Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

343,139

All time

Critical · Active

11,233

CVSS ≥ 9.0

New · 14 days

3,038

Newly disclosed

Feed last synced

27 mins ago

Data freshness

Showing 10291–10320 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-54368	critical	9.6/10	WordPress GitSync plugin <= 1.1.0 - CSRF to Remote Code Execution vulnerability	Dec 16, 2024 1y ago
CVE-2024-54367	critical	9.8/10	WordPress ForumWP plugin <= 2.1.0 - PHP Object Injection vulnerability	Dec 16, 2024 1y ago
CVE-2024-54370	critical	9.9/10	WordPress Video & Photo Gallery for Ultimate Member plugin <= 1.1.0 - Arbitrary File Upload vulnerability	Dec 16, 2024 1y ago
CVE-2024-54369	critical	9.1/10	WordPress Zita Site Builder plugin <= 1.0.2 - Arbitrary Plugin Installation and Activation vulnerability	Dec 16, 2024 1y ago
CVE-2024-54374	high	7.5/10	WordPress Sogrid plugin <= 1.5.6 - Local File Inclusion vulnerability	Dec 16, 2024 1y ago
CVE-2024-54378	high	8.8/10	WordPress Quietly Insights plugin <= 1.2.2 - Arbitrary Option Update to Privilege Escalation vulnerability	Dec 16, 2024 1y ago
CVE-2024-54375	high	7.5/10	WordPress Woolook plugin <= 1.7.0 - Local File Inclusion vulnerability	Dec 16, 2024 1y ago
CVE-2024-54380	high	7.5/10	WordPress WP Cookies Enabler plugin <= 1.0.1 - Local File Inclusion vulnerability	Dec 16, 2024 1y ago
CVE-2024-54379	high	8.8/10	WordPress Minterpress plugin <= 1.0.5 - Arbitrary Option Update to Privilege Escalation vulnerability	Dec 16, 2024 1y ago
CVE-2024-54385	high	7.2/10	WordPress Radio Player plugin <= 2.0.83 - Server Side Request Forgery (SSRF) vulnerability	Dec 16, 2024 1y ago
CVE-2024-54382	medium	4.9/10	WordPress Bold Page Builder plugin <= 5.1.5 - Path Traversal vulnerability	Dec 16, 2024 1y ago
CVE-2024-54387	high	7.1/10	WordPress Posts Date Ranges plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 16, 2024 1y ago
CVE-2024-54395	high	7.1/10	WordPress Increase Sociability plugin <= 1.3.0 - Reflected Cross Site Request Forgery (CSRF) vulnerability	Dec 16, 2024 1y ago
CVE-2024-54390	high	7.1/10	WordPress TagGator plugin <= 1.54 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 16, 2024 1y ago
CVE-2024-54406	high	7.1/10	WordPress Comments On Feed plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 16, 2024 1y ago
CVE-2024-54403	high	7.1/10	WordPress Visual Recent Posts plugin <= 1.2.3 - Reflected Cross Site Request Forgery (CSRF) vulnerability	Dec 16, 2024 1y ago
CVE-2024-54422	high	7.1/10	WordPress Evernote Sync plugin <= 3.0.0 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 16, 2024 1y ago
CVE-2024-55973	high	8.5/10	WordPress TSB Occasion Editor plugin <= 1.2.1 - SQL Injection vulnerability	Dec 16, 2024 1y ago
CVE-2024-55972	critical	9.3/10	WordPress eTemplates plugin <= 0.2.1 - SQL Injection vulnerability	Dec 16, 2024 1y ago
CVE-2024-55974	high	8.5/10	WordPress Mimoos plugin <= 1.2 - SQL Injection vulnerability	Dec 16, 2024 1y ago
CVE-2024-55977	critical	9.3/10	WordPress LaunchPage.app Importer plugin <= 1.1 - SQL Injection vulnerability	Dec 16, 2024 1y ago
CVE-2024-55976	critical	9.3/10	WordPress Critical Site Intel plugin <= 1.0 - SQL Injection vulnerability	Dec 16, 2024 1y ago
CVE-2024-55978	critical	9.3/10	WordPress Code Generator Pro plugin <= 1.2 - SQL Injection vulnerability	Dec 16, 2024 1y ago
CVE-2024-55980	critical	9.3/10	WordPress Wr Age Verification plugin <= 2.0.0 - SQL Injection vulnerability	Dec 16, 2024 1y ago
CVE-2024-55979	high	8.5/10	WordPress Wr Age Verification plugin <= 2.0.0 - SQL Injection vulnerability	Dec 16, 2024 1y ago
CVE-2024-55982	critical	9.3/10	WordPress Share Buttons – Social Media plugin <= 1.0.2 - SQL Injection vulnerability	Dec 16, 2024 1y ago
CVE-2024-55981	critical	9.3/10	WordPress Nabz Image Gallery plugin <= v1.00 - SQL Injection vulnerability	Dec 16, 2024 1y ago
CVE-2024-55986	high	8.5/10	WordPress Service plugin <= 1.0.4 - SQL Injection vulnerability	Dec 16, 2024 1y ago
CVE-2024-55988	critical	9.3/10	WordPress Navayan CSV Export Plugin <= 1.0.9 - SQL Injection vulnerability	Dec 16, 2024 1y ago
CVE-2024-55987	high	8.5/10	WordPress Advanced What should we write next about plugin <= 1.0.3 - SQL Injection vulnerability	Dec 16, 2024 1y ago