Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

344,234

All time

Critical · Active

11,542

CVSS ≥ 9.0

New · 14 days

2,498

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 15271–15300 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-34385	critical	9.9/10	WordPress Export Import Menus Plugin <= 1.8.0 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-40204	critical	9.1/10	WordPress Folders Plugin <= 2.9.2 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-45603	critical	9.0/10	WordPress User Submitted Posts Plugin <= 20230902 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-46149	critical	9.9/10	WordPress Themify Ultra Theme <= 7.3.5 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-47784	high	8.4/10	WordPress Slider Revolution Plugin <= 6.6.15 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-49814	critical	9.1/10	WordPress Symbiostock Lite Plugin <= 6.0.0 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2022-47597	medium	5.3/10	WordPress Popup Maker Plugin <= 1.17.1 is vulnerable to Sensitive Data Exposure	Dec 20, 2023 2y ago
CVE-2022-47599	medium	5.5/10	WordPress File Manager Plugin <= 5.2.7 is vulnerable to PHP Object Injection	Dec 20, 2023 2y ago
CVE-2023-49752	critical	9.3/10	WordPress Adifier System Plugin < 3.1.4 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-49166	high	7.6/10	WordPress MSync Plugin <= 1.0.0 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-49161	high	7.6/10	WordPress Bravo Translate Plugin <= 1.2 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-26525	high	7.1/10	WordPress Dokan Plugin <= 3.7.12 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-28491	medium	6.7/10	WordPress Slideshow Gallery Plugin <= 1.7.6 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-28788	high	7.1/10	WordPress Advanced Page Visit Counter Plugin <= 6.4.2 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-29096	high	8.5/10	WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.0 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-29432	high	8.2/10	WordPress Houzez Theme < 2.8.3 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-30495	high	8.5/10	WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.1.23 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-30750	high	8.5/10	WordPress CM Pop-Up banners Plugin <= 1.5.10 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-30872	high	7.6/10	WordPress BSK Forms Blacklist Plugin <= 3.6.2 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-31092	medium	5.5/10	WordPress Easy Bet Plugin <= 1.0.2 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-32128	medium	5.5/10	WordPress Cryptocurrency Donation Box – Bitcoin & Crypto Donations Plugin <= 2.2.7 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-32743	high	7.6/10	WordPress AutomateWoo Plugin <= 5.7.1 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-33209	high	8.5/10	WordPress SEO Change Monitor Plugin <= 1.2 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-33330	high	8.5/10	WordPress WooCommerce Follow-Up Emails Plugin <= 4.9.50 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-49825	high	8.5/10	WordPress Soledad Theme <= 8.4.1 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-49776	critical	9.3/10	WordPress Sayfa Sayaç Plugin <= 2.6 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-49773	critical	10.0/10	WordPress BCorp Shortcodes Plugin <= 0.23 is vulnerable to PHP Object Injection	Dec 20, 2023 2y ago
CVE-2023-49772	critical	10.0/10	WordPress Genesis Simple Love Plugin <= 2.0 is vulnerable to PHP Object Injection	Dec 20, 2023 2y ago
CVE-2023-35914	high	7.5/10	WordPress WooCommerce Subscriptions Plugin <= 5.1.2 is vulnerable to Insecure Direct Object References (IDOR)	Dec 20, 2023 2y ago
CVE-2023-35915	high	7.6/10	WordPress WooCommerce Payments Plugin <= 5.9.0 is vulnerable to SQL Injection	Dec 20, 2023 2y ago