Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

343,238

All time

Critical · Active

11,330

CVSS ≥ 9.0

New · 14 days

2,976

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 10861–10890 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-52456	high	7.1/10	WordPress Awesome Studio plugin <= 2.4.4 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-52459	high	7.1/10	WordPress Chameleoni Jobs plugin <= 2.5.4 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-52458	high	7.1/10	WordPress TM Islamic Helper plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-52460	high	7.1/10	WordPress AtaraPay WooCommerce Payment Gateway plugin <= 2.0.13 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-52462	high	7.1/10	WordPress WP e-Commerce Style Email plugin <= 0.6.2 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-52461	high	7.1/10	WordPress Infinite Slider plugin <= 2.0.1 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-52464	high	7.1/10	WordPress amr shortcodes plugin <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-52463	high	7.1/10	WordPress Post By Email plugin <= 1.0.4b - Reflected Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-52466	high	7.1/10	WordPress Explara Events plugin <= 0.1.3 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-52465	high	7.1/10	WordPress LGPD Framework plugin <= 2.0.2 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-52468	high	7.1/10	WordPress LeadBoxer plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-52467	high	7.1/10	WordPress AI Responsive Gallery Album plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-52469	high	7.1/10	WordPress WooCommerce Price Alert plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-52477	high	7.1/10	WordPress Document & Data Automation plugin <= 1.6.1 - CSRF to Stored XSS vulnerability	Dec 2, 2024 1y ago
CVE-2024-52476	critical	10.0/10	WordPress Fediverse Embeds plugin <= 1.5.3 - Arbitrary File Upload vulnerability	Dec 2, 2024 1y ago
CVE-2024-52479	medium	4.3/10	WordPress Jobify plugin < 4.3.0 - Cross Site Request Forgery (CSRF) vulnerability	Dec 2, 2024 1y ago
CVE-2024-52478	medium	6.5/10	WordPress Jobify theme < 4.3.0 - Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-52483	high	7.1/10	WordPress LeanPress plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-52482	high	7.1/10	WordPress Ortto plugin <= 1.0.19 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-52486	medium	6.5/10	WordPress Elementor Portfolio Builder plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-52484	high	7.1/10	WordPress Wc Recently viewed products plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-52487	medium	6.5/10	WordPress Ultimate Classified Listings plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-52491	medium	5.9/10	WordPress Sticky Social Icons plugin <= 1.2.1 - Stored Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-52489	medium	5.9/10	WordPress Add Chat App Button plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-52493	medium	5.9/10	WordPress Meteor Slides plugin <= 1.5.7 - Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-52492	medium	5.9/10	WordPress Image horizontal reel scroll slideshow plugin <= 13.4 - Stored Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-52502	medium	6.5/10	WordPress ImbaChat plugin <= 3.1.4 - Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-52494	medium	5.9/10	WordPress Dynamic To Top plugin <= 3.5.2 - Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-52503	medium	6.5/10	WordPress Tailored Tools plugin <= 1.8.4 - Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-53708	medium	5.3/10	WordPress AI Quiz plugin <= 1.1 - Broken Access Control vulnerability	Dec 2, 2024 1y ago