Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,518

All time

Critical · Active

12,231

CVSS ≥ 9.0

New · 14 days

3,099

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 15001–15030 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-25916	medium	6.5/10	WordPress My Calendar plugin <= 3.4.23 - Cross Site Scripting (XSS) vulnerability	Mar 15, 2024 2y ago
CVE-2024-25919	medium	6.5/10	WordPress Custom Field Template plugin <= 2.6 - Cross Site Scripting (XSS) vulnerability	Mar 15, 2024 2y ago
CVE-2024-25921	high	7.1/10	WordPress Action Network plugin <= 1.4.2 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 15, 2024 2y ago
CVE-2024-25934	medium	6.5/10	WordPress FormFacade plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability	Mar 15, 2024 2y ago
CVE-2024-25936	medium	6.5/10	WordPress SoundCloud Shortcode plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerability	Mar 15, 2024 2y ago
CVE-2024-27189	medium	6.5/10	WordPress WP Social Widget plugin <= 2.2.5 - Cross Site Scripting (XSS) vulnerability	Mar 15, 2024 2y ago
CVE-2024-27193	high	7.1/10	WordPress PayU India plugin <= 3.8.8 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 15, 2024 2y ago
CVE-2024-27196	high	7.1/10	WordPress postMash – custom post order plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 15, 2024 2y ago
CVE-2024-27192	high	7.1/10	WordPress Configure SMTP Plugin <= 3.1 is vulnerable to Cross Site Scripting (XSS)	Mar 15, 2024 2y ago
CVE-2024-27987	high	7.1/10	WordPress Give plugin <= 3.3.1 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 15, 2024 2y ago
CVE-2024-27986	medium	6.5/10	WordPress Livemesh Addons for Elementor Plugin <= 8.3.5 is vulnerable to Cross Site Scripting (XSS)	Mar 14, 2024 2y ago
CVE-2024-27953	medium	4.7/10	WordPress Cryptocurrency Widgets – Price Ticker & Coins List Plugin <= 2.6.8 is vulnerable to Broken Access Control	Mar 13, 2024 2y ago
CVE-2024-27952	high	7.1/10	WordPress Advanced Sermons plugin <= 3.2 - Cross Site Scripting (XSS) vulnerability	Mar 13, 2024 2y ago
CVE-2024-25101	medium	5.9/10	WordPress Maspik – Spam blacklist Plugin <= 0.10.6 is vulnerable to Cross Site Scripting (XSS)	Mar 13, 2024 2y ago
CVE-2024-25099	medium	6.5/10	WordPress Paytium: Mollie payment forms & donations Plugin <= 4.4.2 is vulnerable to Cross Site Scripting (XSS)	Mar 13, 2024 2y ago
CVE-2024-25097	medium	6.5/10	WordPress TNC PDF viewer Plugin <= 2.8.0 is vulnerable to Cross Site Scripting (XSS)	Mar 13, 2024 2y ago
CVE-2024-1894	medium	6.4/10	Burst Statistics – Privacy-Friendly Analytics for WordPress <= 1.5.6.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via burst_total_pageviews_count	Mar 13, 2024 2y ago
CVE-2024-1038	medium	5.4/10	Beaver Builder – WordPress Page Builder <= 2.7.4.2 - Reflected (DOM-Based) Cross-Site Scripting	Mar 13, 2024 2y ago
CVE-2024-1080	medium	6.4/10	Beaver Builder – WordPress Page Builder <= 2.7.4.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via heading tag	Mar 13, 2024 2y ago
CVE-2024-0377	medium	5.3/10	LifterLMS – WordPress LMS Plugin for eLearning <= 7.5.1 - Missing Authorization via process_review	Mar 13, 2024 2y ago
CVE-2024-1505	high	8.8/10	Academy LMS – eLearning and online course solution for WordPress <= 1.9.19 - Authenticated (Subscriber+) Privilege Escalation	Mar 13, 2024 2y ago
CVE-2024-1074	medium	6.4/10	Beaver Builder – WordPress Page Builder <= 2.7.4.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Audio Widget	Mar 13, 2024 2y ago
CVE-2024-0681	medium	5.3/10	Page Restriction WordPress (WP) – Protect WP Pages/Post <= 1.3.4 - Protection Mechanism Bypass	Mar 13, 2024 2y ago
CVE-2024-0896	medium	6.4/10	Beaver Builder – WordPress Page Builder <= 2.7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting	Mar 13, 2024 2y ago
CVE-2024-1363	medium	6.4/10	Easy Accordion – Best Accordion FAQ Plugin for WordPress <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting	Mar 13, 2024 2y ago
CVE-2024-0447	medium	5.0/10	ArtiBot Free Chat Bot for WordPress WebSites <= 1.1.6 - Missing Authorization to Settings Update	Mar 13, 2024 2y ago
CVE-2024-0592	medium	5.4/10	Related Posts for WordPress <= 2.2.1 - Cross-Site Request Forgery	Mar 13, 2024 2y ago
CVE-2024-0591	medium	6.1/10	wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 3.4.2.2 - Reflected Cross-Site Scripting.	Mar 13, 2024 2y ago
CVE-2024-0449	medium	4.4/10	ArtiBot Free Chat Bot for WordPress WebSites <= 1.1.6 - Authenticated (Admin+) Cross-Site Scripting	Mar 13, 2024 2y ago
CVE-2024-2106	medium	5.3/10	MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.10 - Basic Information Exposure via REST route	Mar 13, 2024 2y ago