Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

342,993

All time

Critical · Active

11,210

CVSS ≥ 9.0

New · 14 days

3,019

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 9901–9930 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-56282	high	7.5/10	WordPress WPMozo Addons Lite for Elementor plugin <= 1.1.0 - Local File Inclusion vulnerability	Jan 7, 2025 1y ago
CVE-2024-56284	critical	9.3/10	WordPress SSL Wireless SMS Notification Plugin <= 3.5.0 - SQL Injection vulnerability	Jan 7, 2025 1y ago
CVE-2024-56285	medium	6.5/10	WordPress WPBITS Addons For Elementor Page Builder plugin <= 1.5.1 - Cross-Site Scripting vulnerability	Jan 7, 2025 1y ago
CVE-2024-56286	high	7.5/10	WordPress Classic Addons – WPBakery Page Builder plugin <= 3.0 - Local File Inclusion vulnerability	Jan 7, 2025 1y ago
CVE-2024-56288	medium	5.9/10	WordPress WP Docs plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability	Jan 7, 2025 1y ago
CVE-2024-56287	medium	6.5/10	WordPress WP jQuery DataTable Plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerability	Jan 7, 2025 1y ago
CVE-2024-56289	high	7.1/10	WordPress Groundhogg plugin <= 3.7.3.3 - Reflected Cross Site Scripting (XSS) vulnerability	Jan 7, 2025 1y ago
CVE-2024-56290	critical	9.3/10	WordPress Multiple Shipping And Billing Address For Woocommerce Plugin <= 1.2 - Unauthenticated SQL Injection vulnerability	Jan 7, 2025 1y ago
CVE-2024-56291	high	8.1/10	WordPress PlainInventory – Inventory Management Plugin Plugin <= 3.1.6 - PHP Object Injection vulnerability	Jan 7, 2025 1y ago
CVE-2024-56293	medium	5.9/10	WordPress AFI – The Easiest Integration Plugin <= 1.95.0 - Cross Site Scripting (XSS) vulnerability	Jan 7, 2025 1y ago
CVE-2024-56292	medium	5.9/10	WordPress Email Reminders Plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability	Jan 7, 2025 1y ago
CVE-2024-56294	medium	6.4/10	WordPress Nexter Blocks plugin <= 4.0.7 - Broken Access Control vulnerability	Jan 7, 2025 1y ago
CVE-2024-56296	high	7.1/10	WordPress Mang Board WP plugin <= 1.8.4 - Reflected Cross Site Scripting (XSS) vulnerability	Jan 7, 2025 1y ago
CVE-2024-56297	medium	5.9/10	WordPress Highlight plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability	Jan 7, 2025 1y ago
CVE-2024-56299	high	7.1/10	WordPress Notify Odoo plugin <= 1.0.0 - CSRF to Stored XSS vulnerability	Jan 7, 2025 1y ago
CVE-2024-56298	medium	5.9/10	WordPress Pretty Simple Popup Builder Plugin <= 1.0.9 - Stored Cross Site Scripting (XSS) vulnerability	Jan 7, 2025 1y ago
CVE-2024-56300	high	7.5/10	WordPress Post/Page Copying Tool plugin <= 2.0.0 - Sensitive Data Exposure vulnerability	Jan 7, 2025 1y ago
CVE-2025-22261	medium	6.5/10	WordPress WP FullCalendar plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability	Jan 7, 2025 1y ago
CVE-2025-22293	medium	6.5/10	WordPress Gutentor plugin <= 3.4.3 - Cross Site Scripting (XSS) vulnerability	Jan 7, 2025 1y ago
CVE-2025-22298	medium	4.3/10	WordPress Hive Support plugin <= 1.1.6 - Broken Access Control vulnerability	Jan 7, 2025 1y ago
CVE-2025-22297	medium	4.3/10	WordPress AI WP Writer plugin <= 3.8.4.4 - Cross Site Request Forgery (CSRF) vulnerability	Jan 7, 2025 1y ago
CVE-2025-22299	medium	4.3/10	WordPress AI for SEO plugin <= 1.2.9 - Broken Access Control vulnerability	Jan 7, 2025 1y ago
CVE-2025-22300	medium	5.4/10	WordPress PixelYourSite plugin <= 10.0.1.2 - Cross Site Request Forgery (CSRF) vulnerability	Jan 7, 2025 1y ago
CVE-2025-22301	medium	5.4/10	WordPress MyBookTable Bookstore by Stormhill Media plugin <= 3.5.3 - Cross Site Request Forgery (CSRF) vulnerability	Jan 7, 2025 1y ago
CVE-2025-22302	medium	5.3/10	WordPress WP Wand plugin <= 1.2.5 - Broken Access Control vulnerability	Jan 7, 2025 1y ago
CVE-2025-22303	medium	5.3/10	WordPress WP Mailster plugin <= 1.8.17.0 - Sensitive Data Exposure vulnerability	Jan 7, 2025 1y ago
CVE-2025-22305	medium	6.5/10	WordPress Hero Banner Ultimate plugin <= 1.4.4 - Local File Inclusion vulnerability	Jan 7, 2025 1y ago
CVE-2025-22304	medium	4.3/10	WordPress WP Visitor Statistics plugin <= 7.5 - Broken Access Control vulnerability	Jan 7, 2025 1y ago
CVE-2025-22308	medium	6.5/10	WordPress Smart Custom FIelds plugin <= 5.0.0 - Cross Site Scripting (XSS) vulnerability	Jan 7, 2025 1y ago
CVE-2025-22309	medium	6.5/10	WordPress SpeakOut! Email Petitions plugin <= 4.4.2 - Cross Site Scripting (XSS) vulnerability	Jan 7, 2025 1y ago