Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,525

All time

Critical · Active

12,232

CVSS ≥ 9.0

New · 14 days

3,106

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 15841–15870 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-27453	medium	5.4/10	WordPress LWS Tools Plugin <= 2.3.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 22, 2023 2y ago
CVE-2023-27451	high	7.2/10	WordPress Instant Images Plugin <= 5.1.0.2 is vulnerable to Server Side Request Forgery (SSRF)	Nov 22, 2023 2y ago
CVE-2023-27442	medium	5.4/10	WordPress Leyka Plugin <= 3.29.2 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 22, 2023 2y ago
CVE-2023-27444	medium	4.3/10	WordPress DecaLog Plugin <= 3.7.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 22, 2023 2y ago
CVE-2023-27446	medium	4.3/10	WordPress DeepL Pro API translation Plugin <= 2.1.4 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 22, 2023 2y ago
CVE-2023-27633	medium	4.3/10	WordPress Customify Plugin <= 2.10.4 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 22, 2023 2y ago
CVE-2023-28747	medium	5.4/10	WordPress CBX Currency Converter Plugin <= 3.0.3 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 22, 2023 2y ago
CVE-2023-28749	medium	4.3/10	WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 22, 2023 2y ago
CVE-2023-47772	medium	6.5/10	WordPress Slider Revolution Plugin <= 6.6.14 is vulnerable to Cross Site Scripting (XSS)	Nov 20, 2023 2y ago
CVE-2023-28780	medium	6.5/10	WordPress Yoast SEO: Local Plugin <= 14.8 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-31075	medium	5.4/10	WordPress Easy Hide Login Plugin <= 1.0.8 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-31089	medium	4.3/10	WordPress Video XML Sitemap Generator Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-32245	medium	5.4/10	WordPress Essential Addons for Elementor Pro Plugin <= 5.4.8 is vulnerable to Server Side Request Forgery (SSRF)	Nov 18, 2023 2y ago
CVE-2023-32504	medium	5.4/10	WordPress Wise Chat Plugin <= 3.1.3 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-32514	medium	5.4/10	WordPress Google Site Verification plugin using Meta Tag Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-25985	medium	4.3/10	WordPress WordPress Tooltips Plugin <= 8.2.5 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-41129	medium	4.3/10	WordPress Patreon WordPress Plugin <= 1.8.6 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47243	medium	5.4/10	WordPress MSHOP MY SITE Plugin <= 1.1.6 is vulnerable to Broken Access Control	Nov 18, 2023 2y ago
CVE-2023-47519	medium	4.3/10	WordPress WooCommerce Product Table Lite Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47531	medium	4.3/10	WordPress Droit Dark Mode Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47551	medium	5.4/10	WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47552	medium	5.4/10	WordPress Image Hover Effects Plugin <= 5.5 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47553	medium	5.4/10	WordPress UserHeat Plugin Plugin <= 1.1.6 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47556	medium	4.3/10	WordPress Device Theme Switcher Plugin <= 3.0.2 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47644	medium	5.4/10	WordPress ProfileGrid Plugin <= 5.6.6 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47649	medium	5.4/10	WordPress Best Restaurant Menu by PriceListo Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47650	medium	6.5/10	WordPress Add Local Avatar Plugin <= 12.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47651	medium	4.3/10	WordPress WP Links Page Plugin <= 4.9.4 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47655	medium	5.4/10	WordPress ANAC XML Bandi di Gara Plugin <= 7.5 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47664	medium	6.5/10	WordPress Plainview Protect Passwords Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago