Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,464

All time

Critical · Active

12,228

CVSS ≥ 9.0

New · 14 days

3,092

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 12691–12720 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-43350	medium	5.3/10	WordPress Propovoice CRM plugin <= 1.7.6.4 - Insecure Direct Object References (IDOR) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43241	high	7.1/10	WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43244	high	7.1/10	WordPress houzez Theme By FaveThemes <= 3.2.4 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43246	high	7.1/10	WordPress WHMpress plugin <= 6.2-revision-5 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43262	medium	6.5/10	WordPress Busiprof theme <= 2.4.8 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43263	medium	6.5/10	WordPress Visual Composer Starter theme <= 3.3 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43267	medium	6.5/10	WordPress Mega Addons For Elementor plugin <= 1.9 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43278	medium	6.5/10	WordPress Meta Field Block plugin <= 1.2.13 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43279	high	7.1/10	WordPress Newsletters plugin <= 4.9.8 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43284	medium	6.5/10	WordPress WP Travel Gutenberg Blocks plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43291	medium	5.9/10	WordPress Void Contact Form 7 Widget For Elementor Page Builder plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43292	medium	5.9/10	WordPress Envo's Elementor Templates & Widgets for WooCommerce plugin <= 1.4.16 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43294	medium	6.5/10	WordPress Bold Timeline Lite plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43303	high	7.1/10	WordPress White Label CMS plugin <= 2.7.4 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43304	high	7.1/10	WordPress Cryptocurrency Widgets plugin <= 2.8.0 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43305	medium	6.5/10	WordPress Custom Layouts – Post + Product grids made easy plugin <= 1.4.11 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43306	high	7.1/10	WordPress WP-Lister Lite for eBay plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43307	medium	6.5/10	WordPress Structured Content (JSON-LD) #wpsc plugin <= 1.6.2 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43308	medium	6.5/10	WordPress Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor plugin <= 3.3.5 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43309	medium	6.5/10	WordPress WP Telegram Widget and Join Link plugin <= 2.1.27 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43313	high	7.1/10	WordPress FormFacade plugin <= 1.3.2 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43318	medium	6.5/10	WordPress E2Pdf – Export To Pdf Tool for WordPress plugin <= 1.25.05 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43320	medium	6.5/10	WordPress WPBakery Page Builder Addons plugin <= 3.9 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43321	medium	6.5/10	WordPress Team Showcase plugin <= 1.22.23 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43324	medium	5.9/10	WordPress Clever Addons for Elementor plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43327	high	7.1/10	WordPress Invite Anyone plugin <= 1.4.7 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43329	medium	6.5/10	WordPress Allegiant theme <= 1.2.7 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43330	high	7.1/10	WordPress PowerPack for Beaver Builder plugin < 2.37.4 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43335	medium	6.5/10	WordPress Responsive Blocks – WordPress Gutenberg Blocks plugin <= 1.8.8 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43238	high	7.1/10	WordPress weMail plugin <= 1.14.5 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago