Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,525

All time

Critical · Active

12,232

CVSS ≥ 9.0

New · 14 days

3,106

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 15721–15750 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-48749	medium	6.5/10	WordPress Salient Core Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-47875	medium	5.4/10	WordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 30, 2023 2y ago
CVE-2023-48278	high	7.1/10	WordPress WP Forms Puzzle Captcha Plugin <= 4.1 is vulnerable to Cross Site Request Forgery (CSRF) leading to XSS	Nov 30, 2023 2y ago
CVE-2023-48328	medium	4.3/10	WordPress NextGEN Gallery Plugin <= 3.37 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 30, 2023 2y ago
CVE-2023-48754	medium	5.4/10	WordPress Delete Post Revisions In WordPress Plugin <= 4.6 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 30, 2023 2y ago
CVE-2023-5803	medium	4.3/10	WordPress Business Directory Plugin Plugin <= 6.3.10 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 30, 2023 2y ago
CVE-2023-44143	medium	6.5/10	WordPress Bamboo Columns Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-45609	medium	6.5/10	WordPress Powr Pack Plugin <= 2.1.0 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-46086	high	7.1/10	WordPress affiliate-toolkit – WordPress Affiliate Plugin Plugin <= 3.4.3 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-39921	medium	5.9/10	WordPress Molongui Plugin <= 4.6.19 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-25057	medium	5.3/10	WordPress Libsyn Publisher Hub Plugin <= 1.3.2 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-26533	medium	6.5/10	WordPress Zippy Plugin <= 1.6.1 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-36507	medium	5.3/10	WordPress BookingPress Plugin <= 1.0.64 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-36523	medium	5.3/10	WordPress Email download link Plugin <= 3.7 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-37868	medium	6.5/10	WordPress Premium Addons PRO Plugin <= 2.9.0 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-37890	medium	4.3/10	WordPress KB Support Plugin <= 1.5.88 is vulnerable to Broken Access Control	Nov 30, 2023 2y ago
CVE-2023-37972	medium	5.3/10	WordPress WooCommerce Product Stock Alert Plugin <= 2.0.1 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-40211	high	7.5/10	WordPress Post Grid Plugin <= 2.2.50 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-40600	medium	5.3/10	WordPress EWWW Image Optimizer Plugin <= 7.2.0 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-40662	medium	5.3/10	WordPress Cookies and Content Security Policy Plugin <= 2.15 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-41735	medium	5.3/10	WordPress Email posts to subscribers Plugin <= 6.2 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-44150	high	7.5/10	WordPress ProfilePress Plugin <= 4.13.2 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-45066	medium	5.9/10	WordPress WP Ultimate Exporter Plugin <= 2.4.1 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-45834	medium	5.3/10	WordPress Libsyn Publisher Hub Plugin <= 1.4.4 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-46820	medium	5.3/10	WordPress Image Regenerate & Select Crop Plugin <= 7.3.0 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-48333	medium	6.5/10	WordPress Booster for WooCommerce Plugin <= 7.1.1 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-6136	medium	5.3/10	WordPress Debug Log Manager Plugin <= 2.3.0 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-37867	low	3.7/10	WordPress Yet Another Stars Rating Plugin <= 3.3.8 is vulnerable to Race Condition	Nov 30, 2023 2y ago
CVE-2023-48742	high	7.6/10	WordPress License Manager for WooCommerce Plugin <= 2.2.10 is vulnerable to SQL Injection	Nov 30, 2023 2y ago
CVE-2023-33333	high	7.1/10	WordPress Complianz and Complianz Premium plugins - Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS)	Nov 30, 2023 2y ago