Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,456

All time

Critical · Active

12,228

CVSS ≥ 9.0

New · 14 days

3,105

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 10441–10470 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-46605	medium	5.3/10	WordPress Convertful – Your Ultimate On-Site Conversion Tool plugin <= 2.5 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-46309	medium	5.3/10	WordPress wpDiscuz plugin <= 7.6.10 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-46206	medium	5.3/10	WordPress MW WP Form plugin <= 4.4.5 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-46203	medium	4.3/10	WordPress Just Custom Fields plugin <= 3.3.2 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-46196	medium	4.3/10	WordPress Social proof testimonials and reviews by Repuso plugin <= 4.97 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-46195	medium	6.5/10	WordPress Headline Analyzer plugin <= 1.3.1 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-46188	medium	4.3/10	WordPress Freesoul Deactivate Plugins plugin <= 2.1.3 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-46083	medium	5.3/10	WordPress Kali Forms plugin <= 2.3.27 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-46082	medium	5.3/10	WordPress Broken Link Checker \| Finder plugin <= 2.4.2 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-46080	medium	4.3/10	WordPress ApplyOnline – Application Form Builder and Manager plugin <= 2.5.3 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-46079	medium	5.4/10	WordPress Ashe Extra plugin <= 1.2.9 - Broken Access Control + CSRF vulnerability	Jan 2, 2025 1y ago
CVE-2023-46073	medium	5.3/10	WordPress DX Delete Attached Media plugin <= 2.0.5.1 - Broken Access Control vulnerability + CSRF	Jan 2, 2025 1y ago
CVE-2023-45828	medium	5.4/10	WordPress RumbleTalk Live Group Chat plugin <= 6.2.5 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-45766	medium	5.3/10	WordPress Poll Maker plugin <= 4.7.1 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-45765	medium	4.3/10	WordPress WP ERP plugin <= 1.12.6 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-45760	medium	4.3/10	WordPress wpDiscuz plugin <= 7.6.3 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-45649	medium	5.3/10	WordPress Appointment Hour Booking plugin <= 1.4.23 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-45636	medium	5.4/10	WordPress Backup & Migration plugin <= 1.4.1 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-45631	medium	4.3/10	WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-45275	medium	6.5/10	WordPress Contact Form builder with drag & drop plugin <= 2.3.28 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-45271	medium	4.3/10	WordPress ProductX – Gutenberg WooCommerce Blocks plugin <= 2.7.8 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-45110	medium	4.3/10	WordPress Bold Timeline Lite plugin <= 1.1.9 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-45104	high	7.3/10	WordPress BetterLinks plugin <= 1.6.0 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-45101	medium	4.3/10	WordPress Customer Reviews for WooCommerce plugin <= 5.36.0 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-45061	medium	5.3/10	WordPress WP Job Openings plugin <= 3.4.1 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-45045	medium	5.4/10	WordPress WP Custom Widget area plugin <= 1.2.5 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-45002	medium	4.3/10	WordPress WP User Frontend plugin <= 3.6.8 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-44988	medium	4.3/10	WordPress WP Custom Admin Interface plugin <= 7.32 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-44258	medium	5.3/10	WordPress Schema App Structured Data plugin <= 1.23.1 - Broken Access Control + CSRF vulnerability	Jan 2, 2025 1y ago
CVE-2024-56027	high	7.1/10	WordPress Leads CRM plugin <= 2.0.13 - Reflected Cross Site Scripting (XSS) vulnerability	Jan 2, 2025 1y ago