Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

344,235

All time

Critical · Active

11,542

CVSS ≥ 9.0

New · 14 days

2,499

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 15421–15450 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-49160	medium	6.5/10	WordPress Formzu WP Plugin <= 1.6.6 is vulnerable to Cross Site Scripting (XSS)	Dec 15, 2023 2y ago
CVE-2023-49157	medium	5.9/10	WordPress Multiple Post Passwords Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49152	medium	6.5/10	WordPress Credit Tracker Plugin <= 1.1.17 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49151	medium	6.5/10	WordPress Google Calendar Events Plugin <= 3.2.6 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49150	medium	6.5/10	WordPress Crypto Converter Widget Plugin <= 1.8.1 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49149	medium	6.5/10	WordPress Currency Converter Calculator Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-48780	medium	6.5/10	WordPress WP Catalogue Plugin <= 1.7.6 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-48771	high	7.1/10	WordPress File Gallery Plugin <= 1.8.5.4 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-48770	medium	6.5/10	WordPress Aparat Plugin <= 1.7.1 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-48767	high	7.1/10	WordPress MyTube PlayList Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-48756	high	7.1/10	WordPress JetBlocks For Elementor Plugin <= 1.3.8 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49860	medium	6.5/10	WordPress WP Project Manager Plugin <= 2.6.7 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49842	medium	5.9/10	WordPress Rocket Maintenance Mode & Coming Soon Page Plugin <= 4.3 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49841	medium	5.9/10	WordPress Optin Forms Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49820	medium	6.5/10	WordPress Structured Content Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49813	high	7.1/10	WordPress WP Photo Album Plus Plugin <= 8.5.02.005 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49771	high	7.1/10	WordPress Smart External Link Click Monitor [Link Log] Plugin <= 5.0.2 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49770	medium	5.9/10	WordPress Smart External Link Click Monitor [Link Log] Plugin <= 5.0.2 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49766	high	7.1/10	WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49195	medium	5.9/10	WordPress Nested Pages Plugin <= 3.2.6 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49173	medium	6.5/10	WordPress 10to8 Online Appointment Booking System Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49172	high	7.1/10	WordPress BrainCert – HTML5 Virtual Classroom Plugin <= 1.30 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49171	high	7.1/10	WordPress Innovs HR Plugin <= 1.0.3.4 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49168	medium	6.5/10	WordPress BP Better Messages Plugin <= 2.4.0 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2022-45365	high	7.1/10	WordPress Stock Ticker Plugin <= 3.23.2 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49739	high	7.1/10	WordPress PowerPack Pro for Elementor plugin <= 2.9.23 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 14, 2023 2y ago
CVE-2023-49740	high	7.1/10	WordPress Seraphinite Accelerator Plugin <= 2.20.28 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49743	medium	5.9/10	WordPress Dashboard Widgets Suite Plugin <= 3.4.1 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49745	medium	6.5/10	WordPress Spiffy Calendar Plugin <= 4.9.5 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49827	high	7.1/10	WordPress Soledad Theme <= 8.4.1 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago