Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

344,232

All time

Critical · Active

11,542

CVSS ≥ 9.0

New · 14 days

2,496

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 15241–15270 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-50829	medium	5.9/10	WordPress Loan Repayment Calculator and Application Form Plugin <= 2.9.3 is vulnerable to Cross Site Scripting (XSS)	Dec 21, 2023 2y ago
CVE-2023-50828	medium	5.9/10	WordPress Ultimate Dashboard Plugin <= 3.7.11 is vulnerable to Cross Site Scripting (XSS)	Dec 21, 2023 2y ago
CVE-2023-50827	medium	5.9/10	WordPress Accredible Certificates & Open Badges Plugin <= 1.4.8 is vulnerable to Cross Site Scripting (XSS)	Dec 21, 2023 2y ago
CVE-2023-50826	medium	5.9/10	WordPress Menu Image, Icons made easy Plugin <= 3.10 is vulnerable to Cross Site Scripting (XSS)	Dec 21, 2023 2y ago
CVE-2023-50825	medium	6.5/10	WordPress iframe Shortcode Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)	Dec 21, 2023 2y ago
CVE-2023-50824	medium	6.5/10	WordPress Insert or Embed Articulate Content into WordPress Plugin <= 4.3000000021 is vulnerable to Cross Site Scripting (XSS)	Dec 21, 2023 2y ago
CVE-2023-50823	medium	6.5/10	WordPress CSS & JavaScript Toolbox Plugin <= 11.7 is vulnerable to Cross Site Scripting (XSS)	Dec 21, 2023 2y ago
CVE-2023-50822	medium	6.5/10	WordPress Currency Converter Widget Plugin <= 3.0.2 is vulnerable to Cross Site Scripting (XSS)	Dec 21, 2023 2y ago
CVE-2023-50377	medium	5.9/10	WordPress Simple Counter Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)	Dec 21, 2023 2y ago
CVE-2023-47527	medium	5.9/10	WordPress WP Edit Username Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)	Dec 21, 2023 2y ago
CVE-2023-47525	medium	5.9/10	WordPress Event Management Tickets Booking Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)	Dec 21, 2023 2y ago
CVE-2023-22674	medium	5.4/10	WordPress Dashicons + Custom Post Types Plugin <= 1.0.2 is vulnerable to Broken Access Control	Dec 21, 2023 2y ago
CVE-2023-28421	medium	5.3/10	WordPress WordPress Email Marketing Plugin – WP Email Capture Plugin <= 3.10 is vulnerable to Sensitive Data Exposure	Dec 21, 2023 2y ago
CVE-2023-2487	medium	5.9/10	WordPress WP Ultimate Exporter Plugin <= 2.4.1 is vulnerable to Sensitive Data Exposure	Dec 21, 2023 2y ago
CVE-2023-48288	high	7.5/10	WordPress WordPress Job Board and Recruitment Plugin – JobWP Plugin <= 2.1 is vulnerable to Sensitive Data Exposure	Dec 21, 2023 2y ago
CVE-2023-49162	medium	5.3/10	WordPress BigCommerce Plugin <= 5.0.6 is vulnerable to Sensitive Data Exposure	Dec 21, 2023 2y ago
CVE-2023-49762	medium	5.3/10	WordPress AppMySite Plugin <= 3.11.0 is vulnerable to Sensitive Data Exposure	Dec 21, 2023 2y ago
CVE-2022-45377	medium	6.5/10	WordPress Drag and Drop Multiple File Upload for WooCommerce Plugin <= 1.0.8 is vulnerable to Multiple Vulnerabilities	Dec 21, 2023 2y ago
CVE-2023-32242	critical	9.8/10	WordPress Woodmart Core Plugin <= 1.0.36 is vulnerable to PHP Object Injection	Dec 21, 2023 2y ago
CVE-2023-49778	critical	10.0/10	WordPress Sayfa Sayaç Plugin <= 2.6 is vulnerable to PHP Object Injection	Dec 21, 2023 2y ago
CVE-2023-49826	high	8.1/10	WordPress Soledad Theme <= 8.4.1 is vulnerable to PHP Object Injection	Dec 21, 2023 2y ago
CVE-2023-23970	critical	9.9/10	WordPress Corsa Theme <= 1.5 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-25970	critical	10.0/10	WordPress Zendrop – Global Dropshipping Plugin <= 1.0.0 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-28170	critical	9.1/10	WordPress Theme Demo Import Plugin <= 1.1.1 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-29102	critical	9.1/10	WordPress Olive One Click Demo Import Plugin <= 1.1.1 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-29384	critical	10.0/10	WordPress WordPress Job Board and Recruitment Plugin – JobWP Plugin <= 2.0 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-31215	critical	9.9/10	WordPress Dropshipping & Affiliation with Amazon Plugin <= 2.1.2 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-31231	critical	9.9/10	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin <= 1.5.65 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-33318	critical	9.9/10	WordPress WooCommerce Follow-Up Emails Plugin <= 4.9.40 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-34007	critical	9.9/10	WordPress Download Monitor Plugin <= 4.8.3 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago