Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

339,579

All time

Critical · Active

10,843

CVSS ≥ 9.0

New · 14 days

2,591

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1501–1530 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-28089	high	8.1/10	WordPress Daiquiri theme <= 1.2.4 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28088	high	8.1/10	WordPress Aqualots theme <= 1.1.6 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28087	high	8.1/10	WordPress Filmax theme <= 1.1.11 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28086	high	8.1/10	WordPress Run Gran theme <= 2.0 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28085	high	8.1/10	WordPress Mahogany theme <= 2.9 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28084	high	8.1/10	WordPress Bazinga theme <= 1.1.9 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28081	high	8.1/10	WordPress Windsor theme <= 2.5.0 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28079	high	8.1/10	WordPress Conquerors theme <= 1.2.13 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28078	medium	4.9/10	WordPress uListing plugin <= 2.2.0 - Arbitrary File Download vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28077	high	8.1/10	WordPress Vapester theme <= 1.1.10 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28076	high	7.5/10	WordPress Guff theme <= 1.0.1 - Broken Access Control vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28075	high	7.1/10	WordPress Porto theme <= 7.6.2 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28074	critical	9.8/10	WordPress Pizza House theme <= 1.4.0 - PHP Object Injection vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28072	high	7.1/10	WordPress pixfort Core plugin <= 3.2.22 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28071	medium	6.3/10	WordPress pixfort Core plugin <= 3.2.22 - Broken Access Control vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28069	high	8.1/10	WordPress Le Truffe theme <= 1.1.7 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28068	high	8.1/10	WordPress Rhythmo theme <= 1.3.4 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28067	high	8.1/10	WordPress Bassein theme <= 1.0.15 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28066	high	8.1/10	WordPress Legrand theme <= 2.17 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28065	high	8.1/10	WordPress Eject theme <= 2.17 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28064	high	8.1/10	WordPress Edge Decor theme <= 2.2 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28063	high	8.1/10	WordPress Asia Garden theme <= 1.3.1 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28062	high	8.1/10	WordPress Happy Baby theme <= 1.2.12 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28061	high	8.1/10	WordPress Tiger Claw theme <= 1.1.14 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28060	high	8.1/10	WordPress S.King theme <= 1.5.3 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28059	high	8.1/10	WordPress Dermatology Clinic theme <= 1.4.3 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28058	high	8.1/10	WordPress Dixon theme <= 1.4.2.1 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28057	high	8.1/10	WordPress Mandala theme <= 2.8 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28056	high	8.1/10	WordPress MCKinney's Politics theme <= 1.2.8 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28055	high	8.1/10	WordPress M.Williamson theme <= 1.2.11 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago