Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

343,859

All time

Critical · Active

11,493

CVSS ≥ 9.0

New · 14 days

2,428

Newly disclosed

Feed last synced

5 hrs ago

Data freshness

Showing 13411–13440 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-30540	medium	5.3/10	WordPress VS Contact Form plugin <= 14.7 - Sum Captcha Bypass vulnerability	May 17, 2024 2y ago
CVE-2024-31295	medium	5.3/10	WordPress Captcha by BestWebSoft plugin <= 5.2.0 - Captcha Bypass vulnerability	May 17, 2024 2y ago
CVE-2024-31341	medium	5.3/10	WordPress User Profile Builder plugin <= 3.11.2 - Bypass Vulnerability vulnerability	May 17, 2024 2y ago
CVE-2024-32131	medium	5.3/10	WordPress Download Manager plugin <= 3.2.82 - File Password Lock Bypass vulnerability	May 17, 2024 2y ago
CVE-2024-32790	medium	4.3/10	WordPress Pricing Table by Supsystic plugin <= 1.9.12 - Content Injection vulnerability	May 17, 2024 2y ago
CVE-2024-33549	high	8.8/10	WordPress WZone plugin <= 14.0.10 - Privilege Escalation vulnerability	May 17, 2024 2y ago
CVE-2024-33550	high	8.8/10	WordPress WP Masquerade plugin <= 1.1.0 - Authenticated Account Takeover vulnerability	May 17, 2024 2y ago
CVE-2024-33552	critical	9.8/10	WordPress XStore Core plugin <= 5.3.8 - Unauthenticated Account Takeover vulnerability	May 17, 2024 2y ago
CVE-2024-33567	critical	9.8/10	WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.5.3 - Unauthenticated Privilege Escalation vulnerability	May 17, 2024 2y ago
CVE-2024-33569	high	7.2/10	WordPress Instant Images plugin <= 6.1.0 - Arbitrary Option Update to Privilege Escalation vulnerability	May 17, 2024 2y ago
CVE-2024-33644	critical	9.9/10	WordPress Customify Site Library plugin <= 0.0.9 - Remote Code Execution (RCE) vulnerability	May 17, 2024 2y ago
CVE-2024-33917	medium	5.3/10	WordPress WTI Like Post plugin <= 1.4.6 - IP Restriction Bypass Vulnerability vulnerability	May 17, 2024 2y ago
CVE-2024-34370	high	7.2/10	WordPress EAN for WooCommerce plugin <= 4.8.9 - Arbitrary Option Update to Privilege Escalation vulnerability	May 17, 2024 2y ago
CVE-2024-34434	medium	6.5/10	WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3.2 - Arbitrary Shortcode Execution vulnerability	May 17, 2024 2y ago
CVE-2023-41957	high	8.6/10	WordPress Simple Membership plugin <= 4.3.4 - Unauthenticated Membership Role Privilege Escalation vulnerability	May 17, 2024 2y ago
CVE-2023-41956	high	8.8/10	WordPress Simple Membership plugin <= 4.3.4 - Authenticated Account Takeover vulnerability	May 17, 2024 2y ago
CVE-2023-41955	high	8.8/10	WordPress Essential Addons for Elementor plugin <= 5.8.8 - Contributor+ Privilege Escalation vulnerability	May 17, 2024 2y ago
CVE-2023-41954	high	8.6/10	WordPress ProfilePress plugin <= 4.13.1 - Unauthenticated Limited Privilege Escalation vulnerability	May 17, 2024 2y ago
CVE-2023-41665	high	8.8/10	WordPress GiveWP plugin <= 2.33.0 - GiveWP Manager+ Privilege Escalation vulnerability	May 17, 2024 2y ago
CVE-2023-41243	high	8.8/10	WordPress WPvivid Backup Plugin plugin <= 0.9.90 - Privilege Escalation on Staging Environment vulnerability	May 17, 2024 2y ago
CVE-2023-39163	high	8.6/10	WordPress Phlox Shop plugin <= 2.0.0 - Unauthenticated Local File Inclusion vulnerability	May 17, 2024 2y ago
CVE-2023-38399	high	8.6/10	WordPress Phlox Portfolio plugin <= 2.3.1 - Unauthenticated Local File Inclusion vulnerability	May 17, 2024 2y ago
CVE-2023-37999	critical	9.8/10	WordPress HT Mega Absolute Addons for Elementor plugin <= 2.2.0 - Unauthenticated Privilege Escalation vulnerability	May 17, 2024 2y ago
CVE-2023-37888	high	7.6/10	WordPress Phlox Core Elements plugin <= 2.14.0 - Unauthenticated Local File Inclusion vulnerability	May 17, 2024 2y ago
CVE-2023-37866	high	7.2/10	WordPress JetFormBuilder plugin <= 3.0.8 - Authenticated Privilege Escalation vulnerability	May 17, 2024 2y ago
CVE-2023-37389	high	8.8/10	WordPress Booking Package SAASPROJECT plugin <= 1.5.98 - Unauthenticated Privilege Escalation vulnerability	May 17, 2024 2y ago
CVE-2023-37385	high	7.3/10	WordPress Consulting theme <= 6.5.6 - Local File Inclusion	May 17, 2024 2y ago
CVE-2023-35881	high	7.6/10	WordPress WooCommerce One Page Checkout plugin <= 2.3.0 - Local File Inclusion vulnerability	May 17, 2024 2y ago
CVE-2023-34186	medium	5.3/10	WordPress Headless CMS plugin <= 2.0.3 - Broken Authentication vulnerability	May 17, 2024 2y ago
CVE-2023-33321	medium	5.3/10	WordPress EventPrime plugin <= 2.8.6 - Sensitive Data Exposure	May 17, 2024 2y ago