Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

356,134

All time

Critical · Active

12,718

CVSS ≥ 9.0

New · 14 days

2,322

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 8851–8880 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-30564	high	7.1/10	WordPress Custom Script Integration plugin <= - 2.1 Cross Site Request Forgery (CSRF) Vulnerability	Mar 24, 2025 1y ago
CVE-2025-30561	high	7.1/10	WordPress CAS Maestro plugin <= 1.1.3 - CSRF to Stored XSS vulnerability	Mar 24, 2025 1y ago
CVE-2025-30560	high	7.1/10	WordPress jQuery Dropdown Menu plugin <= 3.0 - CSRF to Stored XSS vulnerability	Mar 24, 2025 1y ago
CVE-2025-30558	high	7.1/10	WordPress ANAC XML Render plugin <= 1.5.7 - CSRF to Stored XSS vulnerability	Mar 24, 2025 1y ago
CVE-2025-30557	medium	4.3/10	WordPress Easy 301 Redirects plugin <= 1.33 - Cross Site Request Forgery (CSRF) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30556	medium	4.3/10	WordPress Fix Rss Feeds plugin <= 3.1 - Cross Site Request Forgery (CSRF) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30555	high	7.1/10	WordPress WordPres 同步微博 plugin <= 1.1.0 - CSRF to Stored XSS vulnerability	Mar 24, 2025 1y ago
CVE-2025-30553	medium	6.5/10	WordPress GMO Font Agent plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30552	high	7.1/10	WordPress WordPress Admin Bar Improved plugin <= 3.3.5 - CSRF to Stored XSS vulnerability	Mar 24, 2025 1y ago
CVE-2025-30551	medium	6.5/10	WordPress Pretty file links plugin <= 0.9 - Cross Site Scripting (XSS) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30550	high	7.1/10	WordPress CallPhone'r plugin <= 1.1.1 - CSRF to Stored XSS vulnerability	Mar 24, 2025 1y ago
CVE-2025-30549	medium	4.3/10	WordPress Yummly Rich Recipes plugin <= 4.2 - Cross Site Request Forgery (CSRF) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30546	medium	4.3/10	WordPress Cackle plugin <= 4.33 - Cross Site Request Forgery (CSRF) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30545	medium	5.9/10	WordPress issuuPress plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30543	medium	4.3/10	WordPress Menu Duplicator plugin <= 1.0 - Broken Access Control vulnerability	Mar 24, 2025 1y ago
CVE-2025-30542	medium	4.3/10	WordPress WP SoundCloud Ultimate plugin <= 1.5 - Cross Site Request Forgery (CSRF) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30541	medium	4.3/10	WordPress Info Boxes Shortcode And Widgets plugin <= 1.15 - Cross Site Request Forgery (CSRF) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30540	medium	5.9/10	WordPress AvaiBook plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30539	medium	5.9/10	WordPress BMo Expo plugin <= 1.0.15 - Cross Site Scripting (XSS) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30538	medium	4.3/10	WordPress Simple Optimizer plugin <= 1.2.7 - Cross Site Request Forgery (CSRF) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30537	medium	5.9/10	WordPress Upload Quota per User plugin <= 1.3 - Cross Site Scripting (XSS) Vulnerability	Mar 24, 2025 1y ago
CVE-2025-30536	medium	5.9/10	WordPress Beautiful Link Preview plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30535	medium	4.3/10	WordPress External image replace plugin <= 1.0.8 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability	Mar 24, 2025 1y ago
CVE-2025-30534	medium	4.3/10	WordPress Image Captcha plugin <= 1.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability	Mar 24, 2025 1y ago
CVE-2025-30533	medium	5.9/10	WordPress Message ticker plugin <= 9.3 - Cross Site Scripting (XSS) Vulnerability	Mar 24, 2025 1y ago
CVE-2025-30532	medium	5.9/10	WordPress Weather Layer plugin <= 4.2.1 - Cross Site Scripting (XSS) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30531	medium	4.3/10	WordPress WP Ride Booking plugin <= 2.4 - Cross Site Request Forgery (CSRF) Vulnerability	Mar 24, 2025 1y ago
CVE-2025-30530	medium	5.9/10	WordPress AI Preloader plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30529	medium	4.3/10	WordPress Auto Load Next Post plugin <= 1.5.14 - Cross Site Request Forgery (CSRF) vulnerability	Mar 24, 2025 1y ago
CVE-2025-30528	critical	9.3/10	WordPress Awesome Logos plugin <= 1.2 - CSRF to SQL Injection vulnerability	Mar 24, 2025 1y ago