Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

342,874

All time

Critical · Active

11,192

CVSS ≥ 9.0

New · 14 days

3,043

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 8401–8430 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-30530	medium	5.9/10	WordPress AI Preloader plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30529	medium	4.3/10	WordPress Auto Load Next Post plugin <= 1.5.14 - Cross Site Request Forgery (CSRF) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30528	critical	9.3/10	WordPress Awesome Logos plugin <= 1.2 - CSRF to SQL Injection vulnerability	Mar 24, 2025 1y ago
CVE-2025-30527	medium	5.9/10	WordPress My Bootstrap Menu plugin <= 1.2.1 - Stored Cross Site Scripting (XSS) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30526	medium	4.3/10	WordPress Typekit plugin <= 1.2.3 - Cross Site Request Forgery (CSRF) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30525	high	7.6/10	WordPress WP Profitshare plugin <= 1.4.9 - SQL Injection vulnerability	Mar 24, 2025 1y ago
CVE-2025-30523	high	7.6/10	WordPress Super Simple Subscriptions plugin <= 1.1.0 - SQL Injection vulnerability	Mar 24, 2025 1y ago
CVE-2025-30522	high	7.1/10	WordPress Contact Form 7 Material Design plugin <= 1.0.0 - CSRF to Stored XSS vulnerability	Mar 24, 2025 1y ago
CVE-2025-30521	medium	4.3/10	WordPress GP Back To Top plugin <= 3.0 - Cross Site Request Forgery (CSRF) vulnerability	Mar 24, 2025 1y ago
CVE-2024-12920	high	8.8/10	FoodBakery \| Delivery Restaurant Directory WordPress Theme <= 4.7 - Missing Authorization in Multiple Functions	Mar 19, 2025 1y ago
CVE-2024-13933	high	8.8/10	FoodBakery \| Delivery Restaurant Directory WordPress Theme <= 4.7 - Cross-Site Request Forgery in Multiple Functions	Mar 19, 2025 1y ago
CVE-2024-13790	critical	9.8/10	MinimogWP – The High Converting eCommerce WordPress Theme <= 3.7.0 - Unauthenticated Local PHP File Inclusion	Mar 19, 2025 1y ago
CVE-2025-26978	high	8.5/10	WordPress FS Poster plugin <= 6.5.8 - SQL Injection vulnerability	Mar 15, 2025 1y ago
CVE-2025-26976	high	8.5/10	WordPress PrivateContent plugin <= 8.11.4 - SQL Injection vulnerability	Mar 15, 2025 1y ago
CVE-2025-26972	high	7.1/10	WordPress PrivateContent plugin <= 8.11.5 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 15, 2025 1y ago
CVE-2025-26969	high	8.3/10	WordPress PrivateContent plugin <= 8.11.5 - Subscriber+ Site Wide Broken Access Control vulnerability	Mar 15, 2025 1y ago
CVE-2025-26961	high	8.6/10	WordPress Fresh Framework plugin <= 1.70.0 - Unauthenticated Broken Access Control vulnerability	Mar 15, 2025 1y ago
CVE-2025-26940	medium	6.3/10	WordPress Pie Register Premium plugin <= 3.8.3.2 - Path Traversal to Non-Arbitrary File Deletion vulnerability	Mar 15, 2025 1y ago
CVE-2025-26924	medium	6.5/10	WordPress Ohio Theme Extra plugin <= 3.4.7 - Shortcode Injection vulnerability	Mar 15, 2025 1y ago
CVE-2025-26921	high	8.8/10	WordPress Booking and Rental Manager Plugin <= 2.2.6 - PHP Object Injection vulnerability	Mar 15, 2025 1y ago
CVE-2025-26899	medium	6.5/10	WordPress Recapture for WooCommerce Plugin <= 1.0.43 - CSRF to Settings Change vulnerability	Mar 15, 2025 1y ago
CVE-2025-26895	medium	6.5/10	WordPress m1.DownloadList plugin <= 0.19 - Cross Site Scripting (XSS) vulnerability	Mar 15, 2025 1y ago
CVE-2025-26886	high	7.6/10	WordPress PublishPress Authors plugin <= 4.7.3 - SQL Injection vulnerability	Mar 15, 2025 1y ago
CVE-2025-26875	critical	9.3/10	WordPress Multiple Shipping And Billing Address For Woocommerce Plugin <= 1.3 - SQL Injection vulnerability	Mar 15, 2025 1y ago
CVE-2025-26556	high	7.1/10	WordPress WP AntiDDOS Plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability	Mar 15, 2025 1y ago
CVE-2025-26555	high	7.1/10	WordPress Debug-Bar-Extender Plugin <= 0.5 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 15, 2025 1y ago
CVE-2025-26554	high	7.1/10	WordPress WP Discord Post Plugin <= 2.1.0 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 15, 2025 1y ago
CVE-2025-26553	high	7.1/10	WordPress Pre Order Addon for WooCommerce plugin<= 1.0.7 - Reflected Cross-Site Scripting	Mar 15, 2025 1y ago
CVE-2025-26548	high	7.1/10	WordPress Random Image Selector plugin <= 1.5.6 - Reflected Cross-Site Scripting vulnerability	Mar 15, 2025 1y ago
CVE-2025-23744	high	7.1/10	WordPress Random Posts, Mp3 Player + ShareButton plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 15, 2025 1y ago