Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

343,693

All time

Critical · Active

11,478

CVSS ≥ 9.0

New · 14 days

2,538

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 11881–11910 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-49228	medium	6.5/10	WordPress bVerse Convert plugin <= 1.3.7.1 - Cross Site Scripting (XSS) vulnerability	Oct 18, 2024 1y ago
CVE-2024-49230	medium	6.5/10	WordPress Ajax Custom CSS/JS plugin <= 2.0.4 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 18, 2024 1y ago
CVE-2024-49231	medium	6.5/10	WordPress WordPress Video plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Oct 18, 2024 1y ago
CVE-2024-49232	medium	6.5/10	WordPress El mejor Cluster plugin <= 1.1.15 - Cross Site Scripting (XSS) vulnerability	Oct 18, 2024 1y ago
CVE-2024-49233	medium	6.5/10	WordPress MAS Elementor plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability	Oct 18, 2024 1y ago
CVE-2024-49234	medium	6.5/10	WordPress Plexx Elementor Extension plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerability	Oct 18, 2024 1y ago
CVE-2024-49236	medium	6.5/10	WordPress Crazy Call To Action Box plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability	Oct 18, 2024 1y ago
CVE-2024-49238	high	7.1/10	WordPress ADIF Log Search Widget plugin <= 1.0f - Reflected Cross Site Scripting (XSS) vulnerability	Oct 18, 2024 1y ago
CVE-2024-49239	high	7.1/10	WordPress Add Categories Post Footer plugin <= 2.2.2 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 18, 2024 1y ago
CVE-2024-49240	high	7.1/10	WordPress AB Categories Search Widget plugin <= 0.2.5 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 18, 2024 1y ago
CVE-2024-49241	medium	6.5/10	WordPress Tito plugin <= 2.3 - Cross Site Scripting (XSS) vulnerability	Oct 18, 2024 1y ago
CVE-2024-49243	high	7.5/10	WordPress Dynamic Elementor Addons plugin <= 1.0.0 - Local File Inclusion vulnerability	Oct 18, 2024 1y ago
CVE-2024-9364	medium	4.3/10	SendGrid for WordPress <= 1.4 - Missing Authorization to Authenticated (Subscriber+) Log Deletion	Oct 18, 2024 1y ago
CVE-2024-49248	high	7.1/10	WordPress Ad Inserter plugin <= 2.7.37 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49255	medium	6.5/10	WordPress Da Reactions plugin <= 5.1.5 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49259	medium	6.5/10	WordPress Primary Addon for Elementor plugin <= 1.5.8 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49261	medium	6.5/10	WordPress Arkhe Blocks plugin <= 2.23.0 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49262	medium	6.5/10	WordPress Country Flags for Elementor plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49263	medium	6.5/10	WordPress My Favorites plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49264	medium	6.5/10	WordPress Events Addon for Elementor plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49276	high	7.1/10	WordPress Clio Grow plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49277	medium	6.5/10	WordPress UltraAddons – Elementor Addons plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49278	medium	6.5/10	WordPress Omnipress plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49279	medium	6.5/10	WordPress Hyperlink Group Block plugin <= 1.17.5 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49280	medium	6.5/10	WordPress Lightbox slider -- Responsive Lightbox Gallery plugin <= 1.10.6 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49281	medium	6.5/10	WordPress Click to Chat – WP Support All-in-One Floating Widget plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49282	medium	5.9/10	WordPress Responsive Lightbox & Gallery plugin <= 2.4.8 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49283	high	7.1/10	WordPress CURCY plugin <= 2.2.3 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49288	medium	5.9/10	WordPress Email Template Customizer for WooCommerce plugin <= 1.2.9.1 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49289	medium	6.5/10	WordPress Cooked Pro plugin < 1.8.0 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago