Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

344,227

All time

Critical · Active

11,542

CVSS ≥ 9.0

New · 14 days

2,628

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 14941–14970 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-24870	medium	6.5/10	WordPress Advanced iFrame Plugin <= 2023.10 is vulnerable to Cross Site Scripting (XSS)	Feb 5, 2024 2y ago
CVE-2023-51504	medium	6.5/10	WordPress Dan's Embedder for Google Calendar Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)	Feb 5, 2024 2y ago
CVE-2023-51509	high	7.1/10	WordPress RegistrationMagic Plugin <= 5.2.4.1 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51506	medium	5.5/10	WordPress WPCS Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51514	medium	6.5/10	WordPress CBX Bookmark & Favorite Plugin <= 1.7.13 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51520	medium	6.5/10	WordPress Booking Calendar Plugin < 9.7.4 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51695	medium	5.9/10	WordPress Everest Forms Plugin <= 2.0.4.1 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51694	medium	6.5/10	WordPress Embed Privacy Plugin <= 1.8.0 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51693	medium	6.5/10	WordPress Themify Icons Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51532	medium	6.5/10	WordPress Icegram Plugin <= 3.1.19 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51691	medium	5.9/10	WordPress wpDiscuz Plugin <= 7.6.12 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51690	medium	6.5/10	WordPress Advanced iFrame Plugin <= 2023.8 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51689	medium	6.5/10	WordPress Easy Video Player Plugin <= 1.2.2.10 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51685	medium	5.9/10	WordPress WP Review Slider Plugin <= 12.7 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51684	medium	6.5/10	WordPress Easy Digital Downloads Plugin <= 3.2.5 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51534	medium	5.9/10	WordPress Brave Popup Builder Plugin <= 0.6.2 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51677	medium	6.5/10	WordPress Schema & Structured Data for WP & AMP Plugin <= 1.23 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51536	medium	5.9/10	WordPress CRM Perks Forms Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51674	medium	6.5/10	WordPress Advanced Access Manager Plugin <= 6.9.18 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51669	medium	6.5/10	WordPress Product Code for WooCommerce Plugin <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51666	medium	6.5/10	WordPress Related Post Plugin <= 2.0.53 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51548	medium	5.9/10	WordPress SlickNav Mobile Menu Plugin <= 1.9.2 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51540	high	7.1/10	WordPress Custom 404 Pro Plugin <= 3.10.0 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-52118	medium	6.5/10	WordPress WP User Profile Avatar Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-52175	medium	6.5/10	WordPress Auto Amazon Links Plugin <= 5.1.1 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-52188	medium	6.5/10	WordPress Footer Putter Plugin <= 1.17 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-52189	medium	6.5/10	WordPress Ideal Interactive Map Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-52191	medium	6.5/10	WordPress Infogram Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-52192	medium	6.5/10	WordPress Keap Official Opt-in Forms Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-52193	medium	6.5/10	WordPress Page Builder: Live Composer Plugin <= 1.5.23 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago