Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

353,983

All time

Critical · Active

12,559

CVSS ≥ 9.0

New · 14 days

1,498

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 841–870 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-57339	medium	6.6/10	WordPress Business Directory plugin <= 6.4.23 - Broken Access Control vulnerability	Jun 29, 2026 3mo ago
CVE-2026-57338	high	7.1/10	WordPress ARForms plugin <= 7.1.2 - Reflected Cross Site Scripting (XSS) vulnerability	Jun 29, 2026 3mo ago
CVE-2026-57337	high	7.1/10	WordPress Landing Page Builder plugin <= 1.5.3.5 - Cross Site Scripting (XSS) vulnerability	Jun 29, 2026 3mo ago
CVE-2026-57336	high	7.1/10	WordPress Jobify theme <= 4.3.2 - Cross Site Scripting (XSS) vulnerability	Jun 29, 2026 3mo ago
CVE-2026-57335	medium	6.5/10	WordPress Ads by WPQuads plugin <= 3.0.3 - Broken Access Control vulnerability	Jun 29, 2026 3mo ago
CVE-2026-57334	medium	6.5/10	WordPress WP User Frontend plugin <= 4.3.7 - Broken Access Control vulnerability	Jun 29, 2026 3mo ago
CVE-2026-57333	high	7.1/10	WordPress Link Whisper Free plugin <= 0.9.4 - Reflected Cross Site Scripting (XSS) vulnerability	Jun 29, 2026 3mo ago
CVE-2026-57332	high	7.1/10	WordPress Wallet System for WooCommerce plugin <= 2.7.6 - Broken Access Control vulnerability	Jun 29, 2026 3mo ago
CVE-2026-57331	critical	9.9/10	WordPress Paid Videochat Turnkey Site plugin <= 7.4.8 - Arbitrary File Deletion vulnerability	Jun 29, 2026 3mo ago
CVE-2026-57330	medium	6.5/10	WordPress MasterStudy LMS plugin <= 3.7.27 - Cross Site Scripting (XSS) vulnerability	Jun 29, 2026 3mo ago
CVE-2026-57329	medium	6.5/10	WordPress WooCommerce Designer Pro plugin <= 1.9.34 - Cross Site Scripting (XSS) vulnerability	Jun 29, 2026 3mo ago
CVE-2026-57328	medium	6.5/10	WordPress Business Directory plugin <= 6.4.22 - Cross Site Scripting (XSS) vulnerability	Jun 29, 2026 3mo ago
CVE-2026-57327	medium	6.3/10	WordPress MainWP plugin <= 6.1.1 - Broken Access Control vulnerability	Jun 29, 2026 3mo ago
CVE-2026-57326	medium	6.5/10	WordPress Business Directory plugin <= 6.4.22 - Cross Site Scripting (XSS) vulnerability	Jun 29, 2026 3mo ago
CVE-2026-57320	high	7.1/10	WordPress BEAR plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability	Jun 29, 2026 3mo ago
CVE-2026-57346	high	7.1/10	WordPress Embed Privacy plugin <= 1.12.3 - Arbitrary File Deletion vulnerability	Jun 29, 2026 3mo ago
CVE-2026-57676	medium	4.3/10	WordPress Simple User Avatar plugin <= 4.9 - Insecure Direct Object References (IDOR) vulnerability	Jun 29, 2026 3mo ago
CVE-2026-9677	—	—	Shariff for WordPress <= 1.0.11 - Admin+ Stored Cross-Site Scripting	Jun 27, 2026 3mo ago
CVE-2026-57667	high	8.5/10	WordPress Groundhogg plugin <= 4.5 - SQL Injection vulnerability	Jun 26, 2026 3mo ago
CVE-2026-57660	medium	5.3/10	WordPress Booking and Rental Manager plugin <= 2.7.1 - Broken Access Control vulnerability	Jun 26, 2026 3mo ago
CVE-2026-57654	medium	6.5/10	WordPress Affiliates Manager plugin <= 2.9.49 - Broken Access Control vulnerability	Jun 26, 2026 3mo ago
CVE-2026-57648	medium	4.3/10	WordPress Nelio Content plugin <= 4.3.4 - Broken Access Control vulnerability	Jun 26, 2026 3mo ago
CVE-2026-57635	medium	6.5/10	WordPress FunnelKit Payment Gateway for Stripe WooCommerce plugin <= 1.14.0.3 - Cross Site Request Forgery (CSRF) vulnerability	Jun 26, 2026 3mo ago
CVE-2026-57431	medium	6.5/10	WordPress Featured Image plugin <= 2.1 - Cross Site Scripting (XSS) vulnerability	Jun 26, 2026 3mo ago
CVE-2026-56068	critical	9.3/10	WordPress JetEngine plugin <= 3.8.10.2 - SQL Injection vulnerability	Jun 26, 2026 3mo ago
CVE-2026-54812	critical	9.3/10	WordPress Motors plugin <= 1.4.109 - SQL Injection vulnerability	Jun 17, 2026 3mo ago
CVE-2026-49076	critical	9.3/10	WordPress JetEngine plugin <= 3.8.9.1 - SQL Injection vulnerability	Jun 17, 2026 3mo ago
CVE-2026-40722	medium	5.5/10	WordPress Yoast SEO Premium plugin <= 26.6 - Broken Access Control vulnerability	Jun 17, 2026 3mo ago
CVE-2026-40750	critical	9.9/10	WordPress Kids Online Store theme <= 0.8.9 - Arbitrary File Upload vulnerability	Jun 16, 2026 3mo ago
CVE-2026-40809	medium	6.5/10	WordPress Metro Magazine theme <= 1.4.1 - Broken Access Control vulnerability	Jun 16, 2026 3mo ago