Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,460

All time

Critical · Active

12,228

CVSS ≥ 9.0

New · 14 days

3,107

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 11941–11970 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-43919	medium	5.3/10	WordPress Yet Another Related Posts Plugin (YARPP) plugin <= 5.30.10 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43928	medium	5.4/10	WordPress JobSearch WP Job Board WordPress Plugin plugin <= 2.5.4 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43925	medium	4.3/10	WordPress Envira Gallery Lite plugin <= 1.8.14 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43932	medium	6.5/10	WordPress The Plus Addons for Elementor plugin <= 5.6.2 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43929	medium	6.5/10	WordPress JobSearch WP Job Board WordPress Plugin plugin <= 2.5.4 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43937	medium	6.4/10	WordPress WP Crowdfunding plugin <= 2.1.10 - Settings Change vulnerability	Nov 1, 2024 1y ago
CVE-2024-43962	medium	5.4/10	WordPress LWS Affiliation plugin <= 2.3.4 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43956	medium	6.5/10	WordPress MemberPress plugin <= 1.11.34 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43968	medium	4.3/10	WordPress Newspack plugin < 3.8.7 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43974	medium	6.5/10	WordPress ReviveNews theme <= 1.0.2 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43973	medium	4.3/10	WordPress GetPaid plugin <= 2.8.11 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43980	medium	6.5/10	WordPress FotaWP theme <= 1.4.1 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43979	medium	6.5/10	WordPress Blockbooster theme <= 1.0.10 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43981	medium	4.3/10	WordPress GeoDirectory plugin <= 2.3.70 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43998	medium	6.5/10	WordPress Blogpoet theme <= 1.0.3 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43982	high	8.8/10	WordPress Login As Users plugin <= 1.4.3 - Broken Access Control to Account Takeover vulnerability	Nov 1, 2024 1y ago
CVE-2024-44006	medium	4.3/10	WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.7 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-44020	medium	4.3/10	WordPress WP Free SSL plugin <= 1.2.6 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-44019	medium	5.3/10	WordPress Contact Form 7 Campaign Monitor Extension plugin <= 0.4.67 - Arbitrary File Deletion vulnerability	Nov 1, 2024 1y ago
CVE-2024-44031	medium	4.3/10	WordPress JoomSport plugin <= 5.6.3 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-44021	medium	5.4/10	WordPress Truepush plugin <= 1.0.8 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-44052	medium	4.3/10	WordPress HelloAsso plugin <= 1.1.10 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-47317	medium	4.3/10	WordPress Ads by WPQuads plugin <= 2.0.84 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-47308	medium	6.5/10	WordPress Templately plugin <= 3.1.2 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-47318	medium	4.3/10	WordPress PWA for WP & AMP plugin <= 1.7.72 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-47358	medium	5.3/10	WordPress Popup Maker plugin <= 1.19.2 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-47321	medium	6.5/10	WordPress WP Datepicker plugin <= 2.1.1 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-47359	medium	5.3/10	WordPress Depicter plugin <= 3.2.2 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-47361	medium	6.5/10	WordPress Elementor Addon Elements plugin <= 1.13.6 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-47362	medium	4.3/10	WordPress Strong Testimonials plugin <= 3.1.16 - Broken Access Control vulnerability	Nov 1, 2024 1y ago