Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

343,701

All time

Critical · Active

11,479

CVSS ≥ 9.0

New · 14 days

2,537

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 12361–12390 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-43207	high	8.5/10	WordPress Unite Gallery Lite plugin <= 1.7.62 - SQL Injection vulnerability	Aug 18, 2024 1y ago
CVE-2024-43282	high	7.6/10	WordPress Tutor LMS plugin <= 2.7.2 - SQL Injection vulnerability	Aug 18, 2024 1y ago
CVE-2024-43286	high	8.5/10	WordPress Squirrly SEO plugin <= 12.3.19 - SQL Injection vulnerability	Aug 18, 2024 1y ago
CVE-2024-43239	medium	4.3/10	WordPress Masteriyo LMS plugin <= 1.11.4 - Insecure Direct Object Reference (IDOR) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43266	medium	5.4/10	WordPress WP Job Portal plugin <= 2.1.8 - Insecure Direct Object References (IDOR) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43288	medium	4.3/10	WordPress wpForo Forum plugin <= 2.3.4 - Insecure Direct Object References (IDOR) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43315	high	7.5/10	WordPress Stripe Payments For WooCommerce plugin <= 1.9.1 - Insecure Direct Object References (IDOR) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43322	medium	5.4/10	WordPress Zephyr Project Manager plugin <= 3.3.100 - Insecure Direct Object References (IDOR) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43350	medium	5.3/10	WordPress Propovoice CRM plugin <= 1.7.6.4 - Insecure Direct Object References (IDOR) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43241	high	7.1/10	WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43244	high	7.1/10	WordPress houzez Theme By FaveThemes <= 3.2.4 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43246	high	7.1/10	WordPress WHMpress plugin <= 6.2-revision-5 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43262	medium	6.5/10	WordPress Busiprof theme <= 2.4.8 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43263	medium	6.5/10	WordPress Visual Composer Starter theme <= 3.3 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43267	medium	6.5/10	WordPress Mega Addons For Elementor plugin <= 1.9 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43278	medium	6.5/10	WordPress Meta Field Block plugin <= 1.2.13 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43279	high	7.1/10	WordPress Newsletters plugin <= 4.9.8 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43284	medium	6.5/10	WordPress WP Travel Gutenberg Blocks plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43291	medium	5.9/10	WordPress Void Contact Form 7 Widget For Elementor Page Builder plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43292	medium	5.9/10	WordPress Envo's Elementor Templates & Widgets for WooCommerce plugin <= 1.4.16 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43294	medium	6.5/10	WordPress Bold Timeline Lite plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43303	high	7.1/10	WordPress White Label CMS plugin <= 2.7.4 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43304	high	7.1/10	WordPress Cryptocurrency Widgets plugin <= 2.8.0 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43305	medium	6.5/10	WordPress Custom Layouts – Post + Product grids made easy plugin <= 1.4.11 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43306	high	7.1/10	WordPress WP-Lister Lite for eBay plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43307	medium	6.5/10	WordPress Structured Content (JSON-LD) #wpsc plugin <= 1.6.2 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43308	medium	6.5/10	WordPress Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor plugin <= 3.3.5 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43309	medium	6.5/10	WordPress WP Telegram Widget and Join Link plugin <= 2.1.27 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43313	high	7.1/10	WordPress FormFacade plugin <= 1.3.2 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43318	medium	6.5/10	WordPress E2Pdf – Export To Pdf Tool for WordPress plugin <= 1.25.05 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago