Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,456

All time

Critical · Active

12,228

CVSS ≥ 9.0

New · 14 days

3,105

Newly disclosed

Feed last synced

58 mins ago

Data freshness

Showing 10381–10410 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-37473	medium	4.3/10	WordPress Trendy News theme <= 1.0.15 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37469	medium	5.4/10	WordPress Blocksy theme <= 1.9.5 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37467	medium	4.3/10	WordPress Hestia theme <= 3.1.2 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37458	medium	4.3/10	WordPress Highlight theme <= 1.0.29 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37451	medium	4.3/10	WordPress Travel Agency theme <= 1.4.9 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37450	medium	4.3/10	WordPress Benevolent theme <= 1.3.4 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37448	medium	4.3/10	WordPress OnePress theme <= 2.3.6 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37441	medium	4.3/10	WordPress NewsMash theme <= 1.0.34 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37435	medium	4.3/10	WordPress Perfect Portfolio theme <= 1.2.0 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37431	medium	4.3/10	WordPress Mesmerize theme <= 1.6.120 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37426	medium	4.3/10	WordPress Elegant Pink theme 1.3.0 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37421	medium	4.3/10	WordPress JobScout theme <= 1.1.4 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37417	medium	4.3/10	WordPress Coachify theme <= 1.0.7 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37413	medium	4.3/10	WordPress Preschool and Kindergarten theme <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37412	medium	4.3/10	WordPress Blossom Shop theme <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37274	medium	4.3/10	WordPress WP Mobile Menu plugin <= 2.8.4.3 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37272	medium	4.3/10	WordPress Travel Monster theme <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37243	medium	4.3/10	WordPress Vandana Lite theme <= 1.1.9 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37242	medium	4.3/10	WordPress Newspack Newsletters plugin <= 2.13.2 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37240	medium	4.3/10	WordPress Falang multilanguage for WordPress plugin <= 1.3.51 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37238	medium	4.3/10	WordPress WPAdverts plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37236	medium	4.3/10	WordPress Loco Translate plugin <= 2.6.9 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37235	medium	4.3/10	WordPress Groundhogg plugin <= 3.4.2.3 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37104	medium	4.3/10	WordPress Chic Lite theme <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37103	medium	4.3/10	WordPress Education Zone theme <= 1.3.4 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37102	medium	4.3/10	WordPress Vilva theme <= 1.2.2 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37093	medium	4.3/10	WordPress MasterStudy LMS plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2023-47693	high	7.5/10	WordPress Ultimate Addons for Contact Form 7 plugin <= 3.2.6 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-47692	medium	4.3/10	WordPress Flo Forms plugin <= 1.0.41 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-47689	medium	6.5/10	WordPress Animator plugin <= 3.0.10 - Unauthenticated Plugin Settings Change Vulnerability	Jan 2, 2025 1y ago