Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,520

All time

Critical · Active

12,231

CVSS ≥ 9.0

New · 14 days

3,101

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 15481–15510 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-50822	medium	6.5/10	WordPress Currency Converter Widget Plugin <= 3.0.2 is vulnerable to Cross Site Scripting (XSS)	Dec 21, 2023 2y ago
CVE-2023-50377	medium	5.9/10	WordPress Simple Counter Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)	Dec 21, 2023 2y ago
CVE-2023-47527	medium	5.9/10	WordPress WP Edit Username Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)	Dec 21, 2023 2y ago
CVE-2023-47525	medium	5.9/10	WordPress Event Management Tickets Booking Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)	Dec 21, 2023 2y ago
CVE-2023-22674	medium	5.4/10	WordPress Dashicons + Custom Post Types Plugin <= 1.0.2 is vulnerable to Broken Access Control	Dec 21, 2023 2y ago
CVE-2023-28421	medium	5.3/10	WordPress WordPress Email Marketing Plugin – WP Email Capture Plugin <= 3.10 is vulnerable to Sensitive Data Exposure	Dec 21, 2023 2y ago
CVE-2023-2487	medium	5.9/10	WordPress WP Ultimate Exporter Plugin <= 2.4.1 is vulnerable to Sensitive Data Exposure	Dec 21, 2023 2y ago
CVE-2023-48288	high	7.5/10	WordPress WordPress Job Board and Recruitment Plugin – JobWP Plugin <= 2.1 is vulnerable to Sensitive Data Exposure	Dec 21, 2023 2y ago
CVE-2023-49162	medium	5.3/10	WordPress BigCommerce Plugin <= 5.0.6 is vulnerable to Sensitive Data Exposure	Dec 21, 2023 2y ago
CVE-2023-49762	medium	5.3/10	WordPress AppMySite Plugin <= 3.11.0 is vulnerable to Sensitive Data Exposure	Dec 21, 2023 2y ago
CVE-2022-45377	medium	6.5/10	WordPress Drag and Drop Multiple File Upload for WooCommerce Plugin <= 1.0.8 is vulnerable to Multiple Vulnerabilities	Dec 21, 2023 2y ago
CVE-2023-32242	critical	9.8/10	WordPress Woodmart Core Plugin <= 1.0.36 is vulnerable to PHP Object Injection	Dec 21, 2023 2y ago
CVE-2023-49778	critical	10.0/10	WordPress Sayfa Sayaç Plugin <= 2.6 is vulnerable to PHP Object Injection	Dec 21, 2023 2y ago
CVE-2023-49826	high	8.1/10	WordPress Soledad Theme <= 8.4.1 is vulnerable to PHP Object Injection	Dec 21, 2023 2y ago
CVE-2023-23970	critical	9.9/10	WordPress Corsa Theme <= 1.5 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-25970	critical	10.0/10	WordPress Zendrop – Global Dropshipping Plugin <= 1.0.0 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-28170	critical	9.1/10	WordPress Theme Demo Import Plugin <= 1.1.1 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-29102	critical	9.1/10	WordPress Olive One Click Demo Import Plugin <= 1.1.1 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-29384	critical	10.0/10	WordPress WordPress Job Board and Recruitment Plugin – JobWP Plugin <= 2.0 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-31215	critical	9.9/10	WordPress Dropshipping & Affiliation with Amazon Plugin <= 2.1.2 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-31231	critical	9.9/10	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin <= 1.5.65 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-33318	critical	9.9/10	WordPress WooCommerce Follow-Up Emails Plugin <= 4.9.40 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-34007	critical	9.9/10	WordPress Download Monitor Plugin <= 4.8.3 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-34385	critical	9.9/10	WordPress Export Import Menus Plugin <= 1.8.0 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-40204	critical	9.1/10	WordPress Folders Plugin <= 2.9.2 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-45603	critical	9.0/10	WordPress User Submitted Posts Plugin <= 20230902 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-46149	critical	9.9/10	WordPress Themify Ultra Theme <= 7.3.5 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-47784	high	8.4/10	WordPress Slider Revolution Plugin <= 6.6.15 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-49814	critical	9.1/10	WordPress Symbiostock Lite Plugin <= 6.0.0 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2022-47597	medium	5.3/10	WordPress Popup Maker Plugin <= 1.17.1 is vulnerable to Sensitive Data Exposure	Dec 20, 2023 2y ago