Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,520

All time

Critical · Active

12,231

CVSS ≥ 9.0

New · 14 days

3,101

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 15511–15540 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-47599	medium	5.5/10	WordPress File Manager Plugin <= 5.2.7 is vulnerable to PHP Object Injection	Dec 20, 2023 2y ago
CVE-2023-49752	critical	9.3/10	WordPress Adifier System Plugin < 3.1.4 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-49166	high	7.6/10	WordPress MSync Plugin <= 1.0.0 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-49161	high	7.6/10	WordPress Bravo Translate Plugin <= 1.2 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-26525	high	7.1/10	WordPress Dokan Plugin <= 3.7.12 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-28491	medium	6.7/10	WordPress Slideshow Gallery Plugin <= 1.7.6 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-28788	high	7.1/10	WordPress Advanced Page Visit Counter Plugin <= 6.4.2 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-29096	high	8.5/10	WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.0 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-29432	high	8.2/10	WordPress Houzez Theme < 2.8.3 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-30495	high	8.5/10	WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.1.23 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-30750	high	8.5/10	WordPress CM Pop-Up banners Plugin <= 1.5.10 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-30872	high	7.6/10	WordPress BSK Forms Blacklist Plugin <= 3.6.2 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-31092	medium	5.5/10	WordPress Easy Bet Plugin <= 1.0.2 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-32128	medium	5.5/10	WordPress Cryptocurrency Donation Box – Bitcoin & Crypto Donations Plugin <= 2.2.7 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-32743	high	7.6/10	WordPress AutomateWoo Plugin <= 5.7.1 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-33209	high	8.5/10	WordPress SEO Change Monitor Plugin <= 1.2 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-33330	high	8.5/10	WordPress WooCommerce Follow-Up Emails Plugin <= 4.9.50 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-49825	high	8.5/10	WordPress Soledad Theme <= 8.4.1 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-49776	critical	9.3/10	WordPress Sayfa Sayaç Plugin <= 2.6 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-49773	critical	10.0/10	WordPress BCorp Shortcodes Plugin <= 0.23 is vulnerable to PHP Object Injection	Dec 20, 2023 2y ago
CVE-2023-49772	critical	10.0/10	WordPress Genesis Simple Love Plugin <= 2.0 is vulnerable to PHP Object Injection	Dec 20, 2023 2y ago
CVE-2023-35914	high	7.5/10	WordPress WooCommerce Subscriptions Plugin <= 5.1.2 is vulnerable to Insecure Direct Object References (IDOR)	Dec 20, 2023 2y ago
CVE-2023-35915	high	7.6/10	WordPress WooCommerce Payments Plugin <= 5.9.0 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-35916	high	7.5/10	WordPress WooCommerce Payments Plugin <= 5.9.0 is vulnerable to Insecure Direct Object References (IDOR)	Dec 20, 2023 2y ago
CVE-2023-40010	critical	9.3/10	WordPress HUSKY – Products Filter for WooCommerce (formerly WOOF) Plugin <= 1.3.4.2 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-32590	critical	9.3/10	WordPress Subscribe to Category Plugin <= 2.7.4 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-47852	high	8.5/10	WordPress Link Whisper Free Plugin <= 0.6.5 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-28782	high	8.3/10	WordPress Gravity Forms Plugin <= 2.7.3 is vulnerable to PHP Object Injection	Dec 20, 2023 2y ago
CVE-2023-35876	high	8.1/10	WordPress WooCommerce Square Plugin <= 3.8.1 is vulnerable to Insecure Direct Object References (IDOR)	Dec 20, 2023 2y ago
CVE-2023-36520	medium	5.4/10	WordPress Editorial Calendar Plugin <= 3.7.12 is vulnerable to Insecure Direct Object References (IDOR)	Dec 20, 2023 2y ago