Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

343,099

All time

Critical · Active

11,230

CVSS ≥ 9.0

New · 14 days

3,010

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 10261–10290 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-54270	high	8.1/10	WordPress Axeptio plugin <= 2.5.4 - Local File Inclusion vulnerability	Dec 18, 2024 1y ago
CVE-2024-56059	critical	9.8/10	WordPress Partners plugin <= 0.2.0 - PHP Object Injection vulnerability	Dec 18, 2024 1y ago
CVE-2024-56008	high	7.5/10	WordPress Spreadr Woocommerce plugin <= 1.0.4 - Arbitrary Content Deletion vulnerability	Dec 18, 2024 1y ago
CVE-2024-12259	high	8.8/10	CRM WordPress Plugin – RepairBuddy <= 3.8120 - Missing Authorization to Account Takeover/Privilege Escalation	Dec 18, 2024 1y ago
CVE-2024-12127	medium	6.1/10	Learning Management System, eLearning, Course Builder, WordPress LMS Plugin – Sikshya LMS <= 0.0.21 - Reflected Cross-Site Scripting via page Parameter	Dec 17, 2024 1y ago
CVE-2024-12443	medium	6.4/10	CRM Perks – WordPress HelpDesk Integration – Zendesk, Freshdesk, HelpScout <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting	Dec 16, 2024 1y ago
CVE-2024-56017	high	7.1/10	WordPress Stop Registration Spam Plugin <= 1.23 - CSRF to Stored XSS vulnerability	Dec 16, 2024 1y ago
CVE-2024-54357	medium	4.3/10	WordPress Avada theme <= 7.11.10 - Cross Site Request Forgery (CSRF) vulnerability	Dec 16, 2024 1y ago
CVE-2024-54376	high	7.5/10	WordPress EazyDocs plugin <= 2.8.0 - Local File Inclusion vulnerability	Dec 16, 2024 1y ago
CVE-2024-56003	medium	4.3/10	WordPress Caldera SMTP Mailer plugin <= 1.0.1 - Broken Access Control vulnerability	Dec 16, 2024 1y ago
CVE-2024-55999	medium	5.3/10	WordPress XML Multilanguage Sitemap Generator plugin <= 2.0.6 - Broken Access Control vulnerability	Dec 16, 2024 1y ago
CVE-2024-54348	medium	6.5/10	WordPress Brandy theme <= 1.1.6 - Cross Site Scripting (XSS) vulnerability	Dec 16, 2024 1y ago
CVE-2024-54285	critical	9.1/10	WordPress SeedProd Pro plugin <= 6.18.10 - Remote Code Execution (RCE) vulnerability	Dec 16, 2024 1y ago
CVE-2024-54284	high	7.6/10	WordPress SeedProd Pro plugin <= 6.18.10 - SQL Injection vulnerability	Dec 16, 2024 1y ago
CVE-2024-54283	high	7.6/10	WordPress SeedProd Pro plugin <= 6.18.10 - SQL Injection vulnerability	Dec 16, 2024 1y ago
CVE-2024-54280	critical	9.3/10	WordPress WPBookit plugin <= 1.6.0 - SQL Injection vulnerability	Dec 16, 2024 1y ago
CVE-2024-54279	high	7.5/10	WordPress WP-NERD Toolkit plugin <= 1.1 - Sensitive Data Exposure vulnerability	Dec 16, 2024 1y ago
CVE-2024-54257	high	7.1/10	WordPress tydskrif theme <= 1.1.3 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 16, 2024 1y ago
CVE-2024-54249	high	7.1/10	WordPress Advanced Options Editor plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 16, 2024 1y ago
CVE-2024-43234	critical	9.8/10	WordPress Woffice theme <= 5.4.14 - Unauthenticated Account Takeover vulnerability	Dec 16, 2024 1y ago
CVE-2024-54229	critical	9.8/10	WordPress SV100 Companion plugin <= 2.0.02 - Privilege Escalation vulnerability	Dec 16, 2024 1y ago
CVE-2024-37251	medium	4.3/10	WordPress Advanced Custom Fields Pro plugin < 6.3.2 - Cross-Site Request Forgery (CSRF) vulnerability	Dec 16, 2024 1y ago
CVE-2024-56015	high	7.1/10	WordPress Tidy Up Plugin <= 1.3 - CSRF to Reflected Cross-Site Scripting vulnerability	Dec 16, 2024 1y ago
CVE-2024-54358	high	7.1/10	WordPress 3D Avatar User Profile plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 16, 2024 1y ago
CVE-2024-54354	medium	6.5/10	WordPress Termin-Kalender plugin <= 0.99.47 - Broken Access Control vulnerability	Dec 16, 2024 1y ago
CVE-2024-54361	critical	9.3/10	WordPress Instant Appointment plugin <= 1.2 - SQL Injection vulnerability	Dec 16, 2024 1y ago
CVE-2024-54359	high	8.2/10	WordPress Banner System plugin <= 1.0.0 - Broken Access Control vulnerability	Dec 16, 2024 1y ago
CVE-2024-54364	high	7.1/10	WordPress Feedpress Generator plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 16, 2024 1y ago
CVE-2024-54363	critical	9.8/10	WordPress Wp NssUser Register plugin <= 1.0.0 - Privilege Escalation vulnerability	Dec 16, 2024 1y ago
CVE-2024-54365	high	8.8/10	WordPress KH Easy User Settings plugin <= 1.0.0 - Privilege Escalation vulnerability	Dec 16, 2024 1y ago