Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,528

All time

Critical · Active

12,232

CVSS ≥ 9.0

New · 14 days

3,109

Newly disclosed

Feed last synced

44 mins ago

Data freshness

Showing 15931–15960 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-40335	high	7.1/10	WordPress Cleverwise Daily Quotes Plugin <= 3.2 is vulnerable to Cross Site Scripting (XSS)	Nov 13, 2023 2y ago
CVE-2023-46092	high	7.1/10	WordPress Webmaster Tools Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 13, 2023 2y ago
CVE-2023-46201	high	7.1/10	WordPress Auto Login New User After Registration Plugin <= 1.9.6 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 13, 2023 2y ago
CVE-2023-46634	high	7.1/10	WordPress Custom My Account for Woocommerce Plugin <= 2.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 13, 2023 2y ago
CVE-2023-47516	high	7.1/10	WordPress Category Post List Widget Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)	Nov 13, 2023 2y ago
CVE-2023-47652	high	7.1/10	WordPress Auto Affiliate Links Plugin <= 6.4.2.4 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 13, 2023 2y ago
CVE-2022-45835	medium	5.8/10	WordPress PhonePe Payment Solutions Plugin <= 1.0.15 is vulnerable to Server Side Request Forgery (SSRF)	Nov 13, 2023 2y ago
CVE-2023-46207	medium	4.1/10	WordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.6 is vulnerable to Server Side Request Forgery (SSRF)	Nov 13, 2023 2y ago
CVE-2023-41239	medium	6.4/10	WordPress PowerPress Podcasting Plugin <= 11.0.6 is vulnerable to Server Side Request Forgery (SSRF)	Nov 13, 2023 2y ago
CVE-2023-37978	medium	4.4/10	WordPress HTTP Headers Plugin <= 1.18.11 is vulnerable to Server Side Request Forgery (SSRF)	Nov 13, 2023 2y ago
CVE-2023-38515	medium	5.5/10	WordPress Church Admin Plugin <= 3.7.56 is vulnerable to Server Side Request Forgery (SSRF)	Nov 13, 2023 2y ago
CVE-2023-34013	medium	4.4/10	WordPress Poll Maker Plugin <= 4.6.2 is vulnerable to Server Side Request Forgery (SSRF)	Nov 13, 2023 2y ago
CVE-2023-31219	medium	4.1/10	WordPress Download Monitor Plugin <= 4.8.1 is vulnerable to Server Side Request Forgery (SSRF)	Nov 13, 2023 2y ago
CVE-2023-35041	high	8.8/10	WordPress Webpushr Plugin <= 4.34.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 13, 2023 2y ago
CVE-2023-32583	medium	6.3/10	WordPress WP All Backup Plugin <= 2.4.3 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 13, 2023 2y ago
CVE-2023-32588	medium	4.3/10	WordPress Post State Tags Plugin <= 2.0.6 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 13, 2023 2y ago
CVE-2023-33207	medium	4.3/10	WordPress Stop Referrer Spam Plugin <= 1.3.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 13, 2023 2y ago
CVE-2023-34378	medium	4.3/10	WordPress WP Hide Post Plugin <= 2.0.10 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 13, 2023 2y ago
CVE-2023-34384	medium	5.4/10	WordPress Kebo Twitter Feed Plugin <= 1.5.12 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 13, 2023 2y ago
CVE-2023-47669	medium	5.4/10	WordPress Profile Builder Plugin <= 3.10.3 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 13, 2023 2y ago
CVE-2023-46618	medium	4.3/10	WordPress Category SEO Meta Tags Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 13, 2023 2y ago
CVE-2023-46619	medium	5.4/10	WordPress Spider Facebook Plugin <= 1.0.15 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 13, 2023 2y ago
CVE-2023-46620	medium	4.3/10	WordPress DeepL Pro API translation Plugin <= 2.3.9.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 13, 2023 2y ago
CVE-2023-46625	medium	4.3/10	WordPress Autolinks Manager Plugin <= 1.10.04 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 13, 2023 2y ago
CVE-2023-46629	medium	4.3/10	WordPress Remove Add to Cart WooCommerce Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 13, 2023 2y ago
CVE-2023-46636	medium	5.4/10	WordPress Custom Header Images Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 13, 2023 2y ago
CVE-2023-46638	medium	4.3/10	WordPress WCP OpenWeather Plugin <= 2.5.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 13, 2023 2y ago
CVE-2023-47230	medium	5.4/10	WordPress Contact Forms by Cimatti Plugin <= 1.6.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 13, 2023 2y ago
CVE-2023-26543	medium	4.3/10	WordPress WP Meteor Page Speed Optimization Topping Plugin <= 3.1.4 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 13, 2023 2y ago
CVE-2023-26531	medium	5.4/10	WordPress 多合一搜索自动推送管理插件-支持Baidu/Google/Bing/IndexNow/Yandex/头条 Plugin <= 4.2.7 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago