026-57329	medium	6.5/10	WordPress WooCommerce Designer Pro plugin <= 1.9.34 - Cross Site Scripting (XSS) vulnerability	Jun 29, 2026 1mo ago
CVE-2026-57328	medium	6.5/10	WordPress Business Directory plugin <= 6.4.22 - Cross Site Scripting (XSS) vulnerability	Jun 29, 2026 1mo ago
CVE-2026-57327	medium	6.3/10	WordPress MainWP plugin <= 6.1.1 - Broken Access Control vulnerability	Jun 29, 2026 1mo ago
CVE-2026-57326	medium	6.5/10	WordPress Business Directory plugin <= 6.4.22 - Cross Site Scripting (XSS) vulnerability	Jun 29, 2026 1mo ago
CVE-2026-57320	high	7.1/10	WordPress BEAR plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability	Jun 29, 2026 1mo ago
CVE-2026-57346	high	7.1/10	WordPress Embed Privacy plugin <= 1.12.3 - Arbitrary File Deletion vulnerability	Jun 29, 2026 1mo ago
CVE-2026-57676	medium	4.3/10	WordPress Simple User Avatar plugin <= 4.9 - Insecure Direct Object References (IDOR) vulnerability	Jun 29, 2026 1mo ago
CVE-2026-9677	—	—	Shariff for WordPress <= 1.0.11 - Admin+ Stored Cross-Site Scripting	Jun 27, 2026 1mo ago
CVE-2026-57667	high	8.5/10	WordPress Groundhogg plugin <= 4.5 - SQL Injection vulnerability	Jun 26, 2026 1mo ago
CVE-2026-57660	medium	5.3/10	WordPress Booking and Rental Manager plugin <= 2.7.1 - Broken Access Control vulnerability	Jun 26, 2026 1mo ago
CVE-2026-57654	medium	6.5/10	WordPress Affiliates Manager plugin <= 2.9.49 - Broken Access Control vulnerability	Jun 26, 2026 1mo ago
CVE-2026-57648	medium	4.3/10	WordPress Nelio Content plugin <= 4.3.4 - Broken Access Control vulnerability	Jun 26, 2026 1mo ago
CVE-2026-57635	medium	6.5/10	WordPress FunnelKit Payment Gateway for Stripe WooCommerce plugin <= 1.14.0.3 - Cross Site Request Forgery (CSRF) vulnerability	Jun 26, 2026 1mo ago