Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,464

All time

Critical · Active

12,228

CVSS ≥ 9.0

New · 14 days

3,090

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 12871–12900 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-37246	medium	6.5/10	WordPress Gallery Slideshow plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37257	high	7.1/10	WordPress Permalink Manager Lite plugin <= 2.4.3.3 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37258	high	7.1/10	WordPress Social Rocket plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37259	high	7.1/10	WordPress WP Extended plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37261	high	7.1/10	WordPress WP-Lister Lite for Amazon plugin <= 2.6.16 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37262	high	7.1/10	WordPress Online Booking & Scheduling Calendar plugin <= 4.4.2 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37263	medium	6.5/10	WordPress Enter Addons – Ultimate Template Builder for Elementor plugin <= 2.1.6 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37264	high	7.1/10	WordPress Groundhogg plugin <= 3.4.2.3 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37265	medium	6.5/10	WordPress IdeaPush plugin <= 8.60 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37267	high	7.1/10	WordPress Striking theme <= 2.3.4 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37271	medium	5.9/10	WordPress Print My Blog plugin <= 3.27.0 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37275	high	7.1/10	WordPress NextScripts plugin <= 4.4.7 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37278	medium	5.9/10	WordPress Cards for Beaver Builder plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37409	medium	5.9/10	WordPress PowerPack Lite for Beaver Builder plugin <= 1.3.0.4 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37414	medium	5.9/10	WordPress Depicter Slider plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37416	high	7.1/10	WordPress WP Photo Album Plus plugin <= 8.8.00.002 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37422	medium	6.5/10	WordPress Progress Planner plugin <= 0.9.2 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37428	medium	6.5/10	WordPress All-in-One Addons for Elementor – WidgetKit plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37429	medium	5.9/10	WordPress Login with phone number plugin <= 1.7.35 - Admin+ Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37432	medium	5.9/10	WordPress Esteem theme <= 1.5.0 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37433	high	7.1/10	WordPress Mailster plugin <= 4.0.9 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37434	medium	5.9/10	WordPress Atarim plugin <= 3.31 - Authenticated Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37436	high	7.1/10	WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37445	medium	6.5/10	WordPress HTML5 Audio Player plugin <= 2.2.23 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-5004	—	—	CM Popup Plugin for WordPress < 1.6.6 - Contributor+ Stored XSS	Jul 22, 2024 2y ago
CVE-2024-37446	medium	5.9/10	WordPress Chained Quiz plugin <= 1.3.2.8 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37447	medium	5.9/10	WordPress PixelYourSite plugin <= 9.6.1.1 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37449	medium	5.9/10	WordPress Slider Revolution plugin <= 6.7.13 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37457	medium	6.5/10	WordPress Ultimate Blocks – WordPress Blocks Plugin plugin <= 3.1.9 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37459	high	7.1/10	WordPress PayPlus Payment Gateway plugin <= 6.6.8 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago