Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,464

All time

Critical · Active

12,228

CVSS ≥ 9.0

New · 14 days

3,092

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 12601–12630 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-43941	critical	9.3/10	WordPress Propovoice Pro plugin <= 1.7.0.3 - Unauthenticated SQL Injection vulnerability	Aug 29, 2024 2y ago
CVE-2024-43940	medium	6.5/10	WordPress Z Y N I T H plugin <= 7.4.9 - Unauthenticated Plugin Settings Change vulnerability	Aug 29, 2024 2y ago
CVE-2024-43939	medium	6.5/10	WordPress Z Y N I T H plugin <= 7.4.9 - Unauthenticated Arbitrary Option Deletion vulnerability	Aug 29, 2024 2y ago
CVE-2024-43931	critical	9.8/10	WordPress JobSearch WP Job Board WordPress Plugin plugin <= 2.5.3 - PHP Object Injection vulnerability	Aug 29, 2024 2y ago
CVE-2024-43922	medium	4.8/10	WordPress NitroPack plugin <= 1.16.7 - Unauthenticated Arbitrary Shortcode Execution vulnerability	Aug 29, 2024 2y ago
CVE-2024-43918	critical	10.0/10	WordPress WBW Product Table PRO plugin <= 1.9.4 - Unauthenticated Arbitrary SQL Query Execution vulnerability	Aug 29, 2024 2y ago
CVE-2024-43917	critical	9.3/10	WordPress TI WooCommerce Wishlist plugin <= 2.8.2 - SQL Injection vulnerability	Aug 29, 2024 2y ago
CVE-2024-43144	critical	9.3/10	WordPress Cost Calculator Builder plugin <= 3.2.15 - SQL Injection vulnerability	Aug 29, 2024 2y ago
CVE-2024-43132	critical	9.3/10	WordPress Docket (WooCommerce Collections / Wishlist / Watchlist) plugin < 1.7.0 - Unauthenticated SQL Injection vulnerability	Aug 29, 2024 2y ago
CVE-2024-39658	high	7.6/10	WordPress Salon Booking System plugin <= 10.7 - Authenticated SQL Injection vulnerability	Aug 29, 2024 2y ago
CVE-2024-39653	critical	9.3/10	WordPress VikRentCar Car Rental Management System plugin <= 1.4.0 - SQL Injection vulnerability	Aug 29, 2024 2y ago
CVE-2024-39638	high	8.5/10	WordPress Registrations for the Events Calendar plugin <= 2.12.2 - SQL Injection vulnerability	Aug 29, 2024 2y ago
CVE-2024-39622	critical	9.3/10	WordPress ListingPro theme <= 2.9.4 - Unauthenticated SQL Injection vulnerability	Aug 29, 2024 2y ago
CVE-2024-39620	high	8.5/10	WordPress ListingPro plugin <= 2.9.4 - SQL Injection vulnerability	Aug 29, 2024 2y ago
CVE-2024-38795	critical	9.3/10	WordPress ListingPro plugin <= 2.9.4 - Unauthenticated SQL Injection vulnerability	Aug 29, 2024 2y ago
CVE-2024-38793	high	8.5/10	WordPress Best Restaurant Menu by Pricelisto plugin <= 1.4.1 - SQL Injection vulnerability	Aug 29, 2024 2y ago
CVE-2024-38693	high	7.6/10	WordPress WP User Frontend plugin <= 4.0.7 - SQL Injection vulnerability	Aug 29, 2024 2y ago
CVE-2024-5057	critical	9.3/10	WordPress Easy Digital Downloads plugin <= 3.2.12 - SQL Injection vulnerability	Aug 29, 2024 2y ago
CVE-2024-43986	medium	5.9/10	WordPress E-cab taxi booking manager plugin <=1.0.9 - Cross Site Scripting (XSS) vulnerability	Aug 29, 2024 2y ago
CVE-2024-39628	medium	5.4/10	WordPress Ninja Forms plugin <= 3.8.6 - Cross Site Request Forgery (CSRF) vulnerability	Aug 26, 2024 2y ago
CVE-2024-39641	medium	4.3/10	WordPress LearnPress plugin <= 4.2.6.8.2 - Cross Site Request Forgery (CSRF) vulnerability	Aug 26, 2024 2y ago
CVE-2024-39645	medium	5.4/10	WordPress Tutor LMS plugin <= 2.7.2 - Cross Site Request Forgery (CSRF) vulnerability	Aug 26, 2024 2y ago
CVE-2024-39657	medium	4.3/10	WordPress Sender plugin <= 2.6.18 - Cross Site Request Forgery (CSRF) vulnerability	Aug 26, 2024 2y ago
CVE-2024-43116	medium	4.3/10	WordPress Simple Local Avatars plugin <= 2.7.10 - Cross Site Request Forgery (CSRF) vulnerability	Aug 26, 2024 2y ago
CVE-2024-43117	medium	4.3/10	WordPress Hummingbird plugin <= 3.9.1 - Cross Site Request Forgery (CSRF) vulnerability	Aug 26, 2024 2y ago
CVE-2024-43265	medium	4.3/10	WordPress Analytify plugin <= 5.3.1 - CSRF Leading to Optout Vulnerability	Aug 26, 2024 2y ago
CVE-2024-43269	medium	4.3/10	WordPress Backup and Restore WordPress plugin <= 1.50 - Cross Site Request Forgery (CSRF) vulnerability	Aug 26, 2024 2y ago
CVE-2024-43287	medium	4.3/10	WordPress Brevo plugin <= 3.1.82 - Cross Site Request Forgery (CSRF) vulnerability	Aug 26, 2024 2y ago
CVE-2024-43295	medium	4.3/10	WordPress WP Data Access plugin <= 5.5.7 - Cross Site Request Forgery (CSRF) vulnerability	Aug 26, 2024 2y ago
CVE-2024-43299	medium	5.4/10	WordPress SpeedyCache plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerability	Aug 26, 2024 2y ago