Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,525

All time

Critical · Active

12,232

CVSS ≥ 9.0

New · 14 days

3,106

Newly disclosed

Feed last synced

55 mins ago

Data freshness

Showing 15571–15600 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-25715	medium	5.4/10	WordPress GamiPress Plugin <= 2.5.6 is vulnerable to Broken Access Control	Dec 19, 2023 2y ago
CVE-2023-44991	medium	6.5/10	WordPress Media File Renamer Plugin <= 5.6.9 is vulnerable to Sensitive Data Exposure	Dec 19, 2023 2y ago
CVE-2023-44983	medium	5.3/10	WordPress Aruba HiSpeed Cache Plugin <= 2.0.6 is vulnerable to Sensitive Data Exposure	Dec 19, 2023 2y ago
CVE-2023-50376	high	7.1/10	WordPress Simple Membership Plugin <= 4.3.8 is vulnerable to Unauth. Reflected Cross Site Scripting (XSS)	Dec 19, 2023 2y ago
CVE-2023-44982	medium	5.3/10	WordPress WP Retina 2x Plugin <= 6.4.5 is vulnerable to Sensitive Data Exposure	Dec 19, 2023 2y ago
CVE-2023-46212	medium	6.3/10	WordPress WP EXtra Plugin <= 6.2 is vulnerable to Broken Access Control	Dec 18, 2023 2y ago
CVE-2023-46154	medium	6.6/10	WordPress e2pdf Plugin <= 1.20.18 is vulnerable to PHP Object Injection	Dec 18, 2023 2y ago
CVE-2023-47754	medium	4.3/10	WordPress Delete Duplicate Posts Plugin <= 4.8.9 is vulnerable to Broken Access Control	Dec 18, 2023 2y ago
CVE-2023-48751	medium	4.3/10	WordPress Participants Database Plugin <= 2.5.5 is vulnerable to Broken Access Control	Dec 18, 2023 2y ago
CVE-2023-49819	high	7.5/10	WordPress Structured Content Plugin <= 1.5.3 is vulnerable to PHP Object Injection	Dec 18, 2023 2y ago
CVE-2022-45809	medium	5.3/10	WordPress Thumbs Rating Plugin <= 5.0.0 is vulnerable to Race Condition	Dec 18, 2023 2y ago
CVE-2023-47506	high	7.6/10	WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to SQL Injection	Dec 18, 2023 2y ago
CVE-2023-47530	high	7.6/10	WordPress Redirect 404 Error Page to Homepage or Custom Page with Logs Plugin <= 1.8.7 is vulnerable to SQL Injection	Dec 18, 2023 2y ago
CVE-2023-47558	high	7.6/10	WordPress Who Hit The Page – Hit Counter Plugin <= 1.4.14.3 is vulnerable to SQL Injection	Dec 18, 2023 2y ago
CVE-2023-33331	high	8.5/10	WordPress WooCommerce Product Vendors Plugin <= 2.1.76 is vulnerable to SQL Injection	Dec 18, 2023 2y ago
CVE-2023-34168	high	7.6/10	WordPress WP Report Post Plugin <= 2.1.2 is vulnerable to SQL Injection	Dec 18, 2023 2y ago
CVE-2023-49821	medium	5.4/10	WordPress LiveChat Plugin <= 4.5.15 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-49763	medium	4.3/10	WordPress CSprite Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-49761	medium	5.4/10	WordPress Product Enquiry for WooCommerce Plugin <= 3.0 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-49760	medium	5.4/10	WordPress WPsoonOnlinePage Plugin <= 1.9 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-49759	medium	5.4/10	WordPress WooDiscuz – WooCommerce Comments Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-49163	medium	5.4/10	WordPress teachPress Plugin <= 9.0.5 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-49155	medium	4.3/10	WordPress Button Generator – easily Button Builder Plugin <= 2.3.8 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-49153	medium	4.3/10	WordPress Add to Cart Text Changer and Customize Button, Add Custom Icon Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-49148	medium	5.4/10	WordPress Affiliate Booster – Pros & Cons, Notice, and CTA Blocks for Affiliates Plugin <= 3.0.5 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-48781	medium	4.3/10	WordPress MkRapel Regiones y Ciudades de Chile para WC Plugin <= 4.3.0 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-48778	medium	5.4/10	WordPress Product Size Chart For WooCommerce Plugin <= 1.1.5 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-48773	medium	5.4/10	WordPress WooCommerce Login Redirect Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-48772	medium	5.4/10	WordPress Prevent Landscape Rotation Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-48769	medium	4.3/10	WordPress Chat Bubble Plugin <= 2.3 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago