Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

343,082

All time

Critical · Active

11,227

CVSS ≥ 9.0

New · 14 days

3,018

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 10231–10260 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-12100	medium	6.1/10	Bitcoin Lightning Publisher for WordPress <= 1.4.1 - Reflected Cross-Site Scripting	Dec 24, 2024 1y ago
CVE-2024-12771	high	8.8/10	eCommerce Product Catalog Plugin for WordPress <= 3.3.43 - Cross-Site Request Forgery to Password Reset	Dec 21, 2024 1y ago
CVE-2024-12506	medium	6.4/10	NACC WordPress Plugin <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting	Dec 20, 2024 1y ago
CVE-2024-11784	medium	6.4/10	Sell Tickets Online – TicketSource Ticket Shop for WordPress <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting	Dec 20, 2024 1y ago
CVE-2024-11297	medium	5.3/10	Page Restriction WordPress (WP) – Protect WP Pages/Post <= 1.3.6 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure	Dec 20, 2024 1y ago
CVE-2024-37962	medium	6.5/10	WordPress Fusion Page Builder plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability	Dec 19, 2024 1y ago
CVE-2024-56047	high	8.5/10	WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ SQL Injection vulnerability	Dec 18, 2024 1y ago
CVE-2024-56053	high	7.6/10	WordPress WPLMS plugin < 1.9.9.5.3 - Instructor+ SQL Injection vulnerability	Dec 18, 2024 1y ago
CVE-2024-56048	high	8.8/10	WordPress WPLMS plugin <= 1.9.9 - Arbitrary Option Update to Privilege Escalation vulnerability	Dec 18, 2024 1y ago
CVE-2024-56050	critical	9.9/10	WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ Arbitrary File Upload vulnerability	Dec 18, 2024 1y ago
CVE-2024-56052	critical	9.9/10	WordPress WPLMS plugin < 1.9.9.5.2 - Student+ Arbitrary File Upload vulnerability	Dec 18, 2024 1y ago
CVE-2024-56054	critical	9.1/10	WordPress WPLMS plugin < 1.9.9.5.2 - Instructor+ Arbitrary File Upload vulnerability	Dec 18, 2024 1y ago
CVE-2024-56057	critical	9.9/10	WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary File Upload vulnerability	Dec 18, 2024 1y ago
CVE-2024-54381	high	7.1/10	WordPress Advance Menu Manager plugin <= 3.1.1 - Settings Change vulnerability	Dec 18, 2024 1y ago
CVE-2024-54383	critical	9.8/10	WordPress WooCommerce - PDF Vouchers plugin < 4.9.9 - Broken Authentication vulnerability	Dec 18, 2024 1y ago
CVE-2024-56049	high	8.5/10	WordPress WPLMS plugin < 1.9.9.5.2 - Subscriber+ Arbitrary File Deletion vulnerability	Dec 18, 2024 1y ago
CVE-2024-56055	high	8.5/10	WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary Directory Deletion vulnerability	Dec 18, 2024 1y ago
CVE-2024-56051	high	8.5/10	WordPress WPLMS plugin < 1.9.9.5 - Student+ Remote Code Execution (RCE) vulnerability	Dec 18, 2024 1y ago
CVE-2024-52485	medium	6.5/10	WordPress WP Menu Image plugin <= 2.2 - Broken Access Control vulnerability	Dec 18, 2024 1y ago
CVE-2024-55997	medium	6.5/10	WordPress Order Delivery & Pickup Location Date Time plugin <= 1.1.0 - Settings Change vulnerability	Dec 18, 2024 1y ago
CVE-2024-51646	high	7.1/10	WordPress Saoshyant Element plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 18, 2024 1y ago
CVE-2024-49677	high	7.1/10	WordPress Bootstrap Buttons plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 18, 2024 1y ago
CVE-2024-56010	high	7.1/10	WordPress Device Detector Plugin <= 4.2.0 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 18, 2024 1y ago
CVE-2024-54350	high	7.1/10	WordPress hmd theme <= 2.0 - Cross Site Scripting (XSS) vulnerability	Dec 18, 2024 1y ago
CVE-2024-56016	high	7.1/10	WordPress Image Mapper plugin <= 0.2.5.3 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 18, 2024 1y ago
CVE-2024-55975	high	8.5/10	WordPress Dr Affiliate plugin <= 1.2.3 - SQL Injection vulnerability	Dec 18, 2024 1y ago
CVE-2024-55984	high	8.5/10	WordPress Saksh Escrow System plugin <= 2.4 - SQL Injection vulnerability	Dec 18, 2024 1y ago
CVE-2024-55983	high	8.5/10	WordPress PowerFormBuilder plugin <= 1.0.6 - SQL Injection vulnerability	Dec 18, 2024 1y ago
CVE-2024-55985	high	8.5/10	WordPress YDS Support Ticket System plugin <= 1.0 - SQL Injection vulnerability	Dec 18, 2024 1y ago
CVE-2024-56058	critical	9.8/10	WordPress VRPConnector plugin <= 2.0.1 - PHP Object Injection vulnerability	Dec 18, 2024 1y ago