Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

357,200

All time

Critical · Active

12,821

CVSS ≥ 9.0

New · 14 days

2,437

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 61–90 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-62115	high	8.1/10	WordPress KuteShop theme <= 4.2.9 - Local File Inclusion vulnerability	Oct 10, 2026 16d ago
CVE-2026-62099	high	8.1/10	WordPress Boutique theme <= 2.3.3 - Local File Inclusion vulnerability	Oct 10, 2026 16d ago
CVE-2026-62096	high	8.1/10	WordPress Biolife theme <= 3.2.3 - Local File Inclusion vulnerability	Oct 10, 2026 16d ago
CVE-2026-62094	high	8.1/10	WordPress TechOne theme <= 3.0.3 - Local File Inclusion vulnerability	Oct 10, 2026 16d ago
CVE-2026-62092	high	8.1/10	WordPress Armania theme <= 1.4.8 - Local File Inclusion vulnerability	Oct 10, 2026 16d ago
CVE-2026-62090	critical	9.8/10	WordPress WineShop theme <= 3.20 - PHP Object Injection vulnerability	Oct 10, 2026 16d ago
CVE-2026-62087	critical	9.8/10	WordPress Equadio theme <= 1.1.4 - PHP Object Injection vulnerability	Oct 10, 2026 16d ago
CVE-2026-62086	critical	9.8/10	WordPress Juno theme <= 2.25 - PHP Object Injection vulnerability	Oct 10, 2026 16d ago
CVE-2026-62077	critical	9.8/10	WordPress Avala theme <= 1.1.4 - PHP Object Injection vulnerability	Oct 10, 2026 16d ago
CVE-2026-62076	critical	9.8/10	WordPress Kalles theme <= 1.1.7.1 - PHP Object Injection vulnerability	Oct 10, 2026 16d ago
CVE-2026-62075	high	8.1/10	WordPress Backhoe theme <= 2.0 - Local File Inclusion vulnerability	Oct 10, 2026 16d ago
CVE-2026-62074	high	8.1/10	WordPress Ozeum theme <= 1.3.0 - Local File Inclusion vulnerability	Oct 10, 2026 16d ago
CVE-2026-62070	high	8.1/10	WordPress Flipmart theme <= 2.8 - Local File Inclusion vulnerability	Oct 10, 2026 16d ago
CVE-2026-62069	high	8.1/10	WordPress Fabius theme <= 1.0 - Local File Inclusion vulnerability	Oct 10, 2026 16d ago
CVE-2026-62068	high	8.1/10	WordPress Teoro theme <= 1.1 - Local File Inclusion vulnerability	Oct 10, 2026 16d ago
CVE-2026-62067	high	8.1/10	WordPress Kaven theme <= 1.2 - Local File Inclusion vulnerability	Oct 10, 2026 16d ago
CVE-2026-62066	high	8.1/10	WordPress Volos theme <= 1.2 - Local File Inclusion vulnerability	Oct 10, 2026 16d ago
CVE-2026-62065	high	8.1/10	WordPress Cardea theme <= 2.3 - Local File Inclusion vulnerability	Oct 10, 2026 16d ago
CVE-2026-62054	critical	9.8/10	WordPress Yacht Rental theme <= 2.6 - PHP Object Injection vulnerability	Oct 10, 2026 16d ago
CVE-2026-62053	critical	9.8/10	WordPress Wine House theme <= 3.20 - PHP Object Injection vulnerability	Oct 10, 2026 16d ago
CVE-2026-62052	critical	9.8/10	WordPress Tipsy theme <= 1.6 - PHP Object Injection vulnerability	Oct 10, 2026 16d ago
CVE-2026-62051	critical	9.8/10	WordPress Stargaze theme <= 1.10 - PHP Object Injection vulnerability	Oct 10, 2026 16d ago
CVE-2026-62050	critical	9.8/10	WordPress Splendour theme <= 1.23 - PHP Object Injection vulnerability	Oct 10, 2026 16d ago
CVE-2026-62020	high	8.1/10	WordPress TouchUp theme < 1.4 - Local File Inclusion vulnerability	Oct 10, 2026 16d ago
CVE-2026-48194	high	8.1/10	WordPress DukaMarket theme <= 1.3.0 - Local File Inclusion vulnerability	Oct 10, 2026 16d ago
CVE-2026-48193	high	8.1/10	WordPress Uminex theme <= 1.0.9 - Local File Inclusion vulnerability	Oct 10, 2026 16d ago
CVE-2026-42777	high	8.1/10	WordPress Aalto theme <= 1.8 - Local File Inclusion vulnerability	Oct 10, 2026 16d ago
CVE-2026-42724	high	8.1/10	WordPress CleanSkin theme <= 1.5.0 - Local File Inclusion vulnerability	Oct 10, 2026 16d ago
CVE-2026-42723	critical	9.8/10	WordPress CleanSkin theme <= 1.5.0 - PHP Object Injection vulnerability	Oct 10, 2026 16d ago
CVE-2026-42718	critical	9.8/10	WordPress Booster for WooCommerce plugin <= 8.4.0 - PHP Object Injection vulnerability	Oct 10, 2026 16d ago