Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

344,245

All time

Critical · Active

11,543

CVSS ≥ 9.0

New · 14 days

2,499

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 16021–16050 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-45049	medium	6.5/10	WordPress YouTube Playlist Player Plugin <= 4.6.7 is vulnerable to Cross Site Scripting (XSS)	Oct 18, 2023 2y ago
CVE-2023-25476	high	7.1/10	WordPress AmpedSense – AdSense Split Tester Plugin <= 4.68 is vulnerable to Cross Site Scripting (XSS)	Oct 18, 2023 2y ago
CVE-2023-45008	medium	5.9/10	WordPress Comment Reply Email Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)	Oct 18, 2023 2y ago
CVE-2023-45007	high	7.1/10	WordPress Fotomoto Plugin <= 1.2.8 is vulnerable to Cross Site Scripting (XSS)	Oct 17, 2023 2y ago
CVE-2023-45006	high	7.1/10	WordPress WooODT Lite Plugin <= 2.4.6 is vulnerable to Cross Site Scripting (XSS)	Oct 17, 2023 2y ago
CVE-2023-45004	high	7.1/10	WordPress Woo Custom Emails Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)	Oct 17, 2023 2y ago
CVE-2023-45003	high	7.1/10	WordPress Social Feed Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)	Oct 17, 2023 2y ago
CVE-2023-45010	medium	5.9/10	WordPress Complete Open Graph Plugin <= 3.4.5 is vulnerable to Cross Site Scripting (XSS)	Oct 17, 2023 2y ago
CVE-2023-45005	high	7.1/10	WordPress Seriously Simple Stats Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)	Oct 17, 2023 2y ago
CVE-2023-44990	medium	5.9/10	WordPress WOLF Plugin <= 1.0.7.1 is vulnerable to Cross Site Scripting (XSS)	Oct 17, 2023 2y ago
CVE-2023-24385	medium	5.9/10	WordPress Media Library Assistant Plugin <= 3.11 is vulnerable to Cross Site Scripting (XSS)	Oct 17, 2023 2y ago
CVE-2023-4811	—	—	WordPress File Upload < 4.23.3 - Author+ Stored Cross-Site Scripting	Oct 16, 2023 2y ago
CVE-2023-3706	—	—	ActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Title Disclosure	Oct 16, 2023 2y ago
CVE-2023-3746	—	—	ActivityPub for WordPress < 1.0.1 - Contributor+ Stored XSS	Oct 16, 2023 2y ago
CVE-2023-5057	—	—	ActivityPub for WordPress < 1.0.0 - Contributor+ Stored XSS	Oct 16, 2023 2y ago
CVE-2023-3707	—	—	ActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Content Disclosure	Oct 16, 2023 2y ago
CVE-2023-5561	—	—	WordPress < 6.3.2 - Unauthenticated Post Author Email Disclosure	Oct 16, 2023 2y ago
CVE-2023-46087	medium	4.3/10	WordPress Who Hit The Page – Hit Counter Plugin <= 1.4.14.3 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-46066	medium	5.9/10	WordPress Mediabay Plugin <= 1.6 is vulnerable to Cross Site Scripting (XSS)	Oct 16, 2023 2y ago
CVE-2023-44987	medium	5.9/10	WordPress Timely Booking Button Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)	Oct 16, 2023 2y ago
CVE-2023-44986	medium	5.9/10	WordPress Abandoned Cart Lite for WooCommerce Plugin <= 5.15.2 is vulnerable to Cross Site Scripting (XSS)	Oct 16, 2023 2y ago
CVE-2023-44985	medium	6.5/10	WordPress BuddyMeet Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)	Oct 16, 2023 2y ago
CVE-2023-44984	medium	6.5/10	WordPress bbp style pack Plugin <= 5.6.7 is vulnerable to Cross Site Scripting (XSS)	Oct 16, 2023 2y ago
CVE-2023-44229	medium	5.9/10	WordPress Tiny Carousel Horizontal Slider Plugin <= 8.1 is vulnerable to Cross Site Scripting (XSS)	Oct 16, 2023 2y ago
CVE-2023-45836	medium	4.3/10	WordPress Ultimate Taxonomy Manager Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45831	medium	5.4/10	WordPress AMP WP Plugin <= 1.5.15 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45763	medium	5.4/10	WordPress Taggbox Plugin <= 2.9 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45753	medium	4.3/10	WordPress which template file Plugin <= 4.6.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45752	medium	4.3/10	WordPress Post Gallery Plugin <= 2.3.12 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45749	medium	4.3/10	WordPress AGP Font Awesome Collection Plugin <= 3.2.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago