Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

343,210

All time

Critical · Active

11,237

CVSS ≥ 9.0

New · 14 days

3,042

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 10561–10590 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-36680	medium	5.4/10	WordPress Image Regenerate & Select Crop plugin <= 7.1.0 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-36531	medium	4.3/10	WordPress LiquidPoll plugin <= 3.3.68 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-36528	medium	5.3/10	WordPress kk Star Ratings plugin <= 5.4.3 - Rate Manipulation due to IP Spoofing Vulnerability	Dec 13, 2024 1y ago
CVE-2023-36526	medium	5.4/10	WordPress Duplicate Post Page Menu & Custom Post Type plugin <= 2.4.1 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-36519	medium	5.4/10	WordPress SW Product Bundles plugin <= 2.0.15 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-36518	medium	4.3/10	WordPress Post Hit Counter plugin <= 1.3.2 - Broken Access Control	Dec 13, 2024 1y ago
CVE-2023-36510	high	7.3/10	WordPress ReDi Restaurant Reservation plugin <= 23.0211 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-36509	medium	5.4/10	WordPress CHP Ads Block Detector plugin <= 3.9.5 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-36506	medium	5.3/10	WordPress YITH WooCommerce Waitlist plugin <= 2.13.0 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-35875	medium	5.3/10	WordPress Gutenverse – Gutenberg Blocks – Page Builder for Site Editor plugin <= 1.8.5 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-35777	medium	5.3/10	WordPress The Events Calendar plugin <= 6.1.2.2 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-35052	medium	4.3/10	WordPress Directorist plugin <= 7.5.4 - Arbitrary Content Deletion vulnerability	Dec 13, 2024 1y ago
CVE-2023-35051	medium	5.4/10	WordPress Contact Forms by Cimatti plugin <= 1.5.7 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-35046	medium	5.4/10	WordPress Dynamic Visibility for Elementor plugin <= 5.0.5 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-35037	high	7.6/10	WordPress Surfer plugin <= 1.3.2.357 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-34387	medium	4.3/10	WordPress Constant Contact Forms plugin <= 2.0.3 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-34381	medium	5.3/10	WordPress Zippy plugin <= 1.6.2 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-34376	medium	5.4/10	WordPress Change WooCommerce Add To Cart Button Text plugin <= 1.3 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-34019	medium	6.5/10	WordPress Uncanny Toolkit for LearnDash plugin <= 3.6.4.3 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-34014	medium	5.4/10	WordPress Grid Plus plugin <= 1.3.2 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-34009	medium	4.3/10	WordPress Social Media Share Buttons & Social Sharing Icons plugin <= 2.8.1 - Broken Access Control + CSRF	Dec 13, 2024 1y ago
CVE-2023-33998	medium	4.3/10	WordPress Easy Social Icons plugin <= 3.2.5 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-33996	high	8.8/10	WordPress Spam protection, AntiSpam, FireWall by CleanTalk plugin <= 6.10 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-33995	medium	4.3/10	WordPress Photo Gallery by 10Web plugin <= 1.8.15 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-33994	medium	6.5/10	WordPress Slimstat Analytics plugin <= 5.0.5.1 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-33928	medium	4.3/10	WordPress WordPress Backup & Migration plugin <= 1.4.0 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-33324	medium	6.5/10	WordPress Easy Captcha plugin <= 1.0 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-33215	medium	5.4/10	WordPress Taggbox plugin <= 3.3 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-32963	medium	5.3/10	WordPress Predictive Search for WooCommerce plugin <= 5.8.0 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-32798	medium	5.3/10	WordPress Simple Page Ordering plugin <= 2.5.0 - Broken Access Control vulnerability	Dec 13, 2024 1y ago