Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

343,505

All time

Critical · Active

11,463

CVSS ≥ 9.0

New · 14 days

2,421

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 11551–11580 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-38737	medium	5.4/10	WordPress ReDi Restaurant Reservation plugin <= 24.0422 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-38733	medium	5.4/10	WordPress Meks Video Importer plugin <= 1.0.12 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-38740	medium	5.4/10	WordPress Packlink PRO shipping module plugin <= 3.4.6 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-38744	high	8.3/10	WordPress Plum: Spin Wheel & Email Pop-up plugin <= 2.0 - Broken Access Control to Unauth Stored XSS vulnerability	Nov 1, 2024 1y ago
CVE-2024-38743	medium	5.3/10	WordPress Plum: Spin Wheel & Email Pop-up plugin <= 2.0 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-38745	medium	5.3/10	WordPress Wholesale Suite plugin <= 2.1.12 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-38769	medium	5.3/10	WordPress Arconix Shortcodes plugin <= 2.1.11 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-38748	medium	5.3/10	WordPress EleForms plugin <= 2.9.9.9 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-38771	medium	6.5/10	WordPress Atarim plugin <= 4.0 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-38777	medium	6.5/10	WordPress Titan Anti-spam & Security plugin <= 7.3.6 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-38774	medium	5.4/10	WordPress Security Optimizer plugin <= 1.5.0 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-38792	medium	5.3/10	WordPress ConveyThis Translate plugin <= 234 - Non-arbitrary Options Update vulnerability	Nov 1, 2024 1y ago
CVE-2024-38783	medium	5.3/10	WordPress Arconix FAQ plugin <= 1.9.4 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-38794	medium	5.3/10	WordPress Custom Query Blocks plugin <= 5.2.0 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-39635	medium	5.4/10	WordPress Youzify plugin <= 1.2.6 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-39625	medium	5.3/10	WordPress Icegram Engage plugin <= 3.1.24 - Unauthenticated Message Duplication Vulnerability	Nov 1, 2024 1y ago
CVE-2024-39640	medium	6.5/10	WordPress Social Feed Gallery plugin <= 4.3.9 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-39639	medium	4.3/10	WordPress File Upload plugin <= 4.24.7 - Broken Access Control + CSRF vulnerability	Nov 1, 2024 1y ago
CVE-2024-39650	high	7.3/10	WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Unauthenticated Multiple Vulnerabilities	Nov 1, 2024 1y ago
CVE-2024-39664	high	7.3/10	WordPress Filter & Grids plugin <= 2.8.32 - Broken Authentication vulnerability	Nov 1, 2024 1y ago
CVE-2024-39654	medium	5.3/10	WordPress Sign-up Sheets plugin <= 2.2.12 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43118	medium	4.3/10	WordPress Hummingbird plugin <= 3.9.1 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43120	medium	5.3/10	WordPress TypeSquare Webfonts plugin <= 2.0.7 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43119	medium	4.3/10	WordPress Aruba HiSpeed Cache plugin <= 2.0.12 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43122	medium	6.5/10	WordPress Robin image optimizer plugin <= 1.6.9 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43136	medium	4.3/10	WordPress Sunshine Photo Cart plugin <= 3.2.1 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43134	medium	4.3/10	WordPress Waitlist Woocommerce plugin <= 2.6 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43142	medium	4.3/10	WordPress Tutor LMS plugin <= 2.7.3 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43146	medium	6.3/10	WordPress Accelerated Mobile Pages plugin <= 1.0.96.1 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43143	medium	6.4/10	WordPress Registrations for the Events Calendar plugin <= 2.12.1 - Broken Access Control vulnerability	Nov 1, 2024 1y ago