Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

343,859

All time

Critical · Active

11,493

CVSS ≥ 9.0

New · 14 days

2,412

Newly disclosed

Feed last synced

6 hrs ago

Data freshness

Showing 13591–13620 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-34389	medium	4.3/10	WordPress WP Post Author plugin <= 3.6.4 - Broken Access Control vulnerability	May 6, 2024 2y ago
CVE-2024-34366	medium	5.9/10	WordPress AltText.ai plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability	May 6, 2024 2y ago
CVE-2024-34369	high	7.1/10	WordPress Web Push Notifications – Webpushr plugin <= 4.35.0 - Cross Site Scripting (XSS) vulnerability	May 6, 2024 2y ago
CVE-2024-34373	medium	6.5/10	WordPress The Plus Addons for Elementor plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerability	May 6, 2024 2y ago
CVE-2024-34374	medium	6.5/10	WordPress ElementsReady Addons for Elementor plugin <= 5.8.0 - Cross Site Scripting (XSS) vulnerability	May 6, 2024 2y ago
CVE-2024-34375	medium	5.9/10	WordPress Sheets to WP Table Live Sync plugin <= 3.7.0 - Cross Site Scripting (XSS) vulnerability	May 6, 2024 2y ago
CVE-2024-34376	medium	6.5/10	WordPress Edge theme <= 2.0.9 - Cross Site Scripting (XSS) vulnerability	May 6, 2024 2y ago
CVE-2024-34380	medium	5.9/10	WordPress ChatBot Conversational Forms plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability	May 6, 2024 2y ago
CVE-2024-34381	medium	6.5/10	WordPress PropertyHive plugin <= 2.0.10 - Cross Site Scripting (XSS) vulnerability	May 6, 2024 2y ago
CVE-2024-34390	medium	6.5/10	WordPress Post Grid Master plugin <= 3.4.8 - Auth. Cross Site Scripting (XSS) vulnerability	May 6, 2024 2y ago
CVE-2024-34379	medium	4.3/10	WordPress Restaurant and Cafe theme <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability	May 6, 2024 2y ago
CVE-2024-34367	high	7.1/10	WordPress Popup Box plugin <= 4.1.2 - CSRF to XSS vulnerability	May 6, 2024 2y ago
CVE-2024-34386	high	7.6/10	WordPress Auto Affiliate Links plugin <= 6.4.3.1 - SQL Injection vulnerability	May 6, 2024 2y ago
CVE-2024-34412	high	8.5/10	WordPress ParcelPanel plugin <= 3.8.1 - Auth. SQL Injection vulnerability	May 6, 2024 2y ago
CVE-2024-34368	medium	5.3/10	WordPress Mooberry Book Manager plugin <= 4.15.12 - Sensitive Data Exposure vulnerability	May 6, 2024 2y ago
CVE-2024-34382	medium	5.3/10	WordPress Photo Gallery, Images, Slider in Rbs Image Gallery plugin <= 3.2.18 - Sensitive Data Exposure vulnerability	May 6, 2024 2y ago
CVE-2024-34383	medium	5.3/10	WordPress SEOPress plugin <= 7.7.1 - Sensitive Data Exposure vulnerability	May 6, 2024 2y ago
CVE-2024-34388	high	7.5/10	WordPress GDPR Compliance plugin <= 1.2.5 - Sensitive Data Exposure vulnerability	May 6, 2024 2y ago
CVE-2024-32807	high	8.5/10	WordPress Brevo for WooCommerce plugin <= 4.0.17 - Arbitrary File Download and Deletion vulnerability	May 6, 2024 2y ago
CVE-2024-33914	medium	4.3/10	WordPress Exclusive Addons for Elementor plugin <= 2.6.9.1 - Broken Access Control on Post Duplication vulnerability	May 3, 2024 2y ago
CVE-2024-33915	medium	4.3/10	WordPress Debug Log Manager plugin <= 2.3.1 - Broken Access Control vulnerability	May 3, 2024 2y ago
CVE-2024-33919	medium	6.5/10	WordPress RomethemeKit For Elementor plugin <= 1.4.1 - Broken Access Control vulnerability	May 3, 2024 2y ago
CVE-2024-33920	medium	5.3/10	WordPress Democracy Poll plugin <= 6.0.3 - Broken Access Control vulnerability	May 3, 2024 2y ago
CVE-2024-33921	medium	4.3/10	WordPress ReviewX plugin <= 1.6.21 - Broken Access Control vulnerability	May 3, 2024 2y ago
CVE-2024-33923	medium	6.3/10	WordPress SP Project & Document Manager plugin <= 4.69 - Broken Access Control vulnerability	May 3, 2024 2y ago
CVE-2024-33925	medium	4.3/10	WordPress Embed Google Fonts plugin <= 3.1.0 - Broken Access Control vulnerability	May 3, 2024 2y ago
CVE-2024-33929	medium	5.3/10	WordPress Directorist plugin <= 7.8.6 - Broken Access Control vulnerability	May 3, 2024 2y ago
CVE-2024-33931	medium	6.5/10	WordPress JW Player for WordPress plugin <= 2.3.3 - Broken Access Control vulnerability	May 3, 2024 2y ago
CVE-2024-33937	medium	4.3/10	WordPress Progressive WordPress (PWA) plugin <= 2.1.13 - Broken Access Control vulnerability	May 3, 2024 2y ago
CVE-2024-24710	medium	4.3/10	WordPress Feed Them Social plugin <= 4.2.0 - Broken Access Control vulnerability	May 3, 2024 2y ago