Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,520

All time

Critical · Active

12,231

CVSS ≥ 9.0

New · 14 days

3,101

Newly disclosed

Feed last synced

25 mins ago

Data freshness

Showing 15211–15240 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-22158	medium	6.5/10	WordPress PeepSo Core: Photos Plugin < 6.3.1.0 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22159	high	7.1/10	WordPress WOLF Plugin <= 1.0.8 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22160	high	7.1/10	WordPress Image Tag Manager Plugin <= 1.5 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22161	medium	5.9/10	WordPress HD Quiz Plugin <= 1.8.11 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22162	high	7.1/10	WordPress WPZOOM Shortcodes Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22163	high	7.1/10	WordPress Shield Security Plugin <= 18.5.7 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22282	high	7.1/10	WordPress SimpleMap Store Locator Plugin <= 2.6.1 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22286	high	7.1/10	WordPress BA Plus Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22289	high	7.1/10	WordPress Post views Stats plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability	Jan 31, 2024 2y ago
CVE-2024-22292	medium	6.5/10	WordPress WP To Do Plugin <= 1.2.8 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22293	high	7.1/10	WordPress BP Profile Search Plugin <= 5.5 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22295	medium	5.9/10	WordPress Robo Gallery Plugin <= 3.2.17 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22297	medium	6.5/10	WordPress CBX Map for Google Map & OpenStreetMap Plugin <= 1.1.11 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22302	medium	6.5/10	WordPress Albo Pretorio Online Plugin <= 4.6.6 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22306	medium	5.9/10	WordPress Mang Board WP Plugin <= 1.7.7 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22307	high	7.1/10	WordPress WP-Lister Lite for eBay plugin <= 3.5.7 - Reflected Cross Site Scripting (XSS) vulnerability	Jan 31, 2024 2y ago
CVE-2024-22310	medium	6.5/10	WordPress Formzu WP Plugin <= 1.6.7 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-23502	medium	6.5/10	WordPress Posts List Designer by Category – List Category Posts Or Recent Posts Plugin <= 3.3.2 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-23505	medium	6.5/10	WordPress PDF Viewer & 3D PDF Flipbook – DearPDF Plugin <= 2.0.38 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-23508	high	7.1/10	WordPress PDF Poster - PDF Embedder Plugin for WordPress Plugin <= 2.1.17 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22136	medium	4.3/10	WordPress Droit Elementor Addons Plugin <= 3.1.5 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 31, 2024 2y ago
CVE-2024-22140	high	8.8/10	WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 31, 2024 2y ago
CVE-2024-22143	medium	5.4/10	WordPress WP Spell Check Plugin <= 9.17 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 31, 2024 2y ago
CVE-2024-22285	medium	5.4/10	WordPress Frontpage Manager Plugin <= 1.3 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 31, 2024 2y ago
CVE-2024-22291	medium	4.3/10	WordPress Browser Theme Color Plugin <= 1.3 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 31, 2024 2y ago
CVE-2024-22304	medium	5.4/10	WordPress FreshMail For WordPress Plugin <= 2.3.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 31, 2024 2y ago
CVE-2024-22287	high	7.1/10	WordPress Better Anchor Links Plugin <= 1.7.5 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 31, 2024 2y ago
CVE-2024-22290	high	7.1/10	WordPress Custom Dashboard Widgets Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 31, 2024 2y ago
CVE-2024-23507	high	8.5/10	WordPress InstaWP Connect plugin <= 0.1.0.9 - SQL Injection vulnerability	Jan 31, 2024 2y ago
CVE-2024-22305	high	7.5/10	WordPress Contact Form builder with drag & drop - Kali Forms Plugin <= 2.3.36 is vulnerable to Insecure Direct Object References (IDOR)	Jan 31, 2024 2y ago