Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,458

All time

Critical · Active

12,228

CVSS ≥ 9.0

New · 14 days

3,107

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 11221–11250 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-53715	high	7.1/10	WordPress Simple Travel Map plugin <= 0.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-53718	high	7.1/10	WordPress Multi Feed Reader plugin <= 2.2.4 - CSRF to Stored Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-53717	high	7.1/10	WordPress yPHPlista plugin <= 1.1.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-53719	high	7.1/10	WordPress Zajax – Ajax Navigation plugin <= 0.4 - CSRF to Stored Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-53721	medium	6.5/10	WordPress Advanced Event Manager plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-53720	high	7.1/10	WordPress WP-ISPConfig 3 plugin <= 1.5.6 - CSRF to Stored XSS vulnerability	Dec 2, 2024 1y ago
CVE-2024-53723	high	7.1/10	WordPress Google Plus Share and +1 Button plugin <= 1.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-53722	high	7.1/10	WordPress Favicon My Blog plugin <= 1.0.2 - CSRF to Stored Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-53725	high	7.1/10	WordPress Post Hits Counter plugin <= 2.8.23 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-53724	high	7.1/10	WordPress IceStats plugin <= 1.3 - CSRF to Stored Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-53727	high	7.1/10	WordPress LinkLaunder SEO plugin <= 0.92.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-53726	high	7.1/10	WordPress RealtyCandy IDX Broker Extended plugin <= 1.5.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-53728	high	7.1/10	WordPress Protect Your Content plugin <= 1.0.2 - CSRF to Stored Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-53729	high	7.1/10	WordPress Blizzard Quotes plugin <= 1.3 - CSRF to Stored Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-53741	medium	6.5/10	WordPress Simple Popup plugin <= 4.6 - Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-53753	high	7.1/10	WordPress CultBooking Hotel Booking Engine plugin <= 2.1 - CSRF to Stored XSS vulnerability	Dec 2, 2024 1y ago
CVE-2024-53751	medium	5.4/10	WordPress Build App Online plugin <= 1.0.23 - Cross Site Request Forgery (CSRF) vulnerability	Dec 2, 2024 1y ago
CVE-2024-53755	high	7.1/10	WordPress Third Party Cookie Eraser plugin <= 1.0.2 - CSRF to Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-53754	high	7.1/10	WordPress Out Of Stock Badge plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability	Dec 2, 2024 1y ago
CVE-2024-53759	high	7.1/10	WordPress ArCa Payment Gateway plugin <= 1.3.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-53762	high	7.1/10	WordPress FastBook plugin <= 1.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-53761	medium	5.4/10	WordPress WP Revisions Manager plugin <= 1.0.2 - Cross Site Request Forgery (CSRF) vulnerability	Dec 2, 2024 1y ago
CVE-2024-53769	high	7.1/10	WordPress Custom Post Type to Map Store plugin <= 1.1.0 - CSRF to Stored XSS vulnerability	Dec 2, 2024 1y ago
CVE-2024-53765	high	7.1/10	WordPress Mins To Read plugin <= 1.2.2 - CSRF to Stored XSS vulnerability	Dec 2, 2024 1y ago
CVE-2024-53775	medium	4.3/10	WordPress DancePress (TRWA) plugin <= 3.1.11 - Cross Site Request Forgery (CSRF) vulnerability	Dec 2, 2024 1y ago
CVE-2024-53770	high	7.1/10	WordPress RingCentral Communications plugin <= 1.7.0 - CSRF to Stored XSS vulnerability	Dec 2, 2024 1y ago
CVE-2024-53776	high	7.1/10	WordPress Donate Me plugin <= 1.2.5 - CSRF to Stored XSS vulnerability	Dec 2, 2024 1y ago
CVE-2024-53779	high	7.1/10	WordPress Yahoo! WebPlayer plugin <= 2.0.6 - CSRF to Stored XSS vulnerability	Dec 2, 2024 1y ago
CVE-2024-53777	high	7.1/10	WordPress Simple Header and Footer plugin <= 1.0.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-53781	high	7.1/10	WordPress SpatialMatch IDX plugin <= 3.0.9 - CSRF to Stored XSS vulnerability	Dec 2, 2024 1y ago