Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,356

All time

Critical · Active

12,216

CVSS ≥ 9.0

New · 14 days

3,578

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 8701–8730 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-30557	medium	4.3/10	WordPress Easy 301 Redirects plugin <= 1.33 - Cross Site Request Forgery (CSRF) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30556	medium	4.3/10	WordPress Fix Rss Feeds plugin <= 3.1 - Cross Site Request Forgery (CSRF) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30555	high	7.1/10	WordPress WordPres 同步微博 plugin <= 1.1.0 - CSRF to Stored XSS vulnerability	Mar 24, 2025 1y ago
CVE-2025-30553	medium	6.5/10	WordPress GMO Font Agent plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30552	high	7.1/10	WordPress WordPress Admin Bar Improved plugin <= 3.3.5 - CSRF to Stored XSS vulnerability	Mar 24, 2025 1y ago
CVE-2025-30551	medium	6.5/10	WordPress Pretty file links plugin <= 0.9 - Cross Site Scripting (XSS) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30550	high	7.1/10	WordPress CallPhone'r plugin <= 1.1.1 - CSRF to Stored XSS vulnerability	Mar 24, 2025 1y ago
CVE-2025-30549	medium	4.3/10	WordPress Yummly Rich Recipes plugin <= 4.2 - Cross Site Request Forgery (CSRF) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30546	medium	4.3/10	WordPress Cackle plugin <= 4.33 - Cross Site Request Forgery (CSRF) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30545	medium	5.9/10	WordPress issuuPress plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30543	medium	4.3/10	WordPress Menu Duplicator plugin <= 1.0 - Broken Access Control vulnerability	Mar 24, 2025 1y ago
CVE-2025-30542	medium	4.3/10	WordPress WP SoundCloud Ultimate plugin <= 1.5 - Cross Site Request Forgery (CSRF) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30541	medium	4.3/10	WordPress Info Boxes Shortcode And Widgets plugin <= 1.15 - Cross Site Request Forgery (CSRF) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30540	medium	5.9/10	WordPress AvaiBook plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30539	medium	5.9/10	WordPress BMo Expo plugin <= 1.0.15 - Cross Site Scripting (XSS) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30538	medium	4.3/10	WordPress Simple Optimizer plugin <= 1.2.7 - Cross Site Request Forgery (CSRF) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30537	medium	5.9/10	WordPress Upload Quota per User plugin <= 1.3 - Cross Site Scripting (XSS) Vulnerability	Mar 24, 2025 1y ago
CVE-2025-30536	medium	5.9/10	WordPress Beautiful Link Preview plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30535	medium	4.3/10	WordPress External image replace plugin <= 1.0.8 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability	Mar 24, 2025 1y ago
CVE-2025-30534	medium	4.3/10	WordPress Image Captcha plugin <= 1.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability	Mar 24, 2025 1y ago
CVE-2025-30533	medium	5.9/10	WordPress Message ticker plugin <= 9.3 - Cross Site Scripting (XSS) Vulnerability	Mar 24, 2025 1y ago
CVE-2025-30532	medium	5.9/10	WordPress Weather Layer plugin <= 4.2.1 - Cross Site Scripting (XSS) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30531	medium	4.3/10	WordPress WP Ride Booking plugin <= 2.4 - Cross Site Request Forgery (CSRF) Vulnerability	Mar 24, 2025 1y ago
CVE-2025-30530	medium	5.9/10	WordPress AI Preloader plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30529	medium	4.3/10	WordPress Auto Load Next Post plugin <= 1.5.14 - Cross Site Request Forgery (CSRF) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30528	critical	9.3/10	WordPress Awesome Logos plugin <= 1.2 - CSRF to SQL Injection vulnerability	Mar 24, 2025 1y ago
CVE-2025-30527	medium	5.9/10	WordPress My Bootstrap Menu plugin <= 1.2.1 - Stored Cross Site Scripting (XSS) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30526	medium	4.3/10	WordPress Typekit plugin <= 1.2.3 - Cross Site Request Forgery (CSRF) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30525	high	7.6/10	WordPress WP Profitshare plugin <= 1.4.9 - SQL Injection vulnerability	Mar 24, 2025 1y ago
CVE-2025-30523	high	7.6/10	WordPress Super Simple Subscriptions plugin <= 1.1.0 - SQL Injection vulnerability	Mar 24, 2025 1y ago