Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

343,705

All time

Critical · Active

11,479

CVSS ≥ 9.0

New · 14 days

2,537

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 12451–12480 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-43152	medium	5.9/10	WordPress 3D FlipBook plugin <= 1.15.6 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 1y ago
CVE-2024-43155	medium	6.5/10	WordPress ComboBlocks plugin <= 2.2.86 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 1y ago
CVE-2024-43156	high	7.1/10	WordPress Post Grid Master plugin <= 3.4.10 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 1y ago
CVE-2024-43161	medium	5.9/10	WordPress Slider & Popup Builder by Depicter plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 1y ago
CVE-2024-43163	high	7.1/10	WordPress ParcelPanel plugin <= 4.3.2 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 1y ago
CVE-2024-43164	medium	6.5/10	WordPress Blockspare plugin <= 3.2.0 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 1y ago
CVE-2024-7590	medium	6.5/10	WordPress Spectra plugin<= 2.14.1 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 1y ago
CVE-2024-43210	medium	6.5/10	WordPress LA-Studio Element Kit for Elementor plugin <= 1.3.9.2 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 1y ago
CVE-2024-43213	high	7.1/10	WordPress MultiVendorX Marketplace plugin <= 4.1.17 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 1y ago
CVE-2024-43216	medium	6.5/10	WordPress Filr plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 1y ago
CVE-2024-43217	high	7.1/10	WordPress Kodex Posts likes plugin <= 2.5.0 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 1y ago
CVE-2024-43218	medium	6.5/10	WordPress Mediavine Control Panel plugin <= 2.10.4 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 1y ago
CVE-2024-43220	high	7.1/10	WordPress Form Maker by 10Web plugin <= 1.15.26 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 1y ago
CVE-2024-43224	medium	6.5/10	WordPress YaMaps for WordPress Plugin plugin <= 0.6.27 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 1y ago
CVE-2024-43225	medium	6.5/10	WordPress Enter Addons plugin <= 2.1.7 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 1y ago
CVE-2024-43226	medium	6.5/10	WordPress WP Dashboard Notes plugin <= 1.0.11 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 1y ago
CVE-2024-43227	medium	6.5/10	WordPress BetterDocs – Best Documentation, FAQ & Knowledge Base Plugin with AI Support & Instant Answer for Elementor & Gutenberg plugin <= 3.5.8 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 1y ago
CVE-2024-43231	medium	6.5/10	WordPress Tutor LMS plugin <= 2.7.3 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 1y ago
CVE-2024-43233	high	7.1/10	WordPress BSK Forms Blacklist plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 1y ago
CVE-2024-7548	high	8.8/10	LearnPress – WordPress LMS Plugin <= 4.2.6.9.3 - Authenticated (Contributor+) SQL Injection via order Parameter	Aug 8, 2024 1y ago
CVE-2024-5668	medium	6.4/10	Lightbox & Modal Popup WordPress Plugin – FooBox <= 2.7.28 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via HTML Data Attributes	Aug 8, 2024 1y ago
CVE-2024-41816	medium	5.4/10	WordPress Cooked Plugin Persistent Cross-Site Scripting via Shortcode	Aug 5, 2024 2y ago
CVE-2024-38776	high	7.1/10	WordPress WP GoToWebinar plugin <= 15.7 - CSRF to XSS vulnerability	Aug 2, 2024 2y ago
CVE-2024-3238	high	8.8/10	WordPress Menu Plugin — Superfly Responsive Menu <= 5.0.29 - Cross-Site Request Forgery to Arbitrary File Deletion	Aug 2, 2024 2y ago
CVE-2024-39626	medium	5.9/10	WordPress Pretty Simple Popup Builder plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability	Aug 1, 2024 2y ago
CVE-2024-39627	medium	5.9/10	WordPress Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin <= 3.59.3 - Cross Site Scripting (XSS) vulnerability	Aug 1, 2024 2y ago
CVE-2024-39629	medium	5.9/10	WordPress Himalayas theme <= 1.3.2 - Cross Site Scripting (XSS) vulnerability	Aug 1, 2024 2y ago
CVE-2024-39631	high	7.1/10	WordPress Contest Gallery plugin <= 23.1.2 - Cross Site Scripting (XSS) vulnerability	Aug 1, 2024 2y ago
CVE-2024-39643	medium	5.8/10	WordPress RegistrationMagic plugin <= 6.0.0.1 - Cross Site Scripting (XSS) vulnerability	Aug 1, 2024 2y ago
CVE-2024-39644	medium	6.5/10	WordPress Black Widgets For Elementor plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability	Aug 1, 2024 2y ago