Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,458

All time

Critical · Active

12,228

CVSS ≥ 9.0

New · 14 days

3,106

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 11551–11580 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-52339	medium	6.5/10	WordPress Mage Front End Forms plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52340	medium	6.5/10	WordPress Photographer Connections plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52341	medium	6.5/10	WordPress OS Our Team plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52342	medium	6.5/10	WordPress OS BXSlider plugin <= 2.6 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52343	medium	6.5/10	WordPress OS Pricing Tables plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52344	medium	6.5/10	WordPress Provide Forex Signals plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52345	medium	6.5/10	WordPress ra_qrcode plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52346	medium	6.5/10	WordPress SimpleGMaps plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52347	medium	6.5/10	WordPress Website remote Install vor Gravity, WPForms, Formidable, Ninja, Caldera plugin <= 4.0 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52348	medium	6.5/10	WordPress AA Audio Player plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52349	medium	6.5/10	WordPress Awesome Tool Tip plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52389	medium	6.5/10	WordPress WP Job Portal plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52390	medium	4.9/10	WordPress CYAN Backup plugin <= 2.5.3 - Arbitrary File Download vulnerability	Nov 18, 2024 1y ago
CVE-2024-52394	medium	6.5/10	WordPress Print PDF Generator and Publisher plugin <= 1.1.6 - Stored Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52417	high	7.1/10	WordPress ReConstruction theme <= 1.4.7 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52418	high	7.1/10	WordPress Gameplan theme <= 1.5.10 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52419	medium	6.5/10	WordPress Copy Anything to Clipboard plugin <= 4.0.3 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52422	medium	6.5/10	WordPress WP Githuber MD plugin <= 1.16.3 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52423	medium	6.5/10	WordPress Themify Builder plugin <= 7.6.5 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52424	high	7.1/10	WordPress wp-login customizer plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52425	medium	6.5/10	WordPress Drozd – Addons for Elementor plugin <= 1.1.1 - Stored Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52426	medium	6.5/10	WordPress Linear plugin <= 2.8.0 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52431	critical	9.3/10	WordPress WP Video Robot plugin <= 1.20.0 - SQL Injection vulnerability	Nov 18, 2024 1y ago
CVE-2024-52435	high	7.6/10	WordPress Premium Packages – Sell Digital Products Securely plugin <= 6.0.5 - SQL Injection vulnerability	Nov 18, 2024 1y ago
CVE-2024-52436	high	7.6/10	WordPress Post SMTP plugin <= 2.9.9 - SQL Injection vulnerability	Nov 18, 2024 1y ago
CVE-2024-52428	high	8.1/10	WordPress Ads Booster by Ads Pro plugin <= 1.12 - Local File Inclusion vulnerability	Nov 18, 2024 1y ago
CVE-2024-52430	critical	9.8/10	WordPress Lis Video Gallery plugin <= 0.2.1 - PHP Object Injection vulnerability	Nov 18, 2024 1y ago
CVE-2024-52432	critical	9.8/10	WordPress NIX Anti-Spam Light plugin <= 0.0.4 - PHP Object Injection vulnerability	Nov 18, 2024 1y ago
CVE-2024-52433	critical	9.8/10	WordPress My Geo Posts Free plugin <= 1.2 - PHP Object Injection vulnerability	Nov 18, 2024 1y ago
CVE-2024-52427	critical	9.9/10	WordPress Event Tickets with Ticket Scanner plugin <= 2.3.11 - Remote Code Execution (RCE) vulnerability	Nov 18, 2024 1y ago