Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

343,699

All time

Critical · Active

11,479

CVSS ≥ 9.0

New · 14 days

2,535

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 12271–12300 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-43964	medium	6.5/10	WordPress DSGVO All in one for WP plugin <= 4.5 - Cross Site Scripting (XSS) vulnerability	Aug 29, 2024 1y ago
CVE-2024-43965	high	8.2/10	WordPress SendGrid for WordPress plugin <= 1.4 - SQL Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-43957	medium	6.5/10	WordPress Animated Number Counters plugin <= 1.9 - Editor+ Limited Local File Inclusion vulnerability	Aug 29, 2024 1y ago
CVE-2024-43955	critical	10.0/10	WordPress Droip plugin <= 1.1.1 - Unauthenticated Arbitrary File Download/Deletion vulnerability	Aug 29, 2024 1y ago
CVE-2024-43954	medium	6.3/10	WordPress Droip plugin <= 1.1.1 - Subscriber+ Settings Change/Data Exposure Vulnerability	Aug 29, 2024 1y ago
CVE-2024-43944	low	3.7/10	WordPress Maintenance & Coming Soon Redirect Animation plugin <= 2.3.3 - Bypass Vulnerability vulnerability	Aug 29, 2024 1y ago
CVE-2024-43943	high	8.5/10	WordPress Greenshift Woocommerce Addon plugin < 1.9.8 - Subscriber+ SQL Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-43942	high	8.5/10	WordPress Greenshift Query and Meta Addon plugin < 3.9.2 - Subscriber+ SQL Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-43941	critical	9.3/10	WordPress Propovoice Pro plugin <= 1.7.0.3 - Unauthenticated SQL Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-43940	medium	6.5/10	WordPress Z Y N I T H plugin <= 7.4.9 - Unauthenticated Plugin Settings Change vulnerability	Aug 29, 2024 1y ago
CVE-2024-43939	medium	6.5/10	WordPress Z Y N I T H plugin <= 7.4.9 - Unauthenticated Arbitrary Option Deletion vulnerability	Aug 29, 2024 1y ago
CVE-2024-43931	critical	9.8/10	WordPress JobSearch WP Job Board WordPress Plugin plugin <= 2.5.3 - PHP Object Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-43922	medium	4.8/10	WordPress NitroPack plugin <= 1.16.7 - Unauthenticated Arbitrary Shortcode Execution vulnerability	Aug 29, 2024 1y ago
CVE-2024-43918	critical	10.0/10	WordPress WBW Product Table PRO plugin <= 1.9.4 - Unauthenticated Arbitrary SQL Query Execution vulnerability	Aug 29, 2024 1y ago
CVE-2024-43917	critical	9.3/10	WordPress TI WooCommerce Wishlist plugin <= 2.8.2 - SQL Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-43144	critical	9.3/10	WordPress Cost Calculator Builder plugin <= 3.2.15 - SQL Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-43132	critical	9.3/10	WordPress Docket (WooCommerce Collections / Wishlist / Watchlist) plugin < 1.7.0 - Unauthenticated SQL Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-39658	high	7.6/10	WordPress Salon Booking System plugin <= 10.7 - Authenticated SQL Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-39653	critical	9.3/10	WordPress VikRentCar Car Rental Management System plugin <= 1.4.0 - SQL Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-39638	high	8.5/10	WordPress Registrations for the Events Calendar plugin <= 2.12.2 - SQL Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-39622	critical	9.3/10	WordPress ListingPro theme <= 2.9.4 - Unauthenticated SQL Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-39620	high	8.5/10	WordPress ListingPro plugin <= 2.9.4 - SQL Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-38795	critical	9.3/10	WordPress ListingPro plugin <= 2.9.4 - Unauthenticated SQL Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-38793	high	8.5/10	WordPress Best Restaurant Menu by Pricelisto plugin <= 1.4.1 - SQL Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-38693	high	7.6/10	WordPress WP User Frontend plugin <= 4.0.7 - SQL Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-5057	critical	9.3/10	WordPress Easy Digital Downloads plugin <= 3.2.12 - SQL Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-43986	medium	5.9/10	WordPress E-cab taxi booking manager plugin <=1.0.9 - Cross Site Scripting (XSS) vulnerability	Aug 29, 2024 1y ago
CVE-2024-39628	medium	5.4/10	WordPress Ninja Forms plugin <= 3.8.6 - Cross Site Request Forgery (CSRF) vulnerability	Aug 26, 2024 1y ago
CVE-2024-39641	medium	4.3/10	WordPress LearnPress plugin <= 4.2.6.8.2 - Cross Site Request Forgery (CSRF) vulnerability	Aug 26, 2024 1y ago
CVE-2024-39645	medium	5.4/10	WordPress Tutor LMS plugin <= 2.7.2 - Cross Site Request Forgery (CSRF) vulnerability	Aug 26, 2024 1y ago