Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

344,228

All time

Critical · Active

11,542

CVSS ≥ 9.0

New · 14 days

2,629

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 14971–15000 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-52194	medium	6.5/10	WordPress oEmbed Gist Plugin <= 4.9.1 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-52195	medium	6.5/10	WordPress Posts to Page Plugin <= 1.7 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2024-21750	high	7.1/10	WordPress Shortcodes Finder Plugin <= 1.5.5 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2024-22148	high	7.1/10	WordPress WP Smart Editor Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2024-22146	medium	6.5/10	WordPress Schema & Structured Data for WP & AMP Plugin <= 1.25 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22153	medium	5.9/10	WordPress Stock Locations for WooCommerce Plugin <= 2.5.9 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22150	medium	6.5/10	WordPress Post Grid, Image Gallery & Portfolio for Elementor \| PowerFolio Plugin <= 3.1 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22158	medium	6.5/10	WordPress PeepSo Core: Photos Plugin < 6.3.1.0 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22159	high	7.1/10	WordPress WOLF Plugin <= 1.0.8 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22160	high	7.1/10	WordPress Image Tag Manager Plugin <= 1.5 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22161	medium	5.9/10	WordPress HD Quiz Plugin <= 1.8.11 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22162	high	7.1/10	WordPress WPZOOM Shortcodes Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22163	high	7.1/10	WordPress Shield Security Plugin <= 18.5.7 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22282	high	7.1/10	WordPress SimpleMap Store Locator Plugin <= 2.6.1 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22286	high	7.1/10	WordPress BA Plus Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22289	high	7.1/10	WordPress Post views Stats plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability	Jan 31, 2024 2y ago
CVE-2024-22292	medium	6.5/10	WordPress WP To Do Plugin <= 1.2.8 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22293	high	7.1/10	WordPress BP Profile Search Plugin <= 5.5 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22295	medium	5.9/10	WordPress Robo Gallery Plugin <= 3.2.17 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22297	medium	6.5/10	WordPress CBX Map for Google Map & OpenStreetMap Plugin <= 1.1.11 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22302	medium	6.5/10	WordPress Albo Pretorio Online Plugin <= 4.6.6 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22306	medium	5.9/10	WordPress Mang Board WP Plugin <= 1.7.7 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22307	high	7.1/10	WordPress WP-Lister Lite for eBay plugin <= 3.5.7 - Reflected Cross Site Scripting (XSS) vulnerability	Jan 31, 2024 2y ago
CVE-2024-22310	medium	6.5/10	WordPress Formzu WP Plugin <= 1.6.7 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-23502	medium	6.5/10	WordPress Posts List Designer by Category – List Category Posts Or Recent Posts Plugin <= 3.3.2 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-23505	medium	6.5/10	WordPress PDF Viewer & 3D PDF Flipbook – DearPDF Plugin <= 2.0.38 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-23508	high	7.1/10	WordPress PDF Poster - PDF Embedder Plugin for WordPress Plugin <= 2.1.17 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22136	medium	4.3/10	WordPress Droit Elementor Addons Plugin <= 3.1.5 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 31, 2024 2y ago
CVE-2024-22140	high	8.8/10	WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 31, 2024 2y ago
CVE-2024-22143	medium	5.4/10	WordPress WP Spell Check Plugin <= 9.17 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 31, 2024 2y ago