Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

343,705

All time

Critical · Active

11,479

CVSS ≥ 9.0

New · 14 days

2,531

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 12541–12570 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-37217	medium	6.5/10	WordPress Empty Cart Button for WooCommerce plugin <= 1.3.8 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37219	medium	6.5/10	WordPress Page Builder Sandwich plugin <= 5.1.0 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37221	medium	6.5/10	WordPress Kimili Flash Embed plugin <= 2.5.3 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37223	medium	6.5/10	WordPress Restaurant Reservations plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37229	medium	6.5/10	WordPress Blogmentor – Blog Layouts for Elementor plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37239	medium	5.9/10	WordPress Branda plugin <= 3.4.17 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37244	medium	6.5/10	WordPress Ninja Beaver Add-ons for Beaver Builder plugin <= 2.4.5 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37245	high	7.1/10	WordPress All In One Redirection plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37246	medium	6.5/10	WordPress Gallery Slideshow plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37257	high	7.1/10	WordPress Permalink Manager Lite plugin <= 2.4.3.3 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37258	high	7.1/10	WordPress Social Rocket plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37259	high	7.1/10	WordPress WP Extended plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37261	high	7.1/10	WordPress WP-Lister Lite for Amazon plugin <= 2.6.16 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37262	high	7.1/10	WordPress Online Booking & Scheduling Calendar plugin <= 4.4.2 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37263	medium	6.5/10	WordPress Enter Addons – Ultimate Template Builder for Elementor plugin <= 2.1.6 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37264	high	7.1/10	WordPress Groundhogg plugin <= 3.4.2.3 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37265	medium	6.5/10	WordPress IdeaPush plugin <= 8.60 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37267	high	7.1/10	WordPress Striking theme <= 2.3.4 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37271	medium	5.9/10	WordPress Print My Blog plugin <= 3.27.0 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37275	high	7.1/10	WordPress NextScripts plugin <= 4.4.7 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37278	medium	5.9/10	WordPress Cards for Beaver Builder plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37409	medium	5.9/10	WordPress PowerPack Lite for Beaver Builder plugin <= 1.3.0.4 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37414	medium	5.9/10	WordPress Depicter Slider plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37416	high	7.1/10	WordPress WP Photo Album Plus plugin <= 8.8.00.002 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37422	medium	6.5/10	WordPress Progress Planner plugin <= 0.9.2 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37428	medium	6.5/10	WordPress All-in-One Addons for Elementor – WidgetKit plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37429	medium	5.9/10	WordPress Login with phone number plugin <= 1.7.35 - Admin+ Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37432	medium	5.9/10	WordPress Esteem theme <= 1.5.0 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37433	high	7.1/10	WordPress Mailster plugin <= 4.0.9 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37434	medium	5.9/10	WordPress Atarim plugin <= 3.31 - Authenticated Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago