Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

343,662

All time

Critical · Active

11,475

CVSS ≥ 9.0

New · 14 days

2,527

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 11761–11790 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-50460	medium	5.9/10	WordPress Firelight Lightbox plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability	Oct 28, 2024 1y ago
CVE-2024-50461	medium	6.5/10	WordPress EmbedPress plugin <= 4.0.14 - Cross Site Scripting (XSS) vulnerability	Oct 28, 2024 1y ago
CVE-2024-50462	medium	6.5/10	WordPress Interactive World Map plugin <= 3.4.4 - Cross Site Scripting (XSS) vulnerability	Oct 28, 2024 1y ago
CVE-2024-50464	medium	6.5/10	WordPress Kodex Posts likes plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability	Oct 28, 2024 1y ago
CVE-2024-50467	medium	6.5/10	WordPress Scrollbar by webxapp plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability	Oct 28, 2024 1y ago
CVE-2024-50468	medium	6.5/10	WordPress Raptor Editor plugin <= 1.0.20 - Cross Site Scripting (XSS) vulnerability	Oct 28, 2024 1y ago
CVE-2024-50469	medium	6.5/10	WordPress Textboxes plugin <= 0.1.3.1 - Cross Site Scripting (XSS) vulnerability	Oct 28, 2024 1y ago
CVE-2024-50443	medium	6.5/10	WordPress PostX plugin <= 4.1.12 - Cross Site Scripting (XSS) vulnerability	Oct 28, 2024 1y ago
CVE-2024-50470	medium	6.5/10	WordPress Themes4WP YouTube External Subtitles plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Oct 28, 2024 1y ago
CVE-2024-50471	medium	6.5/10	WordPress Trip Plan plugin <= 1.0.10 - Cross Site Scripting (XSS) vulnerability	Oct 28, 2024 1y ago
CVE-2024-50472	medium	6.5/10	WordPress Amilia Store plugin <= 2.9.8 - Stored Cross Site Scripting (XSS) vulnerability	Oct 28, 2024 1y ago
CVE-2024-50501	medium	6.5/10	WordPress Kata Plus plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability	Oct 28, 2024 1y ago
CVE-2024-50502	medium	6.5/10	WordPress Cozy Blocks plugin <= 2.0.18 - Cross Site Scripting (XSS) vulnerability	Oct 28, 2024 1y ago
CVE-2024-50465	high	8.5/10	WordPress Premium SEO Pack plugin <= 1.6.001 - SQL Injection vulnerability	Oct 28, 2024 1y ago
CVE-2024-50479	critical	9.3/10	WordPress Woocommerce Quote Calculator plugin <= 1.1 - SQL Injection vulnerability	Oct 28, 2024 1y ago
CVE-2024-50491	critical	9.3/10	WordPress RSVP ME plugin <= 1.9.9 - SQL Injection vulnerability	Oct 28, 2024 1y ago
CVE-2024-50497	high	8.1/10	WordPress Advanced Online Ordering and Delivery Platform plugin <= 2.0.0 - Local File Inclusion vulnerability	Oct 28, 2024 1y ago
CVE-2024-50463	medium	4.7/10	WordPress Sunshine Photo Cart plugin <= 3.2.9 - Open Redirection vulnerability	Oct 28, 2024 1y ago
CVE-2024-50478	critical	9.8/10	WordPress 1-Click Login: Passwordless Authentication plugin 1.4.5 - Broken Authentication vulnerability	Oct 28, 2024 1y ago
CVE-2024-50483	critical	9.8/10	WordPress Meetup plugin <= 0.1 - Broken Authentication vulnerability	Oct 28, 2024 1y ago
CVE-2024-50488	high	8.8/10	WordPress Token Login plugin <= 1.0.3 - Broken Authentication vulnerability	Oct 28, 2024 1y ago
CVE-2024-50408	high	8.8/10	WordPress Namaste! LMS plugin <= 2.6.3 - PHP Object Injection vulnerability	Oct 28, 2024 1y ago
CVE-2024-50416	high	8.8/10	WordPress WPC Shop as a Customer for WooCommerce plugin <= 1.2.6 - PHP Object Injection vulnerability	Oct 28, 2024 1y ago
CVE-2024-50450	high	7.3/10	WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3.4 - Bypass Vulnerability vulnerability	Oct 28, 2024 1y ago
CVE-2024-50492	high	8.3/10	WordPress ScottCart plugin <= 1.1 - Remote Code Execution (RCE) vulnerability	Oct 28, 2024 1y ago
CVE-2024-50498	critical	10.0/10	WordPress WP Query Console plugin <= 1.0 - Remote Code Execution (RCE) vulnerability	Oct 28, 2024 1y ago
CVE-2024-50477	critical	9.8/10	WordPress Stacks Mobile App Builder plugin <= 5.2.3 - Account Takeover vulnerability	Oct 28, 2024 1y ago
CVE-2024-50486	critical	9.8/10	WordPress Acnoo Flutter API plugin <= 1.0.5 - Account Takeover vulnerability	Oct 28, 2024 1y ago
CVE-2024-50487	critical	9.8/10	WordPress MaanStore API plugin <= 1.0.1 - Account Takeover vulnerability	Oct 28, 2024 1y ago
CVE-2024-50489	critical	9.8/10	WordPress Realty Workstation plugin <= 1.0.45 - Account Takeover vulnerability	Oct 28, 2024 1y ago