Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,464

All time

Critical · Active

12,228

CVSS ≥ 9.0

New · 14 days

3,090

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 12931–12960 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-37548	medium	5.9/10	WordPress Meks Easy Ads Widget plugin <= 2.0.8 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37549	medium	5.9/10	WordPress Save as PDF plugin by Pdfcrowd plugin <= 4.0.0 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37550	medium	5.9/10	WordPress Template Kit – Export plugin <= 1.0.22 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37551	medium	5.9/10	WordPress Simple Social Share plugin <= 3.0 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37552	medium	5.9/10	WordPress Social Media Share Buttons & Social Sharing Icons plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37556	medium	5.9/10	WordPress WordPress Notification Bar plugin <= 1.3.10 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37557	medium	5.9/10	WordPress WP Cookie Law Info plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37558	medium	5.9/10	WordPress WPFavicon plugin <= 2.1.1 - Cross-Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37559	high	7.1/10	WordPress counterpoint theme <= 1.8.1 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37561	medium	5.9/10	WordPress Plugin Notes Plus plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37562	medium	5.9/10	WordPress Simple Post Notes plugin <= 1.7.7 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37563	medium	6.5/10	WordPress TOCHAT.BE plugin <= 1.3.0 - Unauthenticated Stored Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37565	medium	5.9/10	WordPress Gum Elementor Addon plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37918	medium	6.5/10	WordPress ConeBlog plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37919	medium	5.9/10	WordPress Timeline Module for Beaver Builder plugin <= 1.1.3 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37920	high	7.1/10	WordPress ARForms Form Builder plugin <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37922	medium	6.5/10	WordPress Premium Addons for Elementor plugin <= 4.10.34 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37936	medium	6.5/10	WordPress Tabs For WPBakery Page Builder plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37943	medium	5.8/10	WordPress YITH WooCommerce Ajax Product Filter plugin <= 5.1.0 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37944	medium	6.5/10	WordPress WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin <= 5.9.1 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37946	medium	5.9/10	WordPress ReCaptcha Integration for WordPress plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37947	medium	5.9/10	WordPress Tutor LMS plugin <= 2.7.2 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37948	medium	6.5/10	WordPress Caxton – Create Pro page layouts in Gutenberg plugin <= 1.30.1 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37949	medium	6.5/10	WordPress Responsive Mobile theme <= 1.15.1 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37950	medium	5.9/10	WordPress Master Popups plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37951	medium	6.5/10	WordPress Magical Posts Display plugin <= 1.2.38 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37953	high	7.1/10	WordPress MBE eShip plugin <= 2.1.2 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37954	high	7.1/10	WordPress Simple Responsive Slider plugin <= 0.2.2.5 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37955	medium	6.5/10	WordPress GutSlider – All in One Block Slider plugin <= 2.7.3 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37956	medium	6.5/10	WordPress VK All in One Expansion Unit plugin <= 9.99.1.0 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago