Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,528

All time

Critical · Active

12,232

CVSS ≥ 9.0

New · 14 days

3,109

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 16021–16050 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-34169	medium	6.5/10	WordPress TS Webfonts for さくらのレンタルサーバ Plugin <= 3.1.2 is vulnerable to Broken Access Control	Nov 9, 2023 2y ago
CVE-2023-34171	medium	5.4/10	WordPress WP Report Post Plugin <= 2.1.2 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-34177	medium	5.4/10	WordPress WP-Cache.com Plugin <= 1.1.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-34178	medium	5.4/10	WordPress Groundhogg Plugin <= 2.7.11 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-34181	medium	4.3/10	WordPress WP-Cirrus Plugin <= 0.6.11 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-34182	medium	5.4/10	WordPress LH Password Changer Plugin <= 1.55 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-34371	medium	4.3/10	WordPress Download SpamReferrerBlock Plugin <= 2.22 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-47238	medium	4.3/10	WordPress Top 10 Plugin <= 3.3.2 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-47237	medium	5.4/10	WordPress WP Google My Business Auto Publish Plugin <= 3.7 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-46614	medium	5.4/10	WordPress WP Helper Premium Plugin <= 4.5.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-34386	medium	4.3/10	WordPress WPC Smart Wishlist for WooCommerce Plugin <= 4.7.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-31087	medium	5.4/10	WordPress JS Job Manager Plugin <=2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-34002	medium	5.4/10	WordPress WP Inventory Manager Plugin <= 2.1.0.13 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-25975	medium	5.4/10	WordPress Etsy Shop Plugin <= 3.0.3 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-36688	medium	4.3/10	WordPress Simple Site Verify Plugin <= 1.0.7 is vulnerable to Cross Site Scripting (XSS)	Nov 9, 2023 2y ago
CVE-2023-25994	medium	5.4/10	WordPress Publish to Schedule Plugin <= 4.4.2 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-47231	medium	6.5/10	WordPress ShortCodes UI Plugin <= 1.9.8 is vulnerable to Cross Site Scripting (XSS)	Nov 8, 2023 2y ago
CVE-2023-47229	medium	6.5/10	WordPress Download Top 25 Social Icons Plugin <= 3.1 is vulnerable to Cross Site Scripting (XSS)	Nov 8, 2023 2y ago
CVE-2023-47228	medium	5.9/10	WordPress Layer Slider Plugin <= 1.1.9.7 is vulnerable to Cross Site Scripting (XSS)	Nov 8, 2023 2y ago
CVE-2023-47227	medium	5.9/10	WordPress Social Feed \| All social media in one place Plugin <= 1.5.4.6 is vulnerable to Cross Site Scripting (XSS)	Nov 8, 2023 2y ago
CVE-2023-47226	medium	5.9/10	WordPress Post Sliders & Post Grids Plugin <= 1.0.20 is vulnerable to Cross Site Scripting (XSS)	Nov 8, 2023 2y ago
CVE-2023-47223	medium	5.9/10	WordPress Basic Interactive World Map Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)	Nov 8, 2023 2y ago
CVE-2023-47190	medium	6.5/10	WordPress Apollo13 Framework Extensions Plugin <= 1.9.0 is vulnerable to Cross Site Scripting (XSS)	Nov 8, 2023 2y ago
CVE-2023-47181	medium	5.9/10	WordPress IdeaPush Plugin <= 8.52 is vulnerable to Cross Site Scripting (XSS)	Nov 8, 2023 2y ago
CVE-2023-46643	high	7.1/10	WordPress Download CloudNet360 Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)	Nov 8, 2023 2y ago
CVE-2023-46642	medium	5.9/10	WordPress SAHU TikTok Pixel for E-Commerce Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)	Nov 8, 2023 2y ago
CVE-2023-46640	medium	6.5/10	WordPress Medialist Plugin <= 1.3.9 is vulnerable to Cross Site Scripting (XSS)	Nov 8, 2023 2y ago
CVE-2023-46627	high	7.1/10	WordPress WP Simple HTML Sitemap Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)	Nov 8, 2023 2y ago
CVE-2023-32298	high	7.1/10	WordPress Simple User Listing Plugin <= 1.9.2 is vulnerable to Cross Site Scripting (XSS)	Nov 8, 2023 2y ago
CVE-2023-46626	high	7.1/10	WordPress FLOWFACT WP Connector Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)	Nov 8, 2023 2y ago