Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

342,792

All time

Critical · Active

11,186

CVSS ≥ 9.0

New · 14 days

3,079

Newly disclosed

Feed last synced

55 mins ago

Data freshness

Showing 8101–8130 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-22658	high	7.1/10	WordPress Listings for Appfolio plugin <= 1.2.0 - CSRF to Stored XSS vulnerability	Mar 27, 2025 1y ago
CVE-2025-22659	medium	6.5/10	WordPress Orbit Fox by ThemeIsle plugin <= 2.10.44 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2025 1y ago
CVE-2025-22660	medium	6.5/10	WordPress Include Mastodon Feed plugin <= 1.9.9 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2025 1y ago
CVE-2025-22665	medium	4.3/10	WordPress RapidLoad plugin <= 2.4.4 - Broken Access Control vulnerability	Mar 27, 2025 1y ago
CVE-2025-22667	medium	4.3/10	WordPress Export Order, Product, Customer & Coupon for WooCommerce to Google Sheets plugin <= 1.8.2 - Broken Access Control vulnerability	Mar 27, 2025 1y ago
CVE-2025-22668	medium	6.5/10	WordPress Awesome Event Booking plugin <= 2.7.2 - Broken Access Control vulnerability	Mar 27, 2025 1y ago
CVE-2025-22669	medium	4.3/10	WordPress Awesome Event Booking plugin <= 2.7.5 - Cross Site Request Forgery (CSRF) vulnerability	Mar 27, 2025 1y ago
CVE-2025-22670	medium	6.5/10	WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.7.2 - CSRF to Settings Change vulnerability	Mar 27, 2025 1y ago
CVE-2025-22671	medium	4.3/10	WordPress Disable Elementor Editor Translation plugin <= 1.0.2 - Broken Access Control vulnerability	Mar 27, 2025 1y ago
CVE-2025-22673	medium	4.3/10	WordPress EAN Barcode Generator <= 5.3.5 - Broken Access Control vulnerability	Mar 27, 2025 1y ago
CVE-2025-22672	medium	4.9/10	WordPress Video & Photo Gallery for Ultimate Member plugin <= 1.1.2 - Server Side Request Forgery (SSRF) vulnerability	Mar 27, 2025 1y ago
CVE-2025-22770	medium	5.4/10	WordPress Envo Multipurpose theme <= 1.1.6 - Broken Access Control vulnerability	Mar 27, 2025 1y ago
CVE-2025-25086	high	7.1/10	WordPress Secret Meta plugin <= 1.2.1 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability	Mar 27, 2025 1y ago
CVE-2025-22816	medium	6.5/10	WordPress Power Mag theme <= 1.1.5 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2025 1y ago
CVE-2025-25100	high	7.1/10	WordPress Cazamba plugin <= 1.2 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability	Mar 27, 2025 1y ago
CVE-2025-26731	medium	6.5/10	WordPress ARPrice plugin <= 4.1.3 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2025 1y ago
CVE-2025-26732	medium	6.5/10	WordPress StoreBiz plugin <= 1.0.32 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2025 1y ago
CVE-2025-26734	medium	6.5/10	WordPress Hester plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2025 1y ago
CVE-2025-26736	medium	6.5/10	WordPress MorningTime Lite theme <= 1.3.2 - Stored Cross Site Scripting (XSS) vulnerability	Mar 27, 2025 1y ago
CVE-2025-26737	medium	6.5/10	WordPress City Store theme <= 1.4.5 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2025 1y ago
CVE-2025-26738	medium	6.5/10	WordPress Quick Interest Slider plugin <= 3.1.5 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2025 1y ago
CVE-2025-30925	medium	6.5/10	WordPress The Pack Elementor addons plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2025 1y ago
CVE-2025-30923	medium	4.3/10	WordPress Gift Message for WooCommerce plugin <= 1.7.8 - Cross Site Request Forgery (CSRF) vulnerability	Mar 27, 2025 1y ago
CVE-2025-30922	medium	6.5/10	WordPress Simplebooklet PDF Viewer and Embedder plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2025 1y ago
CVE-2025-30921	high	7.6/10	WordPress Newsletters plugin <= 4.9.9.7 - SQL Injection vulnerability	Mar 27, 2025 1y ago
CVE-2025-30920	medium	6.5/10	WordPress WP Posts Carousel plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2025 1y ago
CVE-2025-30919	high	7.1/10	WordPress Store Locator Widget plugin <= 2025r2 - CSRF to Stored XSS vulnerability	Mar 27, 2025 1y ago
CVE-2025-30918	medium	6.5/10	WordPress Structured Content plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2025 1y ago
CVE-2025-30914	medium	4.4/10	WordPress Metform Elementor Contact Form Builder plugin <= 3.9.7 - Server Side Request Forgery (SSRF) vulnerability	Mar 27, 2025 1y ago
CVE-2025-30912	medium	5.4/10	WordPress Float menu plugin <= 6.1.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability	Mar 27, 2025 1y ago