Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

343,701

All time

Critical · Active

11,479

CVSS ≥ 9.0

New · 14 days

2,537

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 12391–12420 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-43320	medium	6.5/10	WordPress WPBakery Page Builder Addons plugin <= 3.9 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43321	medium	6.5/10	WordPress Team Showcase plugin <= 1.22.23 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43324	medium	5.9/10	WordPress Clever Addons for Elementor plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43327	high	7.1/10	WordPress Invite Anyone plugin <= 1.4.7 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43329	medium	6.5/10	WordPress Allegiant theme <= 1.2.7 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43330	high	7.1/10	WordPress PowerPack for Beaver Builder plugin < 2.37.4 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43335	medium	6.5/10	WordPress Responsive Blocks – WordPress Gutenberg Blocks plugin <= 1.8.8 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43238	high	7.1/10	WordPress weMail plugin <= 1.14.5 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-39666	medium	5.9/10	WordPress WooCommerce plugin <= 9.1.2 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43276	high	7.1/10	WordPress Child Theme Creator by Orbisius plugin <= 1.5.4 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43342	medium	6.5/10	WordPress Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43344	medium	6.5/10	WordPress Icegram Engage – Ultimate WP Popup Builder, Lead Generation, Optins, and CTA plugin <= 3.1.25 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43346	medium	6.5/10	WordPress Modal Window – create popup modal window plugin <= 6.0.3 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43347	medium	5.9/10	WordPress Button contact VR plugin <= 4.7.3 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43348	high	7.1/10	WordPress Purity Of Soul theme <= 1.9 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43349	medium	6.5/10	WordPress All Bootstrap Blocks plugin <= 1.3.19 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43351	medium	6.5/10	WordPress Bravada theme <= 1.1.2 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43352	medium	6.5/10	WordPress GivingPress Lite theme <= 1.8.6 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43353	medium	6.5/10	WordPress myCred plugin <= 2.7.2 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-7301	high	7.2/10	WordPress File Upload <= 4.24.8 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload	Aug 16, 2024 1y ago
CVE-2024-43165	medium	6.5/10	WordPress WPSection plugin <= 1.3.8 - Contributor+ Limited Local File Inclusion vulnerability	Aug 13, 2024 1y ago
CVE-2024-43160	critical	10.0/10	WordPress BerqWP plugin <= 1.7.6 - Unauthenticated Arbitrary File Upload vulnerability	Aug 13, 2024 1y ago
CVE-2024-43153	critical	9.8/10	WordPress Woffice theme <= 5.4.10 - Unauthenticated Privilege Escalation vulnerability	Aug 13, 2024 1y ago
CVE-2024-43141	critical	9.8/10	WordPress Participants Database plugin <= 2.5.9.2 - PHP Object Injection vulnerability	Aug 13, 2024 1y ago
CVE-2024-43140	high	7.5/10	WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.4 - Local File Inclusion vulnerability	Aug 13, 2024 1y ago
CVE-2024-43138	medium	6.5/10	WordPress Event Manager and Tickets Selling Plugin for WooCommerce plugin <= 4.2.1 - Local File Inclusion vulnerability	Aug 13, 2024 1y ago
CVE-2024-43135	high	7.5/10	WordPress WPCafe plugin <= 2.2.28 - Local File Inclusion vulnerability	Aug 13, 2024 1y ago
CVE-2024-43131	high	7.5/10	WordPress Docket (WooCommerce Collections / Wishlist / Watchlist) plugin < 1.7.0 - Unauthenticated Arbitrary Post/Page Deletion vulnerability	Aug 13, 2024 1y ago
CVE-2024-43129	medium	6.5/10	WordPress BetterDocs plugin <= 3.5.8 - Local File Inclusion vulnerability	Aug 13, 2024 1y ago
CVE-2024-43128	medium	6.5/10	WordPress WooCommerce Product Table Lite plugin <= 3.5.1 - Arbitrary Code Execution vulnerability	Aug 13, 2024 1y ago