Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,525

All time

Critical · Active

12,232

CVSS ≥ 9.0

New · 14 days

3,106

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 15871–15900 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-47666	medium	4.3/10	WordPress Code Snippets Plugin <= 3.5.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47667	medium	4.3/10	WordPress WP Full Stripe Free plugin <= 7.0.16 - Cross Site Request Forgery (CSRF) vulnerability on every Setting Save	Nov 18, 2023 2y ago
CVE-2023-47670	medium	4.3/10	WordPress Korea SNS Plugin <= 1.6.3 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47671	medium	5.4/10	WordPress Vertical scroll recent post Plugin <= 14.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47672	medium	4.3/10	WordPress WP Category Post List Widget Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47685	medium	5.4/10	WordPress Preloader Matrix Plugin <= 2.0.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47757	medium	4.3/10	WordPress AWeber Plugin <= 7.3.9 is vulnerable to Broken Access Control	Nov 17, 2023 2y ago
CVE-2023-47686	medium	4.3/10	WordPress Arigato Autoresponder and Newsletter Plugin <= 2.7.2.2 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 16, 2023 2y ago
CVE-2023-47687	medium	4.3/10	WordPress Woo Custom and Sequential Order Number Plugin <= 2.6.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 16, 2023 2y ago
CVE-2023-47688	medium	4.3/10	WordPress Youtube SpeedLoad Plugin <= 0.6.3 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 16, 2023 2y ago
CVE-2023-32796	high	7.1/10	WordPress WooCommerce Product Enquiry Plugin <= 2.3.4 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-32957	medium	5.9/10	WordPress Team Members Showcase Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-34375	high	7.1/10	WordPress Seo By 10Web Plugin <= 1.2.9 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-39926	high	7.1/10	WordPress Under Construction / Maintenance Mode from Acurax Plugin <= 2.6 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-28621	high	7.1/10	WordPress Raise Mag Theme <= 1.0.7 and Wishful Blog theme <= 2.0.1 are vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-47239	medium	6.5/10	WordPress Easy PayPal Shopping Cart Plugin <= 1.1.10 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-47240	medium	6.5/10	WordPress CBX Map for Google Map & OpenStreetMap Plugin <= 1.1.11 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-47242	medium	6.5/10	WordPress ANAC XML Bandi di Gara Plugin <= 7.5 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-47245	medium	5.9/10	WordPress ANAC XML Viewer Plugin <= 1.7 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-47508	high	7.1/10	WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-47509	high	7.1/10	WordPress Edit WooCommerce Templates Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-47511	medium	5.9/10	WordPress Pinyin Slugs Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-47512	high	7.1/10	WordPress Product Enquiry for WooCommerce Plugin <= 3.0 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-47514	high	7.1/10	WordPress Star CloudPRNT for WooCommerce Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-47517	high	7.1/10	WordPress SendPress Newsletters Plugin <= 1.23.11.6 is vulnerable to Cross Site Scripting (XSS)	Nov 14, 2023 2y ago
CVE-2023-47518	high	7.1/10	WordPress Restrict Categories Plugin <= 2.6.4 is vulnerable to Cross Site Scripting (XSS)	Nov 14, 2023 2y ago
CVE-2023-47520	high	7.1/10	WordPress Responsive Column Widgets Plugin <= 1.2.7 is vulnerable to Cross Site Scripting (XSS)	Nov 14, 2023 2y ago
CVE-2023-47522	high	7.1/10	WordPress Photo Feed Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS)	Nov 14, 2023 2y ago
CVE-2023-47524	medium	5.8/10	WordPress CodeBard's Patron Button and Widgets for Patreon Plugin <= 2.1.9 is vulnerable to Cross Site Scripting (XSS)	Nov 14, 2023 2y ago
CVE-2023-47528	medium	5.9/10	WordPress WP Edit Username Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)	Nov 14, 2023 2y ago