Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

344,232

All time

Critical · Active

11,542

CVSS ≥ 9.0

New · 14 days

2,496

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 15211–15240 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-50852	high	7.6/10	WordPress BookIt Plugin <= 2.4.3 is vulnerable to SQL Injection	Dec 28, 2023 2y ago
CVE-2023-50851	high	7.6/10	WordPress Simply Schedule Appointments Plugin < 1.6.6.1 is vulnerable to SQL Injection	Dec 28, 2023 2y ago
CVE-2023-50853	high	7.6/10	WordPress Connect Contact Form 7, WooCommerce To Google Sheets & Other Platforms – Advanced Form Integration Plugin <= 1.75.0 is vulnerable to SQL Injection	Dec 28, 2023 2y ago
CVE-2023-50854	high	7.6/10	WordPress Squirrly SEO - Advanced Pack Plugin <= 2.3.8 is vulnerable to SQL Injection	Dec 28, 2023 2y ago
CVE-2023-50855	high	7.6/10	WordPress Pre* Party Resource Hints Plugin <= 1.8.18 is vulnerable to SQL Injection	Dec 28, 2023 2y ago
CVE-2023-50856	high	7.6/10	WordPress Funnel Builder for WordPress by FunnelKit Plugin <= 2.14.3 is vulnerable to SQL Injection	Dec 28, 2023 2y ago
CVE-2023-50857	high	7.6/10	WordPress Automation By Autonami Plugin <= 2.6.1 is vulnerable to SQL Injection	Dec 28, 2023 2y ago
CVE-2023-27447	medium	5.3/10	WordPress WP SMS Plugin <= 6.0.4 is vulnerable to Sensitive Data Exposure	Dec 28, 2023 2y ago
CVE-2023-32513	high	7.5/10	WordPress GiveWP Plugin <= 2.25.3 is vulnerable to PHP Object Injection	Dec 28, 2023 2y ago
CVE-2023-32795	high	8.2/10	WordPress WooCommerce Product Add-ons Plugin <= 6.1.3 is vulnerable to PHP Object Injection	Dec 28, 2023 2y ago
CVE-2023-36381	medium	6.6/10	WordPress Zippy Plugin <= 1.6.5 is vulnerable to PHP Object Injection	Dec 28, 2023 2y ago
CVE-2023-50858	medium	5.4/10	WordPress Anti Hacker Plugin <= 4.34 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 28, 2023 2y ago
CVE-2023-50873	medium	4.3/10	WordPress Add Any Extension to Pages Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 28, 2023 2y ago
CVE-2023-50836	medium	5.9/10	WordPress HTML Forms Plugin <= 1.3.28 is vulnerable to Cross Site Scripting (XSS)	Dec 28, 2023 2y ago
CVE-2023-50859	medium	6.5/10	WordPress WP Crowdfunding Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)	Dec 28, 2023 2y ago
CVE-2023-50860	medium	6.5/10	WordPress Amelia Plugin <= 1.0.85 is vulnerable to Cross Site Scripting (XSS)	Dec 28, 2023 2y ago
CVE-2023-50874	medium	6.5/10	WordPress Ajax Load More Plugin <= 6.1.0.1 is vulnerable to Cross Site Scripting (XSS)	Dec 28, 2023 2y ago
CVE-2023-51501	high	7.1/10	WordPress Uncode Core Plugin <= 2.8.6 is vulnerable to Cross Site Scripting (XSS)	Dec 28, 2023 2y ago
CVE-2023-51700	medium	6.4/10	WP-Mobile-BankID-Integration WordPress Database Deserialization: Potential for Object Injection	Dec 27, 2023 2y ago
CVE-2023-5939	—	—	rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Admin+ RCE	Dec 26, 2023 2y ago
CVE-2023-5931	—	—	rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Subscriber+ RCE	Dec 26, 2023 2y ago
CVE-2023-49765	medium	4.3/10	WordPress Rate my Post – WP Rating System Plugin <= 3.4.1 is vulnerable to Insecure Direct Object References (IDOR)	Dec 21, 2023 2y ago
CVE-2023-47191	medium	6.5/10	WordPress Youzify Plugin <= 1.2.2 is vulnerable to Insecure Direct Object References (IDOR)	Dec 21, 2023 2y ago
CVE-2023-32799	medium	6.5/10	WordPress WooCommerce Ship to Multiple Addresses Plugin <= 3.8.3 is vulnerable to Insecure Direct Object References (IDOR)	Dec 21, 2023 2y ago
CVE-2023-32747	medium	5.4/10	WordPress WooCommerce Bookings Plugin <= 1.15.78 is vulnerable to Insecure Direct Object References (IDOR)	Dec 21, 2023 2y ago
CVE-2023-50834	medium	6.5/10	WordPress WooCommerce Menu Extension Plugin <= 1.6.2 is vulnerable to Cross Site Scripting (XSS)	Dec 21, 2023 2y ago
CVE-2023-50833	medium	6.5/10	WordPress Colibri Page Builder Plugin <= 1.0.239 is vulnerable to Cross Site Scripting (XSS)	Dec 21, 2023 2y ago
CVE-2023-50832	medium	5.9/10	WordPress Multi Step Form Plugin <= 1.7.13 is vulnerable to Cross Site Scripting (XSS)	Dec 21, 2023 2y ago
CVE-2023-50831	medium	6.5/10	WordPress CURCY Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)	Dec 21, 2023 2y ago
CVE-2023-50830	medium	5.9/10	WordPress Seos Contact Form Plugin <= 1.8.0 is vulnerable to Cross Site Scripting (XSS)	Dec 21, 2023 2y ago