Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

356,021

All time

Critical · Active

12,717

CVSS ≥ 9.0

New · 14 days

2,257

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 8731–8760 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-28935	high	7.1/10	WordPress Fancybox Plus plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 26, 2025 1y ago
CVE-2025-28934	high	7.1/10	WordPress Simple Post Series plugin <= 2.4.4 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 26, 2025 1y ago
CVE-2025-28928	high	7.1/10	WordPress Are you robot google recaptcha for Wordpress plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 26, 2025 1y ago
CVE-2025-28924	high	7.1/10	WordPress ZenphotoPress plugin <= 1.8 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 26, 2025 1y ago
CVE-2025-28921	high	7.1/10	WordPress SpatialMatch IDX plugin <= 3.0.9 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 26, 2025 1y ago
CVE-2025-28917	high	7.1/10	WordPress Custom Smilies plugin <= 2.9.2 - Cross Site Scripting (XSS) vulnerability	Mar 26, 2025 1y ago
CVE-2025-28916	critical	9.8/10	WordPress Docpro plugin <= 2.0.1 - Local File Inclusion vulnerability	Mar 26, 2025 1y ago
CVE-2025-28911	high	7.1/10	WordPress Gravity 2 PDF plugin <= 3.1.3 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 26, 2025 1y ago
CVE-2025-28903	high	7.1/10	WordPress Driving Directions plugin <= 1.4.4 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 26, 2025 1y ago
CVE-2025-28899	high	7.1/10	WordPress WP Event Ticketing plugin <= 1.3.4 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 26, 2025 1y ago
CVE-2025-28898	critical	9.3/10	WordPress WP Multistore Locator plugin <= 2.5.2 - SQL Injection vulnerability	Mar 26, 2025 1y ago
CVE-2025-28893	critical	9.9/10	WordPress Visual Text Editor plugin <= 1.2.1 - Remote Code Execution (RCE) vulnerability	Mar 26, 2025 1y ago
CVE-2025-28890	high	7.1/10	WordPress Lightview Plus plugin <= 3.1.3 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 26, 2025 1y ago
CVE-2025-28889	high	7.1/10	WordPress Custom Product Stickers for Woocommerce plugin <= 1.9.0 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 26, 2025 1y ago
CVE-2025-28885	medium	6.5/10	WordPress Fiverr.com Official Search Box plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability	Mar 26, 2025 1y ago
CVE-2025-28882	high	7.1/10	WordPress Omnify plugin <= 2.0.3 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 26, 2025 1y ago
CVE-2025-28880	high	7.1/10	WordPress Blue Captcha plugin <= 1.7.4 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 26, 2025 1y ago
CVE-2025-28877	high	7.1/10	WordPress Key4ce osTicket Bridge plugin <= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 26, 2025 1y ago
CVE-2025-28873	high	8.5/10	WordPress Shuffle plugin <= 0.5 - SQL Injection vulnerability	Mar 26, 2025 1y ago
CVE-2025-28869	high	7.1/10	WordPress NextGEN Gallery Voting plugin <= 2.7.6 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 26, 2025 1y ago
CVE-2025-28865	high	7.1/10	WordPress WP Colorful Tag Cloud plugin <= 2.0.1 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 26, 2025 1y ago
CVE-2025-28858	high	7.1/10	WordPress Arrow Maps plugin <= 1.0.9 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 26, 2025 1y ago
CVE-2025-28855	high	7.1/10	WordPress Teleport plugin <= 1.2.4 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 26, 2025 1y ago
CVE-2025-26584	high	7.1/10	WordPress TBTestimonials Plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 26, 2025 1y ago
CVE-2025-26583	high	7.1/10	WordPress Video Share VOD plugin <= 2.7.9 - Reflected Cross-Site Scripting vulnerability	Mar 26, 2025 1y ago
CVE-2025-26581	high	7.1/10	WordPress Picture Gallery plugin <= 1.6.3 - CSRF to Stored XSS vulnerability	Mar 26, 2025 1y ago
CVE-2025-26579	high	7.1/10	WordPress MicroPayments Paid Membership plugin <= 3.2.4 - Reflected Cross-Site Scripting vulnerability	Mar 26, 2025 1y ago
CVE-2025-26576	high	7.1/10	WordPress WP Simple Slideshow Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 26, 2025 1y ago
CVE-2025-26575	high	7.1/10	WordPress Display Post Meta plugin <= 1.5- Cross Site Scripting (XSS) vulnerability	Mar 26, 2025 1y ago
CVE-2025-26573	high	7.1/10	WordPress Rizzi Guestbook plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerability	Mar 26, 2025 1y ago