Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

343,699

All time

Critical · Active

11,479

CVSS ≥ 9.0

New · 14 days

2,537

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 12211–12240 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-43969	high	7.6/10	WordPress Spiffy Calendar plugin <= 4.9.12 - SQL Injection vulnerability	Sep 17, 2024 1y ago
CVE-2024-43976	critical	9.3/10	WordPress Super Store Finder plugin <= 6.9.7 - SQL Injection vulnerability	Sep 17, 2024 1y ago
CVE-2024-43978	critical	9.3/10	WordPress Super Store Finder plugin < 6.9.8 - SQL Injection vulnerability	Sep 17, 2024 1y ago
CVE-2024-44004	critical	9.3/10	WordPress WPCargo Track & Trace plugin <= 8.0.2 - SQL Injection vulnerability	Sep 17, 2024 1y ago
CVE-2024-44050	medium	6.5/10	WordPress Verbosa theme <= 1.2.3 - Cross Site Scripting (XSS) vulnerability	Sep 17, 2024 1y ago
CVE-2024-44051	medium	6.5/10	WordPress Content Blocks (Custom Post Widget) plugin <= 3.3.5 - Cross Site Scripting (XSS) vulnerability	Sep 17, 2024 1y ago
CVE-2024-45451	medium	6.5/10	WordPress Roseta theme <= 1.3.0 - Cross Site Scripting (XSS) vulnerability	Sep 17, 2024 1y ago
CVE-2024-45452	medium	6.5/10	WordPress Septera theme <= 1.5.1 - Cross Site Scripting (XSS) vulnerability	Sep 17, 2024 1y ago
CVE-2024-22303	high	8.8/10	WordPress Houzez theme <= 3.2.4 - Privilege Escalation vulnerability	Sep 17, 2024 1y ago
CVE-2024-21743	high	8.8/10	WordPress Houzez Login Register plugin <= 3.2.5 - Privilege Escalation vulnerability	Sep 17, 2024 1y ago
CVE-2024-44053	high	7.1/10	WordPress Opor Ayam theme <= 1.8 - Reflected Cross Site Scripting (XSS) vulnerability	Sep 15, 2024 1y ago
CVE-2024-44054	medium	6.5/10	WordPress Fluida theme <= 1.8.8 - Cross Site Scripting (XSS) vulnerability	Sep 15, 2024 1y ago
CVE-2024-44056	medium	6.5/10	WordPress Mantra theme <= 3.3.2 - Cross Site Scripting (XSS) vulnerability	Sep 15, 2024 1y ago
CVE-2024-44057	medium	6.5/10	WordPress Nirvana theme <= 1.6.3 - Cross Site Scripting (XSS) vulnerability	Sep 15, 2024 1y ago
CVE-2024-44058	medium	6.5/10	WordPress Parabola theme <= 2.4.1 - Cross Site Scripting (XSS) vulnerability	Sep 15, 2024 1y ago
CVE-2024-44059	medium	6.5/10	WordPress Custom Query Blocks plugin <= 5.3.1 - Cross Site Scripting (XSS) vulnerability	Sep 15, 2024 1y ago
CVE-2024-44060	high	7.1/10	WordPress filmix theme <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability	Sep 15, 2024 1y ago
CVE-2024-44062	medium	6.5/10	WordPress Custom Field Template plugin <= 2.6.5 - Cross Site Scripting (XSS) vulnerability	Sep 15, 2024 1y ago
CVE-2024-44063	medium	6.5/10	WordPress Happyforms plugin <= 1.26.0 - Cross Site Scripting (XSS) vulnerability	Sep 15, 2024 1y ago
CVE-2024-45455	medium	5.9/10	WordPress WP Meta SEO plugin <= 4.5.13 - Cross Site Scripting (XSS) vulnerability	Sep 15, 2024 1y ago
CVE-2024-45456	medium	6.5/10	WordPress WP Meta SEO plugin <= 4.5.13 - Cross Site Scripting (XSS) vulnerability	Sep 15, 2024 1y ago
CVE-2024-45457	medium	6.5/10	WordPress Spiffy Calendar plugin <= 4.9.13 - Cross Site Scripting (XSS) vulnerability	Sep 15, 2024 1y ago
CVE-2024-45458	high	7.1/10	WordPress Spiffy Calendar plugin <= 4.9.13 - Reflected Cross Site Scripting (XSS) vulnerability	Sep 15, 2024 1y ago
CVE-2024-45459	high	7.1/10	WordPress Product Slider for WooCommerce by PickPlugins plugin <= 1.13.50 - Reflected Cross Site Scripting (XSS) vulnerability	Sep 15, 2024 1y ago
CVE-2024-45460	medium	5.9/10	WordPress Flipping Cards plugin <= 1.30 - Cross Site Scripting (XSS) vulnerability	Sep 15, 2024 1y ago
CVE-2024-8714	medium	6.1/10	WordPress Affiliates Plugin — SliceWP Affiliates <= 1.1.20 - Reflected Cross-Site Scripting	Sep 13, 2024 1y ago
CVE-2024-5567	medium	6.4/10	Betheme \| Responsive Multipurpose WordPress & WooCommerce Theme <= 27.5.5 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File	Sep 13, 2024 1y ago
CVE-2024-5628	medium	6.4/10	Avada \| Website Builder For WordPress & eCommerce <= 3.11.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via fusion_button Shortcode	Sep 13, 2024 1y ago
CVE-2024-8529	critical	10.0/10	LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_fields'	Sep 12, 2024 1y ago
CVE-2024-8522	critical	10.0/10	LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_only_fields'	Sep 12, 2024 1y ago