Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,520

All time

Critical · Active

12,231

CVSS ≥ 9.0

New · 14 days

3,101

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 15391–15420 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-51358	medium	5.4/10	WordPress Block IPs for Gravity Forms Plugin <= 1.0.1 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 29, 2023 2y ago
CVE-2023-51378	medium	5.4/10	WordPress Rise Blocks Plugin <= 3.1 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 29, 2023 2y ago
CVE-2023-51402	medium	4.3/10	WordPress Ultimate Addons for WPBakery Page Builder Plugin <= 3.19.17 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 29, 2023 2y ago
CVE-2023-50837	high	7.6/10	WordPress Login Lockdown Plugin <= 2.06 is vulnerable to SQL Injection	Dec 29, 2023 2y ago
CVE-2023-50879	medium	6.5/10	WordPress WordPress.com Editing Toolkit Plugin <= 3.78784 is vulnerable to Cross Site Scripting (XSS)	Dec 29, 2023 2y ago
CVE-2023-50880	medium	6.5/10	WordPress BuddyPress Plugin <= 11.3.1 is vulnerable to Cross Site Scripting (XSS)	Dec 29, 2023 2y ago
CVE-2023-50881	medium	6.5/10	WordPress Advanced Access Manager Plugin <= 6.9.15 is vulnerable to Cross Site Scripting (XSS)	Dec 29, 2023 2y ago
CVE-2023-50889	medium	6.5/10	WordPress Beaver Builder Plugin <= 2.7.2 is vulnerable to Cross Site Scripting (XSS)	Dec 29, 2023 2y ago
CVE-2023-50891	medium	6.5/10	WordPress Zoho Forms Plugin <= 3.0.1 is vulnerable to Cross Site Scripting (XSS)	Dec 29, 2023 2y ago
CVE-2023-50892	high	7.1/10	WordPress TheGem Theme <= 5.9.1 is vulnerable to Cross Site Scripting (XSS)	Dec 29, 2023 2y ago
CVE-2023-50893	high	7.1/10	WordPress UpSolution Core Plugin <= 8.17.4 is vulnerable to Cross Site Scripting (XSS)	Dec 29, 2023 2y ago
CVE-2023-50896	medium	5.9/10	WordPress weForms Plugin <= 1.6.17 is vulnerable to Cross Site Scripting (XSS)	Dec 29, 2023 2y ago
CVE-2023-50901	high	7.1/10	WordPress HT Mega Plugin <= 2.3.8 is vulnerable to Cross Site Scripting (XSS)	Dec 29, 2023 2y ago
CVE-2023-51361	medium	5.9/10	WordPress Sticky Chat Widget Plugin <= 1.1.8 is vulnerable to Cross Site Scripting (XSS)	Dec 29, 2023 2y ago
CVE-2023-51371	medium	5.9/10	WordPress Bit Assist Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS)	Dec 29, 2023 2y ago
CVE-2023-51373	high	7.1/10	WordPress Google Photos Gallery with Shortcodes Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)	Dec 29, 2023 2y ago
CVE-2023-51372	medium	5.9/10	WordPress HashBar – WordPress Notification Bar Plugin <= 1.4.1 is vulnerable to Cross Site Scripting (XSS)	Dec 29, 2023 2y ago
CVE-2023-51374	medium	5.9/10	WordPress ZeroBounce Email Verification & Validation Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)	Dec 29, 2023 2y ago
CVE-2023-51396	medium	6.5/10	WordPress Brizy – Page Builder Plugin <= 2.4.29 is vulnerable to Cross Site Scripting (XSS)	Dec 29, 2023 2y ago
CVE-2023-51397	medium	6.5/10	WordPress WP Remote Site Search Plugin <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)	Dec 29, 2023 2y ago
CVE-2023-51399	medium	6.5/10	WordPress Back Button Widget Plugin <= 1.6.3 is vulnerable to Cross Site Scripting (XSS)	Dec 29, 2023 2y ago
CVE-2023-51541	medium	6.5/10	WordPress Stock Ticker Plugin <= 3.23.4 is vulnerable to Cross Site Scripting (XSS)	Dec 29, 2023 2y ago
CVE-2023-52135	high	7.6/10	WordPress WS Form LITE Plugin <= 1.9.170 is vulnerable to SQL Injection	Dec 29, 2023 2y ago
CVE-2023-32517	medium	4.7/10	WordPress MailChimp Subscribe Forms Plugin <= 4.0.9.3 is vulnerable to Open Redirection	Dec 29, 2023 2y ago
CVE-2023-32101	medium	4.7/10	WordPress Library Viewer Plugin <= 2.0.6 is vulnerable to Open Redirection	Dec 29, 2023 2y ago
CVE-2023-31237	medium	4.7/10	WordPress Zephyr Project Manager Plugin <= 3.3.9 is vulnerable to Open Redirection	Dec 29, 2023 2y ago
CVE-2023-31229	medium	4.7/10	WordPress WP Directory Kit Plugin <= 1.1.9 is vulnerable to Open Redirection	Dec 29, 2023 2y ago
CVE-2023-31095	medium	4.7/10	WordPress Integration for Contact Form 7 HubSpot Plugin <= 1.2.8 is vulnerable to Open Redirection	Dec 29, 2023 2y ago
CVE-2023-28786	low	3.7/10	WordPress Solid Security Plugin <= 8.1.4 is vulnerable to Open Redirection	Dec 29, 2023 2y ago
CVE-2022-44589	high	8.1/10	WordPress miniOrange's Google Authenticator Plugin <= 5.6.1 is vulnerable to Sensitive Data Exposure	Dec 29, 2023 2y ago