Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

342,981

All time

Critical · Active

11,210

CVSS ≥ 9.0

New · 14 days

3,014

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 9721–9750 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-22798	medium	6.5/10	WordPress Responsive jQuery Slider plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability	Jan 15, 2025 1y ago
CVE-2025-22797	medium	6.5/10	WordPress Gallery and Lightbox plugin <= 1.0.14 - Cross Site Scripting (XSS) vulnerability	Jan 15, 2025 1y ago
CVE-2025-22799	high	8.5/10	WordPress Neon Product Designer Plugin <= 2.2.0 - SQL Injection vulnerability	Jan 15, 2025 1y ago
CVE-2024-56301	high	7.1/10	WordPress Distance Based Shipping Calculator Plugin <= 2.0.21 - Reflected Cross Site Scripting (XSS) vulnerability	Jan 13, 2025 1y ago
CVE-2024-56065	high	7.1/10	WordPress WP2LEADS Plugin <= 3.4.2 - Reflected Cross Site Scripting (XSS) vulnerability	Jan 13, 2025 1y ago
CVE-2025-22800	medium	4.3/10	WordPress Post SMTP plugin <= 2.9.11 - Broken Access Control vulnerability	Jan 13, 2025 1y ago
CVE-2025-22314	high	7.1/10	WordPress Food Store plugin <= 1.5.4 - Reflected Cross Site Scripting (XSS) vulnerability	Jan 13, 2025 1y ago
CVE-2025-22337	high	7.1/10	WordPress Order Audit Log for WooCommerce plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability	Jan 13, 2025 1y ago
CVE-2025-22498	high	7.1/10	WordPress LucidLMS plugin <= 1.0.5 - Reflected Cross Site Scripting (XSS) vulnerability	Jan 13, 2025 1y ago
CVE-2025-22344	high	7.1/10	WordPress Media Category Library plugin <= 2.7 - Reflected Cross Site Scripting (XSS) vulnerability	Jan 13, 2025 1y ago
CVE-2025-22506	high	7.1/10	WordPress Smart Agenda Plugin <= 4.7 - CSRF to Stored XSS vulnerability	Jan 13, 2025 1y ago
CVE-2025-22499	high	7.1/10	WordPress F4 Post Tree Plugin <= 1.1.18 - Reflected Cross Site Scripting (XSS) vulnerability	Jan 13, 2025 1y ago
CVE-2025-22567	high	7.1/10	WordPress TRUSTist REVIEWer Plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability	Jan 13, 2025 1y ago
CVE-2025-22514	high	7.1/10	WordPress Axact Author List Widget Plugin <= 3.1.1 - Reflected Cross Site Scripting (XSS) vulnerability	Jan 13, 2025 1y ago
CVE-2025-22568	high	7.1/10	WordPress Post And Page Reactions Plugin <= 1.0.5 - Reflected Cross Site Scripting (XSS) vulnerability	Jan 13, 2025 1y ago
CVE-2025-22570	high	7.1/10	WordPress Inline Tweets plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability	Jan 13, 2025 1y ago
CVE-2025-22569	high	7.1/10	WordPress Featured Page Widget Plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability	Jan 13, 2025 1y ago
CVE-2025-22583	high	7.1/10	WordPress Scan External Links Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability	Jan 13, 2025 1y ago
CVE-2025-22576	high	7.1/10	WordPress Site PIN Plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability	Jan 13, 2025 1y ago
CVE-2025-22588	high	7.1/10	WordPress Scanventory Plugin <= 1.1.3 - Reflected Cross Site Scripting (XSS) vulnerability	Jan 13, 2025 1y ago
CVE-2025-22586	high	7.1/10	WordPress WPEX Replace DB Urls Plugin <= 0.4.0 - Reflected Cross Site Scripting (XSS) vulnerability	Jan 13, 2025 1y ago
CVE-2025-22777	critical	9.8/10	WordPress GiveWP Plugin <= 3.19.3 - PHP Object Injection vulnerability	Jan 13, 2025 1y ago
CVE-2024-12412	medium	6.1/10	Rental and Booking Manager for Bike, Car, Dress, Resort with WooCommerce Integration – WpRently \| WordPress plugin <= 2.2.1 - Reflected Cross-Site Scripting	Jan 11, 2025 1y ago
CVE-2024-12473	medium	6.5/10	AI Scribe – SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) <= 2.5 - Authenticated (Contributor+) SQL Injection	Jan 10, 2025 1y ago
CVE-2024-12606	medium	4.3/10	AI Scribe – SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) <= 2.5 - Missing Authorization to Authenticated (Subscriber+) Settings Update	Jan 10, 2025 1y ago
CVE-2025-22295	high	7.1/10	WordPress Tripetto plugin <= 8.0.6 - Cross Site Scripting (XSS) vulnerability	Jan 9, 2025 1y ago
CVE-2025-22313	high	7.1/10	WordPress Widgetize Pages Light plugin <= 3.0 - Reflected Cross Site Scripting (XSS) vulnerability	Jan 9, 2025 1y ago
CVE-2025-22307	high	7.1/10	WordPress Product Table for WooCommerce plugin <= 4.0.3 - Reflected Cross Site Scripting (XSS) vulnerability	Jan 9, 2025 1y ago
CVE-2025-22331	high	7.1/10	WordPress Cf7Save Extension plugin <= 1 - Reflected Cross Site Scripting (XSS) vulnerability	Jan 9, 2025 1y ago
CVE-2025-22330	high	7.1/10	WordPress MG Parallax Slider plugin <= 1.0. - Reflected Cross Site Scripting (XSS) vulnerability	Jan 9, 2025 1y ago