Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

343,498

All time

Critical · Active

11,362

CVSS ≥ 9.0

New · 14 days

2,446

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 11491–11520 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-47302	medium	5.3/10	WordPress Fluent Support plugin <= 1.8.0 - Broken Access Control on Email Verification vulnerability	Nov 1, 2024 1y ago
CVE-2024-44038	medium	5.3/10	WordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-37250	medium	5.4/10	WordPress Advanced Custom Fields Pro plugin < 6.3.2 - Subscriber+ Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-37249	medium	4.3/10	WordPress Advanced Custom Fields Pro plugin < 6.3.2 - Contributor+ Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-37095	medium	4.3/10	WordPress Envira Photo Gallery plugin <= 1.8.7.3 - CSRF leading to notice dismissal vulnerability	Nov 1, 2024 1y ago
CVE-2024-37096	medium	4.3/10	WordPress Popup box plugin <= 4.5.1 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-37108	high	7.7/10	WordPress WishList Member X plugin < 3.26.7 - Authenticated Arbitrary File Deletion vulnerability	Nov 1, 2024 1y ago
CVE-2024-37106	high	8.2/10	WordPress WishList Member X plugin < 3.26.7 - Unautenticated Plugin Settings Change Leading to Stored XSS vulnerability	Nov 1, 2024 1y ago
CVE-2024-37123	medium	5.3/10	WordPress Ibtana – WordPress Website Builder plugin <= 1.2.3.3 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-37119	medium	5.3/10	WordPress Uncanny Automator Pro plugin < 5.3.0.1 - Unauthenticated License Settings Reset vulnerability	Nov 1, 2024 1y ago
CVE-2024-37201	medium	4.3/10	WordPress Woocommerce Customers Order History plugin <= 5.2.2 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-37204	medium	4.3/10	WordPress PropertyHive plugin <= 2.0.9 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-37203	medium	4.3/10	WordPress Laybuy Payment Extension for WooCommerce plugin <= 5.3.9 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-37207	medium	5.4/10	WordPress Demo Awesome plugin <= 1.0.2 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-37214	medium	6.5/10	WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - Broken Access Control to XSS vulnerability	Nov 1, 2024 1y ago
CVE-2024-37220	medium	5.3/10	WordPress Optinly plugin <= 1.0.18 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-37218	medium	4.3/10	WordPress Page Builder Sandwich <= 5.1.0 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-37226	medium	5.3/10	WordPress Kanban Boards for WordPress plugin <= 2.5.21 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-37254	medium	4.3/10	WordPress WP File Manager plugin <= 7.2.7 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-37232	high	8.8/10	WordPress Hercules Core plugin <= 6.5 - Subscriber+ Arbitrary Settings Change/Access vulnerability	Nov 1, 2024 1y ago
CVE-2024-37269	medium	5.3/10	WordPress Masterstudy Elementor Widgets plugin <= 1.2.2 - Unauthenticated Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-37255	medium	5.3/10	WordPress ElementsKit Lite plugin <= 3.1.4 - Unauthenticated Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-37276	medium	5.3/10	WordPress Featured Image from URL (FIFU) plugin <= 4.8.1 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-37411	medium	5.3/10	WordPress Progress Planner plugin <= 0.9.1 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-37277	high	7.5/10	WordPress Paid Memberships Pro plugin <= 3.0.4 - Insecure Direct Object References (IDOR) vulnerability	Nov 1, 2024 1y ago
CVE-2024-37415	medium	5.4/10	WordPress E2Pdf plugin <= 1.20.27 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-37425	medium	5.4/10	WordPress Newspack Blocks plugin <= 3.0.8 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-37423	high	8.5/10	WordPress Newspack Blocks plugin <= 3.0.8 - Contributor+ Arbitrary Directory Deletion vulnerability	Nov 1, 2024 1y ago
CVE-2024-37439	medium	5.4/10	WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Subscriber+ Arbitrary Post/Page Duplication vulnerability	Nov 1, 2024 1y ago
CVE-2024-37427	medium	5.3/10	WordPress Timetics plugin <= 1.0.21 - Broken Access Control vulnerability	Nov 1, 2024 1y ago