Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

343,859

All time

Critical · Active

11,493

CVSS ≥ 9.0

New · 14 days

2,438

Newly disclosed

Feed last synced

5 hrs ago

Data freshness

Showing 13321–13350 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-1814	medium	6.4/10	Spectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial Block	May 23, 2024 2y ago
CVE-2024-1815	medium	6.4/10	Spectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Gallery Block	May 23, 2024 2y ago
CVE-2024-4706	medium	6.4/10	WordPress + Microsoft Office 365 / Azure AD \| LOGIN <= 27.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via pintra Shortcode	May 23, 2024 2y ago
CVE-2024-3626	medium	4.3/10	Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.17 - Missing Authorization	May 23, 2024 2y ago
CVE-2024-4895	medium	4.7/10	wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 3.4.2.12 - Unauthenticated Stored Cross-Site Scripting via CSV Import	May 23, 2024 2y ago
CVE-2024-4443	critical	9.8/10	Business Directory Plugin – Easy Listing Directories for WordPress <= 6.4.2 - Unauthenticated SQL Injection via listingfields Parameter	May 22, 2024 2y ago
CVE-2024-3611	medium	6.4/10	Toolbar Extras for Elementor & More – WordPress Admin Bar Enhanced <= 1.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting	May 22, 2024 2y ago
CVE-2024-4971	medium	6.4/10	LearnPress – WordPress LMS Plugin <= 4.2.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter	May 22, 2024 2y ago
CVE-2024-3268	medium	5.3/10	YouTube Video Gallery by YouTube Showcase – Video Gallery Plugin for WordPress <= 3.3.6 - Missing Authorization to Arbitrary Post/Page Creation	May 21, 2024 2y ago
CVE-2024-4700	medium	6.4/10	WP Table Builder – WordPress Table Plugin <= 1.4.14 - Authenticated (Contributor+) Stored Cross-Site Scripting	May 21, 2024 2y ago
CVE-2024-4566	high	7.1/10	ShopLentor <= 2.8.8 - Missing Authorization to WordPress Option Modification	May 21, 2024 2y ago
CVE-2024-4849	medium	6.4/10	WordPress Automatic <= 3.94.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via autoplay Parameter	May 18, 2024 2y ago
CVE-2024-35174	medium	5.3/10	WordPress Flo Forms plugin <= 1.0.42 - Broken Access Control vulnerability	May 17, 2024 2y ago
CVE-2024-34755	medium	4.3/10	WordPress Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin <= 1.3.9 - Cross Site Request Forgery (CSRF) vulnerability	May 17, 2024 2y ago
CVE-2024-34756	medium	4.3/10	WordPress Integration for HubSpot and Contact Form 7 plugin <= 1.3.1 - Cross Site Request Forgery (CSRF) vulnerability	May 17, 2024 2y ago
CVE-2024-34806	medium	4.3/10	WordPress Clearfy Cache plugin <= 2.2.1 - Cross Site Request Forgery (CSRF) vulnerability	May 17, 2024 2y ago
CVE-2024-34807	medium	4.3/10	WordPress Fast Custom Social Share by CodeBard plugin <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerability	May 17, 2024 2y ago
CVE-2024-34809	medium	4.3/10	WordPress EmpowerWP theme <= 1.0.21 - Cross Site Request Forgery (CSRF) vulnerability	May 17, 2024 2y ago
CVE-2024-32960	high	8.8/10	WordPress Booking Ultra Pro plugin 1.1.12 - Privilege Escalation vulnerability	May 17, 2024 2y ago
CVE-2024-32959	high	8.8/10	WordPress Sirv plugin <= 7.2.2 - Arbitrary Option Update to Privilege Escalation vulnerability	May 17, 2024 2y ago
CVE-2024-32830	high	8.6/10	WordPress buddyforms plugin <= 2.8.8- Arbitrary File Read and SSRF vulnerability	May 17, 2024 2y ago
CVE-2024-32827	medium	5.3/10	WordPress Giveaways and Contests by RafflePress plugin <= 1.12.7 - IP Restriction Bypass vulnerability	May 17, 2024 2y ago
CVE-2024-32809	critical	10.0/10	WordPress ActiveDEMAND plugin <= 0.2.41 - Arbitrary File Upload vulnerability	May 17, 2024 2y ago
CVE-2024-32802	medium	5.3/10	WordPress Better Messages plugin <= 2.4.32 - Broken Authentication vulnerability	May 17, 2024 2y ago
CVE-2024-32786	medium	5.3/10	WordPress Royal Elementor Addons and Templates plugin <= 1.3.93 - IP Bypass vulnerability	May 17, 2024 2y ago
CVE-2024-32774	medium	4.3/10	WordPress ProfileGrid plugin <= 5.8.2 - Group Members Limit Bypass vulnerability	May 17, 2024 2y ago
CVE-2024-32720	medium	5.3/10	WordPress Appointment Hour Booking plugin <= 1.4.56 - Captcha Bypass vulnerability	May 17, 2024 2y ago
CVE-2024-32708	low	3.7/10	WordPress Maintenance Mode plugin <= 3.0.1 - IP Bypass vulnerability	May 17, 2024 2y ago
CVE-2024-32692	high	8.2/10	WordPress Chauffeur Taxi Booking System for WordPress plugin <= 6.9 - Broken Authentication vulnerability	May 17, 2024 2y ago
CVE-2024-32685	medium	5.3/10	WordPress WP Ultimate Review plugin <= 2.2.5 - Review Score Manipulation vulnerability	May 17, 2024 2y ago