Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

343,859

All time

Critical · Active

11,493

CVSS ≥ 9.0

New · 14 days

2,412

Newly disclosed

Feed last synced

6 hrs ago

Data freshness

Showing 13501–13530 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-31113	medium	4.3/10	WordPress Easy Digital Downloads plugin <= 3.2.11 - Cross Site Request Forgery (CSRF) vulnerability	May 10, 2024 2y ago
CVE-2024-4444	medium	5.3/10	LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Bypass to User Registration	May 10, 2024 2y ago
CVE-2024-4434	critical	9.8/10	LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Time-Based SQL Injection	May 10, 2024 2y ago
CVE-2024-4689	medium	4.3/10	WordPress ShortPixel Adaptive Images plugin <= 3.8.3 - Cross Site Request Forgery (CSRF) vulnerability	May 10, 2024 2y ago
CVE-2024-34823	medium	4.3/10	WordPress Arigato Autoresponder and Newsletter plugin <= 2.7.2.3 - Cross Site Request Forgery (CSRF) vulnerability	May 10, 2024 2y ago
CVE-2024-34825	medium	4.3/10	WordPress Social Warfare plugin <= 4.4.5.1 - Cross Site Request Forgery (CSRF) vulnerability	May 10, 2024 2y ago
CVE-2024-34827	medium	4.3/10	WordPress Translate Multilingual sites – TranslatePress plugin <= 2.7.5 - Cross Site Request Forgery (CSRF) vulnerability	May 10, 2024 2y ago
CVE-2024-34828	medium	4.3/10	WordPress Church Admin plugin <= 4.1.32 - Cross Site Request Forgery (CSRF) vulnerability	May 10, 2024 2y ago
CVE-2024-4398	medium	6.4/10	HTML5 Audio Player- Best WordPress Audio Player Plugin <= 2.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets	May 10, 2024 2y ago
CVE-2024-4397	high	8.8/10	LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Authenticated (Instructor+) Arbitrary File Upload	May 9, 2024 2y ago
CVE-2024-1467	medium	4.3/10	Starter Templates — Elementor, WordPress & Beaver Builder Templates <= 4.1.6 - Authenticated (Contributor+) Server-Side Request Forgery	May 9, 2024 2y ago
CVE-2024-4082	medium	4.3/10	Joli FAQ SEO – WordPress FAQ Plugin <= 1.3.2 - Cross-Site Request Forgery	May 9, 2024 2y ago
CVE-2024-3923	medium	6.4/10	Beaver Builder – WordPress Page Builder <= 2.8.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting	May 9, 2024 2y ago
CVE-2024-4312	medium	4.3/10	Soccer Engine – Soccer Plugin for WordPress <= 1.12 - Cross-Site Request Forgery	May 9, 2024 2y ago
CVE-2024-32712	high	7.5/10	WordPress Podlove Podcast Publisher plugin <= 4.0.14 - Broken Access Control vulnerability	May 9, 2024 2y ago
CVE-2024-32717	medium	6.5/10	WordPress SchedulePress plugin <= 5.0.8 - Broken Access Control vulnerability	May 9, 2024 2y ago
CVE-2024-32719	medium	5.3/10	WordPress WP Club Manager plugin <= 2.2.11 - Broken Access Control vulnerability	May 9, 2024 2y ago
CVE-2024-32724	high	7.5/10	WordPress SharkDropship and Affiliate for AliExpress, eBay, Amazon, Etsy plugin <= 2.1.1 - Arbitrary Content Deletion vulnerability	May 9, 2024 2y ago
CVE-2024-34549	medium	5.3/10	WordPress WP Job Manager plugin <= 2.2.2 - Sensitive Data Exposure vulnerability	May 9, 2024 2y ago
CVE-2024-34550	medium	5.3/10	WordPress Dynamics 365 Integration plugin <= 1.3.17 - Sensitive Data Exposure vulnerability	May 9, 2024 2y ago
CVE-2024-34556	medium	5.3/10	WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.5.4 - Sensitive Data Exposure via Exported File vulnerability	May 9, 2024 2y ago
CVE-2024-34559	high	7.5/10	WordPress Ghost plugin <= 1.4.0 - Sensitive Data Exposure via Log File vulnerability	May 9, 2024 2y ago
CVE-2024-34433	medium	4.4/10	WordPress One Click Demo Import plugin <=3.2.0 - PHP Object Injection vulnerability	May 9, 2024 2y ago
CVE-2024-4606	medium	5.4/10	WordPress Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder plugin <= 2.0.3 - PHP Object Injection vulnerability	May 9, 2024 2y ago
CVE-2024-34439	medium	4.3/10	WordPress DS Site Message plugin <= 1.14.4 - Cross Site Request Forgery (CSRF) vulnerability	May 9, 2024 2y ago
CVE-2024-34427	medium	4.3/10	WordPress WP Favorite Posts plugin <= 1.6.8 - Cross Site Request Forgery (CSRF) vulnerability	May 9, 2024 2y ago
CVE-2024-34557	medium	4.3/10	WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.5.4 - Cross Site Request Forgery (CSRF) vulnerability	May 9, 2024 2y ago
CVE-2024-29800	high	8.0/10	WordPress Timber plugin <= 1.23.0 - Deserialization of untrusted data vulnerability	May 9, 2024 2y ago
CVE-2024-34415	medium	6.5/10	WordPress Thim Elementor Kit plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability	May 9, 2024 2y ago
CVE-2024-34417	medium	5.9/10	WordPress Viet Nam Affiliate plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability	May 9, 2024 2y ago