Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

344,232

All time

Critical · Active

11,542

CVSS ≥ 9.0

New · 14 days

2,500

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 15091–15120 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-52126	medium	5.3/10	WordPress Send Users Email Plugin <= 1.4.3 is vulnerable to Sensitive Data Exposure	Jan 5, 2024 2y ago
CVE-2023-52143	high	7.5/10	WordPress WP Stripe Checkout Plugin <= 1.2.2.37 is vulnerable to Sensitive Data Exposure	Jan 5, 2024 2y ago
CVE-2023-52146	medium	5.3/10	WordPress 404 Solution Plugin <= 2.33.0 is vulnerable to Sensitive Data Exposure	Jan 5, 2024 2y ago
CVE-2023-52148	medium	5.3/10	WordPress Affiliates Manager Plugin <= 2.9.30 is vulnerable to Sensitive Data Exposure	Jan 5, 2024 2y ago
CVE-2023-52151	medium	5.3/10	WordPress Uncanny Automator Plugin <= 5.1.0.2 is vulnerable to Sensitive Data Exposure	Jan 5, 2024 2y ago
CVE-2022-46839	critical	10.0/10	WordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.7.1 is vulnerable to Arbitrary File Upload	Jan 5, 2024 2y ago
CVE-2023-51678	medium	4.3/10	WordPress Doofinder for WooCommerce Plugin <= 2.0.33 is vulnerable to Broken Access Control	Jan 5, 2024 2y ago
CVE-2023-51535	medium	4.3/10	WordPress Spam protection, AntiSpam, FireWall by CleanTalk Plugin <= 6.20 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 5, 2024 2y ago
CVE-2023-51673	medium	5.4/10	WordPress Stylish Price List Plugin <= 7.0.17 is vulnerable to Broken Access Control	Jan 5, 2024 2y ago
CVE-2023-51668	medium	4.3/10	WordPress Inline Image Upload for BBPress Plugin <= 1.1.18 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 5, 2024 2y ago
CVE-2023-51538	medium	4.3/10	WordPress Awesome Support Plugin <= 6.1.5 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 5, 2024 2y ago
CVE-2023-51539	medium	5.4/10	WordPress Apollo13 Framework Extensions Plugin <= 1.9.1 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 5, 2024 2y ago
CVE-2023-52119	medium	4.3/10	WordPress Icegram Plugin <= 3.1.18 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 5, 2024 2y ago
CVE-2023-52120	medium	5.4/10	WordPress NEX-Forms – Ultimate Form Builder Plugin <= 8.5.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 5, 2024 2y ago
CVE-2023-52121	medium	5.4/10	WordPress NitroPack Plugin <= 1.10.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 5, 2024 2y ago
CVE-2023-52122	medium	4.3/10	WordPress Simple Job Board Plugin <= 2.10.6 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 5, 2024 2y ago
CVE-2023-52123	medium	4.3/10	WordPress Strong Testimonials Plugin <= 3.1.10 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 5, 2024 2y ago
CVE-2023-52127	medium	4.3/10	WordPress WPC Product Bundles for WooCommerce Plugin <= 7.3.1 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 5, 2024 2y ago
CVE-2023-52128	medium	4.3/10	WordPress White Label Plugin <= 2.9.0 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 5, 2024 2y ago
CVE-2023-52129	medium	6.3/10	WordPress teachPress Plugin <= 9.0.4 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 5, 2024 2y ago
CVE-2023-52130	medium	4.3/10	WordPress Affiliates Manager Plugin <= 2.9.31 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 5, 2024 2y ago
CVE-2023-52136	medium	4.3/10	WordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 2.1.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 5, 2024 2y ago
CVE-2023-52145	medium	4.3/10	WordPress Republish Old Posts Plugin <= 1.21 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 5, 2024 2y ago
CVE-2023-52149	medium	5.4/10	WordPress Floating Button Plugin <= 6.0 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 5, 2024 2y ago
CVE-2023-52150	high	8.8/10	WordPress Dynamic Content for Elementor Plugin < 2.12.5 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 5, 2024 2y ago
CVE-2023-52184	medium	4.3/10	WordPress WP Job Portal Plugin <= 2.0.6 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 5, 2024 2y ago
CVE-2023-51502	high	7.5/10	WordPress WooCommerce Stripe Payment Gateway Plugin <= 7.6.1 is vulnerable to Insecure Direct Object References (IDOR)	Jan 5, 2024 2y ago
CVE-2023-52178	medium	6.5/10	WordPress WP Affiliate Disclosure Plugin <= 1.2.7 is vulnerable to Cross-Site Scripting (XSS)	Jan 5, 2024 2y ago
CVE-2023-6524	medium	6.4/10	MapPress Maps for WordPress <= 2.88.13 - Authenticated (Contributor+) Stored Cross-Site Scripting	Jan 3, 2024 2y ago
CVE-2023-7027	high	7.2/10	POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 - Unauthenticated Stored Cross-Site Scripting via device	Jan 3, 2024 2y ago