Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

344,230

All time

Critical · Active

11,542

CVSS ≥ 9.0

New · 14 days

2,505

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 15061–15090 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-52202	critical	9.1/10	WordPress HTML5 MP3 Player with Folder Feedburner Plugin <= 2.8.0 is vulnerable to PHP Object Injection	Jan 8, 2024 2y ago
CVE-2022-45354	medium	5.3/10	WordPress Download Monitor Plugin <= 4.7.60 is vulnerable to Sensitive Data Exposure	Jan 8, 2024 2y ago
CVE-2023-51406	medium	5.3/10	WordPress FastDup Plugin <= 2.1.7 is vulnerable to Sensitive Data Exposure	Jan 8, 2024 2y ago
CVE-2023-51408	medium	5.3/10	WordPress WP Optin Wheel Plugin <= 1.4.3 is vulnerable to Sensitive Data Exposure	Jan 8, 2024 2y ago
CVE-2023-52196	high	7.1/10	WordPress CPT Bootstrap Carousel Plugin <= 1.12 is vulnerable to Cross Site Scripting (XSS)	Jan 8, 2024 2y ago
CVE-2023-52197	medium	5.9/10	WordPress Ads Invalid Click Protection Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)	Jan 8, 2024 2y ago
CVE-2023-52198	medium	6.5/10	WordPress Private Google Calendars Plugin <= 20231125 is vulnerable to Cross Site Scripting (XSS)	Jan 8, 2024 2y ago
CVE-2023-51490	medium	5.3/10	WordPress Defender Security Plugin <= 4.1.0 is vulnerable to Sensitive Data Exposure	Jan 8, 2024 2y ago
CVE-2023-51508	medium	5.3/10	WordPress Database Cleaner Plugin <= 0.9.8 is vulnerable to Sensitive Data Exposure	Jan 8, 2024 2y ago
CVE-2023-52201	high	7.6/10	WordPress pTypeConverter Plugin <= 0.2.8.1 is vulnerable to SQL Injection	Jan 8, 2024 2y ago
CVE-2023-52203	medium	5.9/10	WordPress CformsII Plugin <= 15.0.5 is vulnerable to Cross Site Scripting (XSS)	Jan 8, 2024 2y ago
CVE-2023-52204	high	8.5/10	WordPress Randomize Plugin <= 1.4.3 is vulnerable to SQL Injection	Jan 8, 2024 2y ago
CVE-2023-52206	high	7.7/10	WordPress Page Builder: Live Composer Plugin <= 1.5.25 is vulnerable to PHP Object Injection	Jan 8, 2024 2y ago
CVE-2023-52213	high	7.1/10	WordPress Rate Star Review Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)	Jan 8, 2024 2y ago
CVE-2023-52216	medium	4.3/10	WordPress JS & CSS Script Optimizer Plugin <= 0.3.3 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 8, 2024 2y ago
CVE-2023-52200	critical	9.6/10	WordPress ARMember Plugin <= 4.0.22 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object Injection	Jan 8, 2024 2y ago
CVE-2023-52205	critical	9.1/10	WordPress HTML5 SoundCloud Player Plugin <= 2.8.0 is vulnerable to PHP Object Injection	Jan 8, 2024 2y ago
CVE-2023-52207	critical	9.1/10	WordPress HTML5 MP3 Player with Playlist Free Plugin <= 3.0.0 is vulnerable to PHP Object Injection	Jan 8, 2024 2y ago
CVE-2023-52190	high	7.5/10	WordPress Coupon Referral Program Plugin <= 1.7.2 is vulnerable to Sensitive Data Exposure	Jan 8, 2024 2y ago
CVE-2023-52208	medium	5.3/10	WordPress Constant Contact Forms Plugin <= 2.4.2 is vulnerable to Sensitive Data Exposure	Jan 8, 2024 2y ago
CVE-2023-52222	medium	4.3/10	WordPress WooCommerce Plugin <= 8.2.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 8, 2024 2y ago
CVE-2023-52215	critical	9.3/10	WordPress Barcode Scanner with Inventory & Order Manager Plugin <=1.5.1 is vulnerable to SQL Injection	Jan 8, 2024 2y ago
CVE-2023-52218	critical	10.0/10	WordPress WooCommerce Tranzila Gateway Plugin <= 1.0.8 is vulnerable to PHP Object Injection	Jan 8, 2024 2y ago
CVE-2023-52219	critical	9.9/10	WordPress Gecka Terms Thumbnails Plugin <= 1.1 is vulnerable to PHP Object Injection	Jan 8, 2024 2y ago
CVE-2023-52225	critical	10.0/10	WordPress Taggbox Plugin <= 3.1 is vulnerable to PHP Object Injection	Jan 8, 2024 2y ago
CVE-2024-21744	medium	6.5/10	WordPress Mapster WP Maps Plugin <= 1.2.38 is vulnerable to Cross Site Scripting (XSS)	Jan 8, 2024 2y ago
CVE-2024-21745	medium	6.5/10	WordPress Laybuy Payment Extension for WooCommerce Plugin <= 5.3.9 is vulnerable to Cross Site Scripting (XSS)	Jan 8, 2024 2y ago
CVE-2024-21747	high	7.6/10	WordPress WP ERP Plugin <= 1.12.8 is vulnerable to SQL Injection	Jan 8, 2024 2y ago
CVE-2023-52124	medium	6.5/10	WordPress WP Tabs Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)	Jan 5, 2024 2y ago
CVE-2023-52125	medium	6.5/10	WordPress iFrame Plugin <= 4.8 is vulnerable to Cross Site Scripting (XSS)	Jan 5, 2024 2y ago