Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

344,232

All time

Critical · Active

11,542

CVSS ≥ 9.0

New · 14 days

2,500

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 15121–15150 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-51503	medium	5.9/10	WordPress WooCommerce Payments Plugin <= 6.6.2 is vulnerable to Insecure Direct Object References (IDOR)	Dec 31, 2023 2y ago
CVE-2023-51423	critical	9.3/10	WordPress WebinarIgnition Plugin <= 3.05.0 is vulnerable to SQL Injection	Dec 31, 2023 2y ago
CVE-2023-51469	critical	9.3/10	WordPress Checkout Mestres WP Plugin <= 7.1.9.6 is vulnerable to SQL Injection	Dec 31, 2023 2y ago
CVE-2023-52131	high	7.6/10	WordPress Page Generator Plugin <= 1.7.1 is vulnerable to SQL Injection	Dec 31, 2023 2y ago
CVE-2023-51547	high	7.6/10	WordPress Fluent Support Plugin <= 1.7.6 is vulnerable to SQL Injection	Dec 31, 2023 2y ago
CVE-2023-52132	high	7.6/10	WordPress WP Adminify Plugin <= 3.1.6 is vulnerable to SQL Injection	Dec 31, 2023 2y ago
CVE-2023-52133	high	8.5/10	WordPress Most And Least Read Posts Widget Plugin <= 2.5.16 is vulnerable to SQL Injection	Dec 31, 2023 2y ago
CVE-2023-52134	high	7.6/10	WordPress GEO my WordPress Plugin <= 4.0.2 is vulnerable to SQL Injection	Dec 31, 2023 2y ago
CVE-2023-52185	medium	5.3/10	WordPress Everest Backup Plugin <= 2.1.9 is vulnerable to Sensitive Data Exposure	Dec 31, 2023 2y ago
CVE-2023-52180	high	7.6/10	WordPress Recipe Maker For Your Food Blog from Zip Recipes Plugin <= 8.1.0 is vulnerable to SQL Injection	Dec 31, 2023 2y ago
CVE-2023-49777	critical	9.1/10	WordPress YITH WooCommerce Product Add-Ons Plugin <= 4.3.0 is vulnerable to PHP Object Injection	Dec 31, 2023 2y ago
CVE-2023-52181	critical	10.0/10	WordPress Theme per user Plugin <= 1.0.1 is vulnerable to PHP Object Injection	Dec 31, 2023 2y ago
CVE-2023-39157	critical	9.0/10	WordPress JetElements For Elementor Plugin <= 2.6.10 is vulnerable to Remote Code Execution (RCE)	Dec 31, 2023 2y ago
CVE-2023-52182	critical	9.9/10	WordPress ARI Stream Quiz Plugin <= 1.3.0 is vulnerable to PHP Object Injection	Dec 31, 2023 2y ago
CVE-2023-51527	medium	5.3/10	WordPress GPT3 AI Content Writer Plugin <= 1.8.2 is vulnerable to Sensitive Data Exposure	Dec 29, 2023 2y ago
CVE-2023-51688	medium	5.3/10	WordPress eCommerce Product Catalog Plugin <= 3.3.26 is vulnerable to Sensitive Data Exposure	Dec 29, 2023 2y ago
CVE-2023-51687	medium	5.3/10	WordPress Product Catalog Simple Plugin <= 1.7.6 is vulnerable to Sensitive Data Exposure	Dec 29, 2023 2y ago
CVE-2023-51517	medium	4.1/10	WordPress Calculated Fields Form Plugin <= 1.2.28 is vulnerable to Open Redirection	Dec 29, 2023 2y ago
CVE-2023-51675	medium	4.7/10	WordPress Advanced Access Manager Plugin <= 6.9.18 is vulnerable to Open Redirection	Dec 29, 2023 2y ago
CVE-2023-51410	critical	9.9/10	WordPress WP Mail Log Plugin <= 1.1.2 is vulnerable to Arbitrary File Upload	Dec 29, 2023 2y ago
CVE-2023-51411	critical	10.0/10	WordPress Frontend Admin by DynamiApps Plugin <= 3.18.3 is vulnerable to Arbitrary File Upload	Dec 29, 2023 2y ago
CVE-2023-51412	critical	9.0/10	WordPress Piotnet Forms Plugin <= 1.0.25 is vulnerable to Arbitrary File Upload	Dec 29, 2023 2y ago
CVE-2023-51417	critical	9.9/10	WordPress JVM rich text icons Plugin <= 1.2.3 is vulnerable to Arbitrary File Upload	Dec 29, 2023 2y ago
CVE-2023-51419	critical	10.0/10	WordPress BERTHA AI Plugin <= 1.11.10.7 is vulnerable to Arbitrary File Upload	Dec 29, 2023 2y ago
CVE-2023-51421	critical	9.9/10	WordPress Verge3D Plugin <= 4.5.2 is vulnerable to Arbitrary File Upload	Dec 29, 2023 2y ago
CVE-2023-51468	critical	10.0/10	WordPress Rencontre – Dating Site Plugin <= 3.10.1 is vulnerable to Arbitrary File Upload	Dec 29, 2023 2y ago
CVE-2023-51473	critical	10.0/10	WordPress TerraClassifieds Plugin <= 2.0.3 is vulnerable to Arbitrary File Upload	Dec 29, 2023 2y ago
CVE-2023-51475	critical	10.0/10	WordPress WP MLM Unilevel Plugin <= 4.0 is vulnerable to Arbitrary File Upload	Dec 29, 2023 2y ago
CVE-2023-51414	critical	9.6/10	WordPress EnvíaloSimple Plugin <= 2.1 is vulnerable to PHP Object Injection	Dec 29, 2023 2y ago
CVE-2023-51422	critical	9.9/10	WordPress WebinarIgnition Plugin <= 3.05.0 is vulnerable to PHP Object Injection	Dec 29, 2023 2y ago