Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,503

All time

Critical · Active

12,230

CVSS ≥ 9.0

New · 14 days

3,118

Newly disclosed

Feed last synced

38 mins ago

Data freshness

Showing 13861–13890 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-34569	medium	6.5/10	WordPress Zotpress plugin <= 7.3.9 - Cross Site Scripting (XSS) vulnerability	May 8, 2024 2y ago
CVE-2024-34570	medium	5.9/10	WordPress Xpro Elementor Addons plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability	May 8, 2024 2y ago
CVE-2024-34571	medium	6.5/10	WordPress Himalayas theme <= 1.3.0 - Cross Site Scripting (XSS) vulnerability	May 8, 2024 2y ago
CVE-2024-34572	medium	6.5/10	WordPress Fancy Elementor Flipbox plugin <= 2.4.2 - Cross Site Scripting (XSS) vulnerability	May 8, 2024 2y ago
CVE-2024-34573	medium	6.5/10	WordPress Pootle Pagebuilder plugin <= 5.7.1 - Cross Site Scripting (XSS) vulnerability	May 8, 2024 2y ago
CVE-2024-34574	medium	5.9/10	WordPress Table Maker plugin <= 1.9.1 - Cross Site Scripting (XSS) vulnerability	May 8, 2024 2y ago
CVE-2023-41651	medium	6.5/10	WordPress Multi-column Tag Map plugin <= 17.0.26 - Broken Access Control vulnerability	May 8, 2024 2y ago
CVE-2023-31234	medium	6.3/10	WordPress Tilda Publishing plugin <= 0.3.23 - Broken Access Control vulnerability	May 7, 2024 2y ago
CVE-2024-34413	medium	5.9/10	WordPress SliceWP Affiliates plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerability	May 6, 2024 2y ago
CVE-2024-33570	medium	4.3/10	WordPress MetForm plugin <= 3.8.3 - Broken Access Control vulnerability	May 6, 2024 2y ago
CVE-2024-33576	medium	6.5/10	WordPress WPPizza plugin <= 3.18.10 - Broken Access Control vulnerability	May 6, 2024 2y ago
CVE-2024-33907	medium	5.3/10	WordPress Print My Blog plugin <= 3.26.2 - Broken Access Control vulnerability	May 6, 2024 2y ago
CVE-2024-33908	medium	5.3/10	WordPress WidgetKit plugin <= 2.5.0 - Broken Access Control vulnerability	May 6, 2024 2y ago
CVE-2024-33910	medium	5.3/10	WordPress Digital Publications by Supsystic plugin <= 1.7.7 - Broken Access Control vulnerability	May 6, 2024 2y ago
CVE-2024-33912	high	7.1/10	WordPress Academy LMS plugin <= 1.9.16 - Broken Access Control on Paid Courses vulnerability	May 6, 2024 2y ago
CVE-2024-34371	medium	4.3/10	WordPress Login with phone number plugin <= 1.7.18 - Broken Access Control vulnerability	May 6, 2024 2y ago
CVE-2024-34372	medium	5.3/10	WordPress Post Grid Master plugin <= 3.4.7 - Broken Access Control vulnerability	May 6, 2024 2y ago
CVE-2024-34377	medium	4.3/10	WordPress Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery plugin <= 1.5.3 - Broken Access Control vulnerability	May 6, 2024 2y ago
CVE-2024-34378	high	8.6/10	WordPress LeadConnector plugin <= 1.7 - API Broken Access Control vulnerability	May 6, 2024 2y ago
CVE-2024-34387	medium	4.3/10	WordPress WP Post Author plugin <= 3.6.4 - Rating Value Manipulation vulnerability	May 6, 2024 2y ago
CVE-2024-34389	medium	4.3/10	WordPress WP Post Author plugin <= 3.6.4 - Broken Access Control vulnerability	May 6, 2024 2y ago
CVE-2024-34366	medium	5.9/10	WordPress AltText.ai plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability	May 6, 2024 2y ago
CVE-2024-34369	high	7.1/10	WordPress Web Push Notifications – Webpushr plugin <= 4.35.0 - Cross Site Scripting (XSS) vulnerability	May 6, 2024 2y ago
CVE-2024-34373	medium	6.5/10	WordPress The Plus Addons for Elementor plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerability	May 6, 2024 2y ago
CVE-2024-34374	medium	6.5/10	WordPress ElementsReady Addons for Elementor plugin <= 5.8.0 - Cross Site Scripting (XSS) vulnerability	May 6, 2024 2y ago
CVE-2024-34375	medium	5.9/10	WordPress Sheets to WP Table Live Sync plugin <= 3.7.0 - Cross Site Scripting (XSS) vulnerability	May 6, 2024 2y ago
CVE-2024-34376	medium	6.5/10	WordPress Edge theme <= 2.0.9 - Cross Site Scripting (XSS) vulnerability	May 6, 2024 2y ago
CVE-2024-34380	medium	5.9/10	WordPress ChatBot Conversational Forms plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability	May 6, 2024 2y ago
CVE-2024-34381	medium	6.5/10	WordPress PropertyHive plugin <= 2.0.10 - Cross Site Scripting (XSS) vulnerability	May 6, 2024 2y ago
CVE-2024-34390	medium	6.5/10	WordPress Post Grid Master plugin <= 3.4.8 - Auth. Cross Site Scripting (XSS) vulnerability	May 6, 2024 2y ago