Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,460

All time

Critical · Active

12,228

CVSS ≥ 9.0

New · 14 days

3,107

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 11881–11910 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-38771	medium	6.5/10	WordPress Atarim plugin <= 4.0 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-38777	medium	6.5/10	WordPress Titan Anti-spam & Security plugin <= 7.3.6 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-38774	medium	5.4/10	WordPress Security Optimizer plugin <= 1.5.0 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-38792	medium	5.3/10	WordPress ConveyThis Translate plugin <= 234 - Non-arbitrary Options Update vulnerability	Nov 1, 2024 1y ago
CVE-2024-38783	medium	5.3/10	WordPress Arconix FAQ plugin <= 1.9.4 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-38794	medium	5.3/10	WordPress Custom Query Blocks plugin <= 5.2.0 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-39635	medium	5.4/10	WordPress Youzify plugin <= 1.2.6 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-39625	medium	5.3/10	WordPress Icegram Engage plugin <= 3.1.24 - Unauthenticated Message Duplication Vulnerability	Nov 1, 2024 1y ago
CVE-2024-39640	medium	6.5/10	WordPress Social Feed Gallery plugin <= 4.3.9 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-39639	medium	4.3/10	WordPress File Upload plugin <= 4.24.7 - Broken Access Control + CSRF vulnerability	Nov 1, 2024 1y ago
CVE-2024-39650	high	7.3/10	WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Unauthenticated Multiple Vulnerabilities	Nov 1, 2024 1y ago
CVE-2024-39664	high	7.3/10	WordPress Filter & Grids plugin <= 2.8.32 - Broken Authentication vulnerability	Nov 1, 2024 1y ago
CVE-2024-39654	medium	5.3/10	WordPress Sign-up Sheets plugin <= 2.2.12 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43118	medium	4.3/10	WordPress Hummingbird plugin <= 3.9.1 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43120	medium	5.3/10	WordPress TypeSquare Webfonts plugin <= 2.0.7 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43119	medium	4.3/10	WordPress Aruba HiSpeed Cache plugin <= 2.0.12 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43122	medium	6.5/10	WordPress Robin image optimizer plugin <= 1.6.9 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43136	medium	4.3/10	WordPress Sunshine Photo Cart plugin <= 3.2.1 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43134	medium	4.3/10	WordPress Waitlist Woocommerce plugin <= 2.6 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43142	medium	4.3/10	WordPress Tutor LMS plugin <= 2.7.3 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43146	medium	6.3/10	WordPress Accelerated Mobile Pages plugin <= 1.0.96.1 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43143	medium	6.4/10	WordPress Registrations for the Events Calendar plugin <= 2.12.1 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43157	medium	4.3/10	WordPress FormCraft plugin <= 1.2.10 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43154	medium	4.3/10	WordPress Advanced Cron Manager – debug & control plugin <= 2.5.9 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43158	high	7.5/10	WordPress Masteriyo LMS plugin <= 1.11.4 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43162	medium	4.3/10	WordPress Easy Digital Downloads plugin <= 3.2.12 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43159	medium	5.3/10	WordPress Masteriyo LMS plugin <= 1.11.6 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43209	medium	6.5/10	WordPress Bitly's WordPress Plugin plugin <= 2.7.2 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43208	medium	4.3/10	WordPress Send Emails with Mandrill plugin <= 1.4.1 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43211	medium	5.9/10	WordPress MailChimp Subscribe Form plugin <=4.0.9.9 - Stored Cross-Site Scripting vulnerability	Nov 1, 2024 1y ago