Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

344,215

All time

Critical · Active

11,539

CVSS ≥ 9.0

New · 14 days

2,627

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 14701–14730 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-29107	medium	6.5/10	WordPress Elementor Addon Elements plugin <= 1.12.10 - Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29108	medium	6.5/10	WordPress Happy Addons for Elementor plugin <= 3.10.1 - Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29109	medium	6.5/10	WordPress Shariff Wrapper plugin <= 4.6.10 - Contributor+ Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29110	high	7.1/10	WordPress Tablesome plugin <= 1.0.27 - Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29111	medium	6.5/10	WordPress Sitekit plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29112	medium	5.9/10	WordPress WooCommerce Google Feed Manager plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29113	high	7.1/10	WordPress RegistrationMagic plugin <= 5.2.5.9 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29114	medium	6.5/10	WordPress Download Manager plugin <= 3.2.84 - Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29115	medium	6.5/10	WordPress Smart Online Order for Clover plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29116	high	7.1/10	WordPress WooThumbs for WooCommerce by Iconic plugin <= 5.5.3 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29117	high	7.1/10	WordPress Contact Forms by Cimatti plugin <= 1.7.0 - Unauthenticated Stored Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29118	medium	6.5/10	WordPress Scrollsequence plugin <= 1.5.4 - Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29121	high	7.1/10	WordPress WooCommerce License Manager plugin <= 5.3.1 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29122	medium	6.5/10	WordPress FV Player plugin <= 7.5.41.7212 - Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29123	high	7.1/10	WordPress Link Library plugin <= 7.6 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29124	medium	5.9/10	WordPress Advanced Access Manager plugin <= 6.9.20 - Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29125	high	7.1/10	WordPress Coupon Affiliates plugin <= 5.12.7 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29126	high	7.1/10	WordPress Specific Content For Mobile plugin <= 0.1.9.5 - Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29127	high	7.1/10	WordPress Advanced Access Manager plugin <= 6.9.20 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29128	high	7.1/10	WordPress POST SMTP Mailer plugin <= 2.8.6 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29129	high	7.1/10	WordPress OxyExtras plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29130	high	7.1/10	WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29134	medium	6.5/10	WordPress Tourfic plugin <= 2.11.8 - Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29135	critical	9.9/10	WordPress Tourfic plugin <= 2.11.15 - Arbitrary File Upload vulnerability	Mar 19, 2024 2y ago
CVE-2024-29136	high	8.5/10	WordPress Tourfic plugin <= 2.11.17 - PHP Object Injection vulnerability	Mar 19, 2024 2y ago
CVE-2024-29137	high	7.1/10	WordPress Tourfic plugin <= 2.11.7 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29138	high	7.1/10	WordPress Restrict User Access plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29139	high	7.1/10	WordPress MyCurator Content Curation plugin <= 3.76 - Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29140	medium	5.9/10	WordPress MJM Clinic plugin <= 1.1.22 - Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29141	medium	5.5/10	WordPress PDF Embedder plugin <= 4.6.4 - Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago