Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

343,048

All time

Critical · Active

11,217

CVSS ≥ 9.0

New · 14 days

3,010

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 10171–10200 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-55995	medium	6.5/10	WordPress Torod plugin <= 1.7 - Settings Change vulnerability	Dec 31, 2024 1y ago
CVE-2024-56002	medium	6.4/10	WordPress Contact Form, Survey & Form Builder – MightyForms plugin <= 1.3.9 - Broken Access Control vulnerability	Dec 31, 2024 1y ago
CVE-2024-56070	high	7.4/10	WordPress WP SuperBackup plugin <= 2.3.3 - Multiple Subscriber+ Broken Access Control vulnerabilities	Dec 31, 2024 1y ago
CVE-2024-56207	high	8.8/10	WordPress EditionGuard for WooCommerce – eBook Sales with DRM plugin <= 3.4.2 - CSRF to Privilege Escalation vulnerability	Dec 31, 2024 1y ago
CVE-2024-56206	high	8.8/10	WordPress gap-hub-user-role. plugin <= 3.4.1 - CSRF to Broken Authentication vulnerability	Dec 31, 2024 1y ago
CVE-2024-56204	high	8.8/10	WordPress Sinking Dropdowns plugin <= 1.25 - CSRF to Privilege Escalation vulnerability	Dec 31, 2024 1y ago
CVE-2024-56203	high	8.8/10	WordPress Wayne Audio Player plugin <= 1.0 - CSRF to Privilege Escalation vulnerability	Dec 31, 2024 1y ago
CVE-2024-56066	critical	9.8/10	WordPress Agency Toolkit plugin <= 1.0.23 - Privilege Escalation vulnerability	Dec 31, 2024 1y ago
CVE-2024-56061	high	8.8/10	WordPress RepairBuddy plugin <= 3.8119 - Account Takeover vulnerability	Dec 31, 2024 1y ago
CVE-2024-56045	critical	9.3/10	WordPress WPLMS plugin < 1.9.9.5 - Unauthenticated Arbitrary Directory Deletion vulnerability	Dec 31, 2024 1y ago
CVE-2024-56044	critical	9.8/10	WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary User Token Generation vulnerability	Dec 31, 2024 1y ago
CVE-2024-56043	critical	9.8/10	WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Privilege Escalation vulnerability	Dec 31, 2024 1y ago
CVE-2024-56040	critical	9.8/10	WordPress VibeBP plugin <= 1.9.9.4.1 - Unauthenticated Privilege Escalation vulnerability	Dec 31, 2024 1y ago
CVE-2024-56042	critical	9.3/10	WordPress WPLMS plugin < 1.9.9.5.3 - Unauthenticated SQL Injection vulnerability	Dec 31, 2024 1y ago
CVE-2024-56041	high	8.5/10	WordPress VibeBP plugin < 1.9.9.5.1 - SQL Injection vulnerability	Dec 31, 2024 1y ago
CVE-2024-56039	critical	9.3/10	WordPress VibeBP plugin < 1.9.9.7.7 - Unauthenticated SQL Injection vulnerability	Dec 31, 2024 1y ago
CVE-2024-56064	critical	10.0/10	WordPress WP SuperBackup plugin <= 2.3.3 - Unauthenticated Arbitrary File Upload vulnerability	Dec 31, 2024 1y ago
CVE-2024-56046	critical	10.0/10	WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary File Upload vulnerability	Dec 31, 2024 1y ago
CVE-2024-56068	high	7.5/10	WordPress WP SuperBackup plugin <= 2.3.3 - Subscriber+ PHP Object Injection vulnerability	Dec 31, 2024 1y ago
CVE-2024-55991	medium	6.5/10	WordPress CRM Plugin – WP-CRM System plugin <= 3.2.9.1 - Broken Access Control vulnerability	Dec 31, 2024 1y ago
CVE-2024-56031	medium	6.5/10	WordPress Smart Shopify Product plugin <= 1.0.2 - Arbitrary Content Deletion vulnerability	Dec 31, 2024 1y ago
CVE-2024-56067	high	7.5/10	WordPress WP SuperBackup plugin <= 2.3.3 - Unauthenticated Backup File Download Vulnerability	Dec 31, 2024 1y ago
CVE-2023-48775	medium	5.3/10	WordPress WP CleanFix plugin <= 5.6.2 - Broken Access Control vulnerability	Dec 31, 2024 1y ago
CVE-2023-50850	medium	4.3/10	WordPress Woo Subscriptions plugin < 5.8.0 - Broken Access Control vulnerability	Dec 31, 2024 1y ago
CVE-2024-56071	critical	9.8/10	WordPress Simple Dashboard plugin <= 2.0 - Privilege Escalation vulnerability	Dec 31, 2024 1y ago
CVE-2024-56205	critical	9.8/10	WordPress AI Magic – SEO Content Generator & Article Writer plugin <= 1.0.4 - Privilege Escalation vulnerability	Dec 31, 2024 1y ago
CVE-2024-56209	high	7.1/10	WordPress Kleo theme < 5.4.4 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 31, 2024 1y ago
CVE-2024-56210	high	7.1/10	WordPress UserPro plugin <= 5.1.9 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 31, 2024 1y ago
CVE-2024-56221	medium	6.5/10	WordPress WPMozo Addons Lite for Elementor plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability	Dec 31, 2024 1y ago
CVE-2024-56223	high	7.1/10	WordPress Gulri Slider plugin <= 3.5.8 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 31, 2024 1y ago