Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

342,981

All time

Critical · Active

11,210

CVSS ≥ 9.0

New · 14 days

3,015

Newly disclosed

Feed last synced

59 mins ago

Data freshness

Showing 9541–9570 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-23842	high	7.1/10	WordPress WordPress Gallery Plugin plugin <= 1.4 - CSRF to Stored XSS vulnerability	Jan 16, 2025 1y ago
CVE-2025-23841	medium	6.5/10	WordPress Top Flash Embed plugin <= 0.3.4 - Cross Site Scripting (XSS) vulnerability	Jan 16, 2025 1y ago
CVE-2025-23830	medium	6.5/10	WordPress JB Horizontal Scroller News Ticker plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Jan 16, 2025 1y ago
CVE-2025-23844	high	7.1/10	WordPress Custom Widget Classes plugin <= 1.1 - CSRF to Stored XSS vulnerability	Jan 16, 2025 1y ago
CVE-2025-23831	medium	6.5/10	WordPress QR Code Generator plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability	Jan 16, 2025 1y ago
CVE-2025-23828	high	7.1/10	WordPress WordPress Data Guard [Website Security] plugin <= 8 - CSRF to Stored XSS vulnerability	Jan 16, 2025 1y ago
CVE-2025-23826	high	7.1/10	WordPress Stop Comment Spam plugin <= 0.5.3 - CSRF to Stored XSS vulnerability	Jan 16, 2025 1y ago
CVE-2025-23833	medium	6.5/10	WordPress Links/Problem Reporter plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability	Jan 16, 2025 1y ago
CVE-2025-23824	medium	6.5/10	WordPress FontAwesome.io ShortCodes plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Jan 16, 2025 1y ago
CVE-2025-23823	high	7.1/10	WordPress CNZZ&51LA for WordPress plugin <= 1.0.1 - CSRF to Stored XSS vulnerability	Jan 16, 2025 1y ago
CVE-2025-23825	medium	6.5/10	WordPress Easy Shortcode Buttons plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability	Jan 16, 2025 1y ago
CVE-2025-23821	high	7.1/10	WordPress WP Cookies Alert plugin <= 1.1.1 - CSRF to Stored XSS vulnerability	Jan 16, 2025 1y ago
CVE-2025-23832	high	7.1/10	WordPress Admin Cleanup plugin <= 1.0.2 - CSRF to Stored XSS vulnerability	Jan 16, 2025 1y ago
CVE-2025-23827	high	7.1/10	WordPress Strx Magic Floating Sidebar Maker plugin <= 1.4.1 - CSRF to Stored XSS vulnerability	Jan 16, 2025 1y ago
CVE-2025-23820	high	7.1/10	WordPress Content Security Policy Pro plugin <= 1.3.5 - CSRF to Stored XSS vulnerability	Jan 16, 2025 1y ago
CVE-2025-23818	high	7.1/10	WordPress More Link Modifier plugin <= 1.0.3 - CSRF to Cross-Site Scripting vulnerability	Jan 16, 2025 1y ago
CVE-2025-23822	high	7.1/10	WordPress Category Custom Fields plugin <= 1.0 - CSRF to Stored XSS vulnerability	Jan 16, 2025 1y ago
CVE-2025-23807	medium	6.5/10	WordPress Spiderpowa Embed PDF plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Jan 16, 2025 1y ago
CVE-2025-23808	high	7.1/10	WordPress Custom List Table Example Plugin <=1.4.1 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability	Jan 16, 2025 1y ago
CVE-2025-23817	high	7.1/10	WordPress MHR-Custom-Anti-Copy plugin <= 2.0 - CSRF to Stored Cross Site Request Forgery (CSRF) vulnerability	Jan 16, 2025 1y ago
CVE-2025-23805	high	7.1/10	WordPress SEOReseller Partner plugin <= 1.3.15 - CSRF to Stored XSS vulnerability	Jan 16, 2025 1y ago
CVE-2025-23810	high	7.1/10	WordPress Len Slider Plugin <= 2.0.11 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability	Jan 16, 2025 1y ago
CVE-2025-23804	high	7.1/10	WordPress WP Service Payment Form With Authorize.net Plugin <= 2.6.0 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability	Jan 16, 2025 1y ago
CVE-2025-23801	high	7.1/10	WordPress Style Admin Plugin <= 1.4.3 - CSRF to Stored XSS vulnerability	Jan 16, 2025 1y ago
CVE-2025-23797	critical	9.8/10	WordPress WP Options Editor plugin <= 1.1 - CSRF to Privilege Escalation vulnerability	Jan 16, 2025 1y ago
CVE-2025-23795	medium	6.5/10	WordPress Easy FAQs plugin <= 3.2.1 - Stored Cross Site Scripting (XSS) vulnerability	Jan 16, 2025 1y ago
CVE-2025-23802	medium	6.5/10	WordPress WP-Revive Adserver Plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability	Jan 16, 2025 1y ago
CVE-2025-23800	high	7.1/10	WordPress OrangeBox plugin <= 3.0.0 - CSRF to Stored XSS vulnerability	Jan 16, 2025 1y ago
CVE-2025-23796	medium	6.5/10	WordPress Easy Portfolio plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerability	Jan 16, 2025 1y ago
CVE-2025-23791	medium	6.5/10	WordPress Horizontal Line Shortcode Plugin <= 1.0 - Stored Cross Site Scripting (XSS) vulnerability	Jan 16, 2025 1y ago