Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,528

All time

Critical · Active

12,232

CVSS ≥ 9.0

New · 14 days

3,109

Newly disclosed

Feed last synced

51 mins ago

Data freshness

Showing 15961–15990 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-26524	medium	4.3/10	WordPress Quiz And Survey Master Plugin <= 8.0.10 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-26516	high	8.8/10	WordPress Debug Assistant Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-26518	medium	5.4/10	WordPress WP TFeed Plugin <= 1.6.9 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-26514	medium	5.4/10	WordPress XML Sitemap Generator for Google Plugin <= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-27445	medium	5.4/10	WordPress Blog Floating Button Plugin <= 1.4.12 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-27441	medium	5.4/10	WordPress New Adman Plugin <= 1.6.8 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-27438	medium	4.3/10	WordPress WP Translitera Plugin <= p1.2.5 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-27434	medium	4.3/10	WordPress Classic Editor and Classic Widgets Plugin <= 1.2.5 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-27436	medium	5.4/10	WordPress Elegant Custom Fonts Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-27431	medium	4.3/10	WordPress Big Store Theme <= 1.9.3 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-27417	medium	4.3/10	WordPress Affiliate Super Assistent Plugin <= 1.5.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-27418	medium	4.3/10	WordPress Side Menu Lite Plugin <= 4.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-27632	medium	5.4/10	WordPress Daily Prayer Time Plugin <= 2023.03.08 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-27623	medium	5.4/10	WordPress WP Page Numbers Plugin <= 0.5 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-27611	medium	5.4/10	WordPress Reusable Blocks Extended Plugin <= 0.9 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-28167	medium	5.4/10	WordPress CF7 Invisible reCAPTCHA Plugin <= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-28172	medium	5.4/10	WordPress WP Google Map Plugin Plugin <= 4.4.2 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-28173	medium	4.3/10	WordPress Google XML Sitemap for Images Plugin <= 2.1.3 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-28419	medium	5.4/10	WordPress Force First and Last Name as Display Name Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-28420	medium	5.4/10	WordPress Custom Options Plus Plugin <= 1.8.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-28495	medium	4.3/10	WordPress WP Shortcode by MyThemeShop Plugin <= 1.4.16 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-28497	medium	5.4/10	WordPress Slideshow Gallery Plugin <= 1.7.6 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-28498	medium	4.3/10	WordPress Hotel Booking Lite Plugin <= 4.6.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-28618	medium	5.4/10	WordPress Enhanced Plugin Admin Plugin <= 1.16 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-28694	medium	5.4/10	WordPress Wbcom Designs – BuddyPress Activity Social Share Plugin <= 3.5.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-28696	medium	4.3/10	WordPress I Recommend This Plugin <= 3.9.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-28930	medium	4.3/10	WordPress Mobile Banner Plugin <= 1.5 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-28987	medium	4.3/10	WordPress Wp Ultimate Review Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-29238	medium	4.3/10	WordPress Whydonate – FREE Donate button Plugin <= 3.12.15 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-29425	medium	5.4/10	WordPress ShiftController Employee Shift Scheduling Plugin <= 4.9.23 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago