Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

343,406

All time

Critical · Active

11,355

CVSS ≥ 9.0

New · 14 days

2,361

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 11221–11250 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-51817	medium	5.4/10	WordPress Combo WP Rewrite Slugs plugin <= 1.0 - Settings Change vulnerability	Nov 19, 2024 1y ago
CVE-2024-51671	low	2.7/10	WordPress Otter Blocks plugin <= 3.0.3 - Broken Access Control vulnerability	Nov 19, 2024 1y ago
CVE-2024-52395	medium	5.3/10	WordPress Floating Buttons for WooCommerce plugin <= 2.8.8 - Broken Access Control vulnerability	Nov 19, 2024 1y ago
CVE-2024-11036	high	7.3/10	GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.1.5 - Unauthenticated Arbitrary Shortcode Execution via gamipress_get_user_earnings	Nov 19, 2024 1y ago
CVE-2024-10388	high	7.2/10	WordPress GDPR <= 2.0.2 - Unauthenticated Stored Cross-Site Scripting	Nov 19, 2024 1y ago
CVE-2024-11069	medium	6.5/10	WordPress GDPR <= 2.0.2 - Missing Authorization to Unauthenticated Arbitrary User Deletion	Nov 19, 2024 1y ago
CVE-2024-51939	medium	6.5/10	WordPress Stylish Internal Links plugin <= 1.9 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-51940	medium	6.5/10	WordPress WP Responsive Video plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52339	medium	6.5/10	WordPress Mage Front End Forms plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52340	medium	6.5/10	WordPress Photographer Connections plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52341	medium	6.5/10	WordPress OS Our Team plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52342	medium	6.5/10	WordPress OS BXSlider plugin <= 2.6 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52343	medium	6.5/10	WordPress OS Pricing Tables plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52344	medium	6.5/10	WordPress Provide Forex Signals plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52345	medium	6.5/10	WordPress ra_qrcode plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52346	medium	6.5/10	WordPress SimpleGMaps plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52347	medium	6.5/10	WordPress Website remote Install vor Gravity, WPForms, Formidable, Ninja, Caldera plugin <= 4.0 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52348	medium	6.5/10	WordPress AA Audio Player plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52349	medium	6.5/10	WordPress Awesome Tool Tip plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52389	medium	6.5/10	WordPress WP Job Portal plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52390	medium	4.9/10	WordPress CYAN Backup plugin <= 2.5.3 - Arbitrary File Download vulnerability	Nov 18, 2024 1y ago
CVE-2024-52394	medium	6.5/10	WordPress Print PDF Generator and Publisher plugin <= 1.1.6 - Stored Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52417	high	7.1/10	WordPress ReConstruction theme <= 1.4.7 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52418	high	7.1/10	WordPress Gameplan theme <= 1.5.10 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52419	medium	6.5/10	WordPress Copy Anything to Clipboard plugin <= 4.0.3 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52422	medium	6.5/10	WordPress WP Githuber MD plugin <= 1.16.3 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52423	medium	6.5/10	WordPress Themify Builder plugin <= 7.6.5 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52424	high	7.1/10	WordPress wp-login customizer plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52425	medium	6.5/10	WordPress Drozd – Addons for Elementor plugin <= 1.1.1 - Stored Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52426	medium	6.5/10	WordPress Linear plugin <= 2.8.0 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago