Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

343,226

All time

Critical · Active

11,239

CVSS ≥ 9.0

New · 14 days

3,041

Newly disclosed

Feed last synced

50 mins ago

Data freshness

Showing 10711–10740 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-29422	medium	4.3/10	WordPress Dynamics 365 Integration plugin <= 1.3.13 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-29429	medium	5.3/10	WordPress User Registration plugin <= 2.3.2.1 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-29431	medium	4.3/10	WordPress qTranslate X Cleanup and WPML Import plugin <= 3.0.1 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-29433	medium	5.4/10	WordPress tencentcloud-cos plugin <= 1.0.7 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-30479	medium	5.3/10	WordPress Stamped.io Product Reviews & UGC for WooCommerce plugin <= 2.3.2 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-30476	medium	4.3/10	WordPress Blogger Buzz theme <= 1.2.2 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-30486	medium	4.3/10	WordPress Square theme <= 2.0.0 - Broken Access Control	Dec 9, 2024 1y ago
CVE-2023-30488	medium	5.3/10	WordPress Featured Post Creative plugin <= 1.2.7 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-30748	medium	4.3/10	WordPress Easy Appointments plugin <= 3.10.7 - Auth. Stored Cross-Site Scripting (XSS) vulnerability	Dec 9, 2024 1y ago
CVE-2023-30870	medium	6.5/10	WordPress Sharkdropship for AliExpress Dropship and Affiliate plugin <= 2.2.3 - Multiple Broken Access Control vulnerabilities	Dec 9, 2024 1y ago
CVE-2023-30783	medium	4.3/10	WordPress Smart WooCommerce Search plugin <= 2.5.0 - Broken Access Control	Dec 9, 2024 1y ago
CVE-2023-30873	medium	5.4/10	WordPress WP Docs plugin <= 1.9.8 - Broken Access Control	Dec 9, 2024 1y ago
CVE-2023-31073	medium	4.3/10	WordPress Shortcode to display post and user data plugin <= 1.2.0 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-31214	medium	5.4/10	WordPress WP Quick Post Duplicator plugin <= 2.0 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-32094	medium	5.4/10	WordPress Extended Post Status plugin <= 1.0.19 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-32117	critical	9.8/10	WordPress Integrate Google Drive plugin <= 1.1.99 - Unauthenticated Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-32293	medium	5.3/10	WordPress WRC Pricing Tables plugin <= 2.3.7 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-32126	medium	4.3/10	WordPress SALERT plugin <= 1.2.1 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-32299	medium	6.5/10	WordPress Ni WooCommerce Sales Report plugin <= 3.7.3 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-47694	medium	5.4/10	WordPress Mini Cart Drawer For WooCommerce plugin <= 4.0.0 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-47698	high	8.6/10	WordPress Japanized For WooCommerce plugin <= 2.6.4 - Multiple Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-47756	medium	4.3/10	WordPress Welcome Email Editor plugin <= 5.0.6 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-47760	medium	4.3/10	WordPress Essential Blocks plugin <= 4.2.0 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-47761	medium	4.3/10	WordPress Simple 301 Redirects by BetterLinks plugin <= 2.0.7 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-47763	medium	4.3/10	WordPress WP Custom Admin Interface plugin <= 7.31 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-47762	medium	4.3/10	WordPress BetterDocs plugin <= 2.5.2 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-47764	medium	6.5/10	WordPress Ditty plugin <= 3.1.24 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-47776	medium	4.3/10	WordPress miniorange otp verification plugin <= 4.2.1 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-47780	medium	4.3/10	WordPress EasyAzon – Amazon Associates Affiliate Plugin plugin <= 5.1.0 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-47793	medium	4.3/10	WordPress Acme Fix Images plugin <= 1.0.0 - Broken Access Control vulnerability	Dec 9, 2024 1y ago