Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

343,697

All time

Critical · Active

11,479

CVSS ≥ 9.0

New · 14 days

2,540

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 12031–12060 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-44032	medium	6.5/10	WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-44033	medium	6.5/10	WordPress Primary Addon for Elementor plugin <= 1.5.7 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-44035	medium	6.5/10	WordPress Gum Elementor Addon plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-44036	medium	5.9/10	WordPress Kodex Posts likes plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-44037	medium	5.9/10	WordPress Multipurpose Ticket Booking Manager plugin <= 4.2.2 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-44039	medium	5.9/10	WordPress WP Travel plugin <= 9.3.1 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-44040	medium	5.9/10	WordPress ShiftController Employee Shift Scheduling plugin <= 4.9.64 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-44041	medium	5.9/10	WordPress IdeaPush plugin <= 8.66 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-44042	medium	5.9/10	WordPress WP Datepicker plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-44043	medium	5.9/10	WordPress Photo Gallery by 10Web plugin <= 1.8.27 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-44045	medium	5.9/10	WordPress WP Abstracts plugin <= 2.6.5 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-44046	medium	5.9/10	WordPress Themify plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-45454	high	7.1/10	WordPress Unlimited Elements for Elementor plugin <= 1.5.121 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47297	high	7.1/10	WordPress Polls CP plugin <= 1.0.74 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47298	medium	6.5/10	WordPress Bold Page Builder plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47299	medium	5.9/10	WordPress Website Builder by SeedProd <= 6.17.4 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47300	high	7.1/10	WordPress CubeWP Forms plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47301	high	7.1/10	WordPress Bit Form plugin <= 2.13.10 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47306	high	7.1/10	WordPress Secure Copy Content Protection and Content Locking plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47307	medium	6.5/10	WordPress Meta Slider and Carousel with Lightbox plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47310	medium	6.5/10	WordPress ARI Fancy Lightbox -- Popup for WordPress plugin <= 1.3.17 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47313	medium	5.1/10	WordPress Catch Base theme <= 3.4.6 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47320	high	7.1/10	WordPress WS Form LITE plugin <= 1.9.238 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47322	high	7.1/10	WordPress WP Timeline plugin <= 3.6.7 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47326	high	7.1/10	WordPress Share This Image plugin <= 2.01 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47327	high	7.1/10	WordPress GEO my WP plugin <= 4.5.0.3 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47329	medium	6.5/10	WordPress ElementsReady Addons for Elementor plugin <= 6.4.0 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47332	medium	6.5/10	WordPress Sky Addons for Elementor plugin <= 2.5.11 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47333	high	7.1/10	WordPress Loops & Logic plugin <= 4.1.4 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47336	medium	5.9/10	WordPress Terms Descriptions plugin <= 3.4.7 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago