Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

344,235

All time

Critical · Active

11,542

CVSS ≥ 9.0

New · 14 days

2,499

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 15481–15510 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-48272	high	7.1/10	WordPress Maspik – Spam blacklist Plugin <= 0.9.2 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-48317	medium	6.5/10	WordPress Display Custom Post Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-48320	medium	5.9/10	WordPress Video Player Plugin <= 1.5.22 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-48321	medium	6.5/10	WordPress Accelerated Mobile Pages Plugin <= 1.0.88.1 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-48746	high	7.1/10	WordPress Community by PeepSo Plugin <= 6.2.6.0 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-48748	high	7.1/10	WordPress Salient Core Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-48752	high	7.1/10	WordPress Happyforms Plugin <= 1.25.9 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-48749	medium	6.5/10	WordPress Salient Core Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-47875	medium	5.4/10	WordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 30, 2023 2y ago
CVE-2023-48278	high	7.1/10	WordPress WP Forms Puzzle Captcha Plugin <= 4.1 is vulnerable to Cross Site Request Forgery (CSRF) leading to XSS	Nov 30, 2023 2y ago
CVE-2023-48328	medium	4.3/10	WordPress NextGEN Gallery Plugin <= 3.37 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 30, 2023 2y ago
CVE-2023-48754	medium	5.4/10	WordPress Delete Post Revisions In WordPress Plugin <= 4.6 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 30, 2023 2y ago
CVE-2023-5803	medium	4.3/10	WordPress Business Directory Plugin Plugin <= 6.3.10 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 30, 2023 2y ago
CVE-2023-44143	medium	6.5/10	WordPress Bamboo Columns Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-45609	medium	6.5/10	WordPress Powr Pack Plugin <= 2.1.0 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-46086	high	7.1/10	WordPress affiliate-toolkit – WordPress Affiliate Plugin Plugin <= 3.4.3 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-39921	medium	5.9/10	WordPress Molongui Plugin <= 4.6.19 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-25057	medium	5.3/10	WordPress Libsyn Publisher Hub Plugin <= 1.3.2 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-26533	medium	6.5/10	WordPress Zippy Plugin <= 1.6.1 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-36507	medium	5.3/10	WordPress BookingPress Plugin <= 1.0.64 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-36523	medium	5.3/10	WordPress Email download link Plugin <= 3.7 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-37868	medium	6.5/10	WordPress Premium Addons PRO Plugin <= 2.9.0 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-37890	medium	4.3/10	WordPress KB Support Plugin <= 1.5.88 is vulnerable to Broken Access Control	Nov 30, 2023 2y ago
CVE-2023-37972	medium	5.3/10	WordPress WooCommerce Product Stock Alert Plugin <= 2.0.1 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-40211	high	7.5/10	WordPress Post Grid Plugin <= 2.2.50 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-40600	medium	5.3/10	WordPress EWWW Image Optimizer Plugin <= 7.2.0 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-40662	medium	5.3/10	WordPress Cookies and Content Security Policy Plugin <= 2.15 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-41735	medium	5.3/10	WordPress Email posts to subscribers Plugin <= 6.2 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-44150	high	7.5/10	WordPress ProfilePress Plugin <= 4.13.2 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-45066	medium	5.9/10	WordPress WP Ultimate Exporter Plugin <= 2.4.1 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago