Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

344,217

All time

Critical · Active

11,540

CVSS ≥ 9.0

New · 14 days

2,625

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 14731–14760 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-29142	high	7.1/10	WordPress Better Search plugin <= 3.3.0 - Stored Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29143	medium	6.5/10	WordPress Passwordless Login plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-0820	—	—	Jobs for WordPress < 2.7.4 - Contributor+ Stored XSS	Mar 18, 2024 2y ago
CVE-2024-27961	high	7.1/10	WordPress AntiSpam for Contact Form 7 plugin <= 0.6.0 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 17, 2024 2y ago
CVE-2024-27960	high	7.1/10	WordPress Email Subscription Popup plugin <= 1.2.20 - Cross Site Scripting (XSS) vulnerability	Mar 17, 2024 2y ago
CVE-2024-27959	high	7.1/10	WordPress APIExperts Square for WooCommerce plugin <= 4.2.9 - Cross Site Scripting (XSS) vulnerability	Mar 17, 2024 2y ago
CVE-2024-27958	high	7.1/10	WordPress Visualizer plugin <= 3.10.5 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 17, 2024 2y ago
CVE-2024-27957	critical	10.0/10	WordPress Pie Register plugin <= 3.8.3.1 - Unauthenticated Arbitrary File Upload vulnerability	Mar 17, 2024 2y ago
CVE-2024-25903	medium	5.3/10	WordPress Frontend File Manager Plugin plugin <= 22.7 - Sensitive Data Exposure vulnerability	Mar 17, 2024 2y ago
CVE-2024-25591	medium	5.3/10	WordPress WP Editor plugin <=1.2.7 - Sensitive Data Exposure vulnerability	Mar 17, 2024 2y ago
CVE-2024-24867	medium	5.3/10	WordPress WP Stats Manager plugin <= 6.9.4 - Sensitive Data Exposure vulnerability	Mar 17, 2024 2y ago
CVE-2024-25933	medium	5.3/10	WordPress PeproDev Ultimate Invoice plugin <= 1.9.7 - Sensitive Data Exposure vulnerability	Mar 17, 2024 2y ago
CVE-2024-24845	medium	5.3/10	WordPress Post Thumbnail Editor plugin <= 2.4.8 - Unauthenticated Sensitive Data Exposure vulnerability	Mar 16, 2024 2y ago
CVE-2024-23523	medium	6.5/10	WordPress Elementor Pro plugin <= 3.19.2 - Contributor+ Arbitrary User Meta Data Retrieval vulnerability	Mar 16, 2024 2y ago
CVE-2024-27194	high	7.1/10	WordPress Fontific plugin <= 0.1.6 - CSRF to XSS vulnerability	Mar 16, 2024 2y ago
CVE-2024-27195	high	7.1/10	WordPress Watermark RELOADED plugin <= 1.3.5 - CSRF to XSS vulnerability	Mar 16, 2024 2y ago
CVE-2024-27197	high	7.1/10	WordPress BeePress plugin <= 6.9.8 - CSRF to Stored Cross Site Scripting (XSS) vulnerability	Mar 16, 2024 2y ago
CVE-2023-51474	high	8.8/10	WordPress TerraClassifieds plugin <= 2.0.3 - Cross Site Request Forgery (CSRF) to Account Takeover vulnerability	Mar 16, 2024 2y ago
CVE-2023-51486	medium	5.4/10	WordPress WooCommerce PDF Invoice Builder, Create invoices, packing slips and more plugin <= 1.2.101 - Cross Site Request Forgery (CSRF) vulnerability	Mar 16, 2024 2y ago
CVE-2023-51487	medium	5.4/10	WordPress ARI Stream Quiz – WordPress Quizzes Builder plugin <= 1.2.32 - Cross Site Request Forgery (CSRF) vulnerability	Mar 16, 2024 2y ago
CVE-2023-51489	medium	5.4/10	WordPress Crowdsignal Polls & Ratings plugin <= 3.0.11 - Cross Site Request Forgery (CSRF) vulnerability	Mar 16, 2024 2y ago
CVE-2023-51491	medium	5.4/10	WordPress Depicter Slider plugin <= 2.0.6 - Cross Site Request Forgery (CSRF) vulnerability	Mar 16, 2024 2y ago
CVE-2023-51510	medium	4.3/10	WordPress Export Media URLs plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability	Mar 16, 2024 2y ago
CVE-2023-51512	medium	4.3/10	WordPress Product Table by WBW plugin <= 1.8.6 - Cross Site Request Forgery (CSRF) vulnerability	Mar 16, 2024 2y ago
CVE-2023-51521	medium	5.4/10	WordPress Quiz And Survey Master plugin <= 8.1.18 - Cross Site Request Forgery (CSRF) vulnerability	Mar 16, 2024 2y ago
CVE-2023-51407	medium	4.3/10	WordPress Split Test For Elementor plugin <= 1.6.9 - Cross Site Request Forgery (CSRF) vulnerability	Mar 16, 2024 2y ago
CVE-2023-51522	medium	4.3/10	WordPress Paid Membership Subscriptions plugin <= 2.10.4 - Cross Site Request Forgery (CSRF) vulnerability	Mar 15, 2024 2y ago
CVE-2023-51369	medium	4.3/10	WordPress Customize My Account for WooCommerce plugin <= 1.8.3 - Cross Site Request Forgery (CSRF) vulnerability	Mar 15, 2024 2y ago
CVE-2023-50898	medium	5.4/10	WordPress Image Optimizer, Resizer and CDN – Sirv plugin <= 7.1.2 - Broken Access Control vulnerability	Mar 15, 2024 2y ago
CVE-2023-50886	medium	4.3/10	WordPress Legal Pages plugin <= 1.3.7 - CSRF + Broken Access Control vulnerability	Mar 15, 2024 2y ago