Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

344,220

All time

Critical · Active

11,542

CVSS ≥ 9.0

New · 14 days

2,622

Newly disclosed

Feed last synced

58 mins ago

Data freshness

Showing 14791–14820 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-0896	medium	6.4/10	Beaver Builder – WordPress Page Builder <= 2.7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting	Mar 13, 2024 2y ago
CVE-2024-1363	medium	6.4/10	Easy Accordion – Best Accordion FAQ Plugin for WordPress <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting	Mar 13, 2024 2y ago
CVE-2024-0447	medium	5.0/10	ArtiBot Free Chat Bot for WordPress WebSites <= 1.1.6 - Missing Authorization to Settings Update	Mar 13, 2024 2y ago
CVE-2024-0592	medium	5.4/10	Related Posts for WordPress <= 2.2.1 - Cross-Site Request Forgery	Mar 13, 2024 2y ago
CVE-2024-0591	medium	6.1/10	wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 3.4.2.2 - Reflected Cross-Site Scripting.	Mar 13, 2024 2y ago
CVE-2024-0449	medium	4.4/10	ArtiBot Free Chat Bot for WordPress WebSites <= 1.1.6 - Authenticated (Admin+) Cross-Site Scripting	Mar 13, 2024 2y ago
CVE-2024-2106	medium	5.3/10	MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.10 - Basic Information Exposure via REST route	Mar 13, 2024 2y ago
CVE-2024-0897	medium	6.4/10	Beaver Builder – WordPress Page Builder <= 2.7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting	Mar 13, 2024 2y ago
CVE-2024-0839	medium	5.3/10	FeedWordPress <= 2022.0222 - Insecure Direct Object Referece	Mar 13, 2024 2y ago
CVE-2024-1176	medium	5.3/10	HT Easy GA4 – Google Analytics WordPress Plugin <= 1.1.5 - Missing Authorization to Unauthenticated GA4 Email Update	Mar 13, 2024 2y ago
CVE-2024-2298	medium	4.3/10	affiliate-toolkit – WordPress Affiliate Plugin <= 3.5.4 - Missing Authorization via atkp_import_product	Mar 8, 2024 2y ago
CVE-2024-1851	medium	6.3/10	affiliate-toolkit – WordPress Affiliate Plugin <= 3.5.4 - Missing Authorization via atkp_create_list	Mar 8, 2024 2y ago
CVE-2024-1720	medium	4.7/10	User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.4 - Unauthenticated Stored Self-Based Cross-Site Scripting	Mar 7, 2024 2y ago
CVE-2024-1381	medium	6.5/10	Page Builder Sandwich – Front End WordPress Page Builder Plugin <= 5.1.0 - Sensitive Information Exposure	Mar 5, 2024 2y ago
CVE-2024-0825	high	8.8/10	Vimeography: Vimeo Video Gallery WordPress Plugin <= 2.3.2 - Authenticated (Contributor+) PHP Object Injection	Mar 5, 2024 2y ago
CVE-2024-27950	medium	5.4/10	WordPress Sirv plugin <= 7.2.0 - Broken Access Control vulnerability	Mar 1, 2024 2y ago
CVE-2024-27949	medium	5.4/10	WordPress Sirv plugin <= 7.2.0 - Server Side Request Forgery (SSRF) vulnerability	Mar 1, 2024 2y ago
CVE-2024-25594	medium	6.5/10	WordPress MyWaze Plugin <= 1.6 is vulnerable to Cross Site Scripting (XSS)	Feb 29, 2024 2y ago
CVE-2024-25098	medium	6.5/10	WordPress PB oEmbed HTML5 Audio Plugin <= 2.6 is vulnerable to Cross Site Scripting (XSS)	Feb 29, 2024 2y ago
CVE-2024-25094	medium	6.5/10	WordPress PJ News Ticker Plugin <= 1.9.5 is vulnerable to Cross Site Scripting (XSS)	Feb 29, 2024 2y ago
CVE-2024-25093	high	7.1/10	WordPress GD Rating System Plugin <= 3.5 is vulnerable to Cross Site Scripting (XSS)	Feb 29, 2024 2y ago
CVE-2024-23501	medium	5.9/10	WordPress Ebook Store Plugin <= 5.788 is vulnerable to Cross Site Scripting (XSS)	Feb 29, 2024 2y ago
CVE-2023-50905	high	7.1/10	WordPress WP Activity Log Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)	Feb 29, 2024 2y ago
CVE-2023-47874	medium	5.4/10	WordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Broken Access Control	Feb 29, 2024 2y ago
CVE-2023-6090	critical	9.1/10	WordPress Mollie Payments for WooCommerce Plugin <= 7.3.11 is vulnerable to Arbitrary File Upload	Feb 29, 2024 2y ago
CVE-2024-21752	high	7.1/10	WordPress Ajax Search Lite Plugin <= 4.11.4 is vulnerable to Cross Site Scripting (XSS)	Feb 29, 2024 2y ago
CVE-2024-1437	high	7.1/10	WordPress Adsmonetizer Plugin <= 3.1.2 is vulnerable to Cross Site Scripting (XSS)	Feb 29, 2024 2y ago
CVE-2024-1434	medium	5.9/10	WordPress Media Alt Renamer Plugin 0.0.1 is vulnerable to Cross Site Scripting (XSS)	Feb 29, 2024 2y ago
CVE-2024-1435	medium	5.3/10	WordPress Tainacan plugin <= 0.20.6 - Sensitive Data Exposure via Log File vulnerability	Feb 29, 2024 2y ago
CVE-2023-51531	medium	5.4/10	WordPress Thrive Automator Plugin <= 1.17 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 29, 2024 2y ago