Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

343,406

All time

Critical · Active

11,355

CVSS ≥ 9.0

New · 14 days

2,361

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 11251–11280 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-52431	critical	9.3/10	WordPress WP Video Robot plugin <= 1.20.0 - SQL Injection vulnerability	Nov 18, 2024 1y ago
CVE-2024-52435	high	7.6/10	WordPress Premium Packages – Sell Digital Products Securely plugin <= 6.0.5 - SQL Injection vulnerability	Nov 18, 2024 1y ago
CVE-2024-52436	high	7.6/10	WordPress Post SMTP plugin <= 2.9.9 - SQL Injection vulnerability	Nov 18, 2024 1y ago
CVE-2024-52428	high	8.1/10	WordPress Ads Booster by Ads Pro plugin <= 1.12 - Local File Inclusion vulnerability	Nov 18, 2024 1y ago
CVE-2024-52430	critical	9.8/10	WordPress Lis Video Gallery plugin <= 0.2.1 - PHP Object Injection vulnerability	Nov 18, 2024 1y ago
CVE-2024-52432	critical	9.8/10	WordPress NIX Anti-Spam Light plugin <= 0.0.4 - PHP Object Injection vulnerability	Nov 18, 2024 1y ago
CVE-2024-52433	critical	9.8/10	WordPress My Geo Posts Free plugin <= 1.2 - PHP Object Injection vulnerability	Nov 18, 2024 1y ago
CVE-2024-52427	critical	9.9/10	WordPress Event Tickets with Ticket Scanner plugin <= 2.3.11 - Remote Code Execution (RCE) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52429	critical	9.9/10	WordPress WP Quick Setup plugin <= 2.0 - Arbitrary Plugin and Theme Installation to Remote Code Execution vulnerability	Nov 18, 2024 1y ago
CVE-2024-52434	critical	9.1/10	WordPress Popup by Supsystic plugin <= 1.10.29 - Remote Code Execution (RCE) vulnerability	Nov 18, 2024 1y ago
CVE-2024-5030	—	—	CM Table Of Contents – WordPress TOC Plugin < 1.2.3 - Settings Reset via CSRF	Nov 18, 2024 1y ago
CVE-2024-52397	critical	9.1/10	WordPress Convert Docx2post plugin <= 1.4 - Arbitrary File Upload vulnerability	Nov 16, 2024 1y ago
CVE-2024-52398	critical	9.1/10	WordPress CDI plugin <= 5.5.3 - Arbitrary File Upload vulnerability	Nov 16, 2024 1y ago
CVE-2024-52399	critical	9.9/10	WordPress Writer Helper plugin <= 3.1.6 - Arbitrary File Upload vulnerability	Nov 16, 2024 1y ago
CVE-2024-52400	critical	9.9/10	WordPress Gallerio plugin <= 1.01 - Arbitrary File Upload vulnerability	Nov 16, 2024 1y ago
CVE-2024-52403	critical	9.9/10	WordPress User Management plugin <= 1.1 - Arbitrary File Upload vulnerability	Nov 16, 2024 1y ago
CVE-2024-52404	critical	9.9/10	WordPress CF7 Reply Manager plugin <= 1.2.3 - Arbitrary File Upload vulnerability	Nov 16, 2024 1y ago
CVE-2024-52405	critical	9.9/10	WordPress B-Banner Slider plugin <= 1.1 - Arbitrary File Upload vulnerability	Nov 16, 2024 1y ago
CVE-2024-52406	critical	9.9/10	WordPress CSV to html plugin <= 3.26 - Arbitrary File Upload vulnerability	Nov 16, 2024 1y ago
CVE-2024-52407	critical	9.9/10	WordPress BasePress Migration Tools plugin <= 1.0.0 - Arbitrary File Upload vulnerability	Nov 16, 2024 1y ago
CVE-2024-52408	critical	9.9/10	WordPress Push Notifications for WordPress by PushAssist plugin <= 3.0.8 - Arbitrary File Upload vulnerability	Nov 16, 2024 1y ago
CVE-2024-52409	critical	9.8/10	WordPress AJAX Random Posts plugin <= 0.3.3 - PHP Object Injection vulnerability	Nov 16, 2024 1y ago
CVE-2024-52410	critical	9.8/10	WordPress Referrer Detector plugin <= 4.2.1.0 - PHP Object Injection vulnerability	Nov 16, 2024 1y ago
CVE-2024-52411	critical	9.8/10	WordPress Advanced Personalization plugin <= 1.1.2 - PHP Object Injection vulnerability	Nov 16, 2024 1y ago
CVE-2024-52412	critical	9.8/10	WordPress Xin theme <= 1.0.8.1 - PHP Object Injection vulnerability	Nov 16, 2024 1y ago
CVE-2024-52413	critical	9.8/10	WordPress Airin Blog theme <= 1.6.1 - PHP Object Injection vulnerability	Nov 16, 2024 1y ago
CVE-2024-52414	critical	9.8/10	WordPress WDES Responsive Mobile Menu plugin <= 5.3.18 - PHP Object Injection vulnerability	Nov 16, 2024 1y ago
CVE-2024-52386	medium	5.3/10	WordPress Classified Listing plugin <= 3.1.16 - Local File Inclusion vulnerability	Nov 16, 2024 1y ago
CVE-2024-52415	high	8.8/10	WordPress SK WP Settings Backup plugin <= 1.0 - CSRF to PHP Object Injection vulnerability	Nov 16, 2024 1y ago
CVE-2024-52416	critical	10.0/10	WordPress Debug Tool plugin <= 2.2 - Remote Code Execution vulnerability	Nov 16, 2024 1y ago