Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,528

All time

Critical · Active

12,232

CVSS ≥ 9.0

New · 14 days

3,109

Newly disclosed

Feed last synced

58 mins ago

Data freshness

Showing 15991–16020 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-29426	medium	4.3/10	WordPress Spreadshop Plugin Plugin <= 1.6.5 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 10, 2023 2y ago
CVE-2023-29428	medium	5.3/10	WordPress Superb Social Media Share Buttons and Follow Buttons Plugin <= 1.1.3 is vulnerable to Broken Access Control	Nov 10, 2023 2y ago
CVE-2023-29440	medium	4.3/10	WordPress Simple Job Board Plugin <= 2.10.3 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 10, 2023 2y ago
CVE-2023-30478	medium	5.4/10	WordPress Newsletters Plugin <= 4.8.8 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 10, 2023 2y ago
CVE-2023-31077	medium	4.3/10	WordPress Export WP Page to Static HTML/CSS Plugin <= 2.1.9 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 10, 2023 2y ago
CVE-2023-31078	medium	4.3/10	WordPress WP BrowserUpdate Plugin <= 4.4.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 10, 2023 2y ago
CVE-2023-31086	medium	5.4/10	WordPress Simple Giveaways Plugin <= 2.46.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-31088	medium	5.4/10	WordPress Floating Action Button Plugin <=1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-31093	medium	4.3/10	WordPress Chronosly Events Calendar Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-31235	medium	5.4/10	WordPress Participants Database Plugin <= 2.4.9 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32092	medium	4.3/10	WordPress Community by PeepSo Plugin <= 6.0.9.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32093	medium	5.4/10	WordPress TPG Redirect Plugin <= 1.0.7 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32125	medium	4.3/10	WordPress Multi Rating Plugin <= 5.0.6 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32500	medium	5.4/10	WordPress WoodMart Theme <= 7.1.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32501	medium	4.3/10	WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.6.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32502	medium	4.3/10	WordPress Pro Mime Types Plugin <= 1.0.7 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32512	medium	4.3/10	WordPress ShortPixel Adaptive Images Plugin <= 3.7.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32579	medium	5.3/10	WordPress Forget About Shortcode Buttons Plugin <= 2.1.2 is vulnerable to Broken Access Control	Nov 9, 2023 2y ago
CVE-2023-32587	medium	5.4/10	WordPress WP Reactions Lite Plugin <= 1.3.8 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32592	medium	5.4/10	WordPress Sunny Search Plugin <= 1.0.2 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32594	medium	4.3/10	WordPress Hyphenator Plugin <= 5.1.5 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32602	medium	4.3/10	WordPress CALL ME NOW Plugin <= 3.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32739	medium	4.3/10	WordPress WP Custom Cursors Plugin < 3.2 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32744	medium	5.4/10	WordPress WooCommerce Product Recommendations Plugin < 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32745	medium	5.4/10	WordPress AutomateWoo Plugin <= 5.7.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32794	medium	5.4/10	WordPress WooCommerce Product Add-ons Plugin <= 6.1.3 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-34024	medium	4.3/10	WordPress WP Full Auto Tags Manager Plugin <= 2.2 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-34025	medium	5.4/10	WordPress LWS Hide Login Plugin <= 2.1.6 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-34031	medium	4.3/10	WordPress bbPress Toolkit Plugin <= 1.0.12 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-34033	medium	4.3/10	WordPress Ajax Pagination and Infinite Scroll Plugin <= 2.0.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago