Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,464

All time

Critical · Active

12,228

CVSS ≥ 9.0

New · 14 days

3,091

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 12751–12780 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-38747	high	7.5/10	WordPress HitPay Payment Gateway for WooCommerce plugin <= 4.1.3 - Sensitive Data Exposure via Log File vulnerability	Aug 13, 2024 2y ago
CVE-2024-38742	medium	5.3/10	WordPress MBE eShip plugin <= 2.1.2 - Sensitive Data Exposure vulnerability	Aug 13, 2024 2y ago
CVE-2024-38724	high	7.1/10	WordPress Contact Form 7 Summary and Print plugin <= 1.2.5 - Cross Site Request Forgery (CSRF) to XSS vulnerability	Aug 13, 2024 2y ago
CVE-2024-38699	high	7.5/10	WordPress Wallet System for WooCommerce plugin <= 2.5.13 - Sensitive Data Exposure via Exported File vulnerability	Aug 13, 2024 2y ago
CVE-2024-37935	high	7.5/10	WordPress Woocommerce OpenPos plugin <= 6.4.4 - Unauthenticated Sensitive Data Exposure vulnerability	Aug 13, 2024 2y ago
CVE-2024-37930	medium	5.3/10	WordPress SmartMag theme < 10.1.0 - Sensitive Data Exposure via Log File vulnerability	Aug 12, 2024 2y ago
CVE-2024-37924	medium	5.3/10	WordPress WP2Speed Faster – Optimize PageSpeed Insights Score 90-100 plugin <= 1.0.1 - Sensitive Data Exposure vulnerability	Aug 12, 2024 2y ago
CVE-2024-35775	medium	5.9/10	WordPress Slider by Soliloquy plugin <= 2.7.6 - Broken Access Control to XSS vulnerability	Aug 12, 2024 2y ago
CVE-2024-43123	medium	6.5/10	WordPress Card Elements for Elementor plugin <= 1.2.2 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 2y ago
CVE-2024-43124	medium	6.5/10	WordPress Graphina plugin <= 1.8.10 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 2y ago
CVE-2024-43125	medium	6.5/10	WordPress WP Table Builder plugin <= 1.4.15 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 2y ago
CVE-2024-43126	high	7.1/10	WordPress Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce plugin <= 2.6.14 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 2y ago
CVE-2024-43127	high	7.1/10	WordPress Products, Order & Customers Export for WooCommerce plugin <= 2.0.11 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 2y ago
CVE-2024-43130	medium	5.9/10	WordPress Football Pool plugin <= 2.11.10 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 2y ago
CVE-2024-43133	medium	6.5/10	WordPress Themify Shortcodes plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 2y ago
CVE-2024-43137	medium	5.9/10	WordPress WappPress Basic plugin <= 6.0.4 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 2y ago
CVE-2024-43139	medium	6.5/10	WordPress Football Pool plugin <= 2.11.9 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 2y ago
CVE-2024-43147	medium	6.5/10	WordPress Selection Lite plugin <= 1.11 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 2y ago
CVE-2024-43148	medium	5.9/10	WordPress StreamCast <= 2.2.3 - Stored Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 2y ago
CVE-2024-43149	medium	6.5/10	WordPress CM Tooltip Glossary Plugin <= 4.3.7 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 2y ago
CVE-2024-43150	medium	6.5/10	WordPress Xpro Elementor Addons plugin <= 1.4.4.2 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 2y ago
CVE-2024-43151	medium	6.5/10	WordPress Ultimate Addons for Beaver Builder – Lite plugin <= 1.5.9 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 2y ago
CVE-2024-43152	medium	5.9/10	WordPress 3D FlipBook plugin <= 1.15.6 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 2y ago
CVE-2024-43155	medium	6.5/10	WordPress ComboBlocks plugin <= 2.2.86 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 2y ago
CVE-2024-43156	high	7.1/10	WordPress Post Grid Master plugin <= 3.4.10 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 2y ago
CVE-2024-43161	medium	5.9/10	WordPress Slider & Popup Builder by Depicter plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 2y ago
CVE-2024-43163	high	7.1/10	WordPress ParcelPanel plugin <= 4.3.2 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 2y ago
CVE-2024-43164	medium	6.5/10	WordPress Blockspare plugin <= 3.2.0 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 2y ago
CVE-2024-7590	medium	6.5/10	WordPress Spectra plugin<= 2.14.1 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 2y ago
CVE-2024-43210	medium	6.5/10	WordPress LA-Studio Element Kit for Elementor plugin <= 1.3.9.2 - Cross Site Scripting (XSS) vulnerability	Aug 12, 2024 2y ago