Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,528

All time

Critical · Active

12,232

CVSS ≥ 9.0

New · 14 days

3,109

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 16201–16230 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-39924	medium	5.9/10	WordPress Simple File List Plugin <= 6.1.9 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45759	high	7.1/10	WordPress Peter’s Custom Anti-Spam Plugin <= 3.2.2 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45758	medium	5.9/10	WordPress Amministrazione Trasparente Plugin <= 8.0.2 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45756	high	7.1/10	WordPress ApplyOnline – Application Form Builder and Manager Plugin <= 2.5.2 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-25032	medium	5.9/10	WordPress Print, PDF, Email by PrintFriendly Plugin <= 5.5.1 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45755	medium	5.9/10	WordPress BuddyPress Global Search Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45754	medium	5.9/10	WordPress Easy Testimonial Slider and Form Plugin <= 1.0.18 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45750	high	7.1/10	WordPress Nexter Extension Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45747	medium	5.9/10	WordPress WP Lightbox 2 Plugin <= 3.0.6.5 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45646	medium	6.5/10	WordPress PDF Block Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45644	medium	5.9/10	WordPress CPT Shortcode Generator Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45640	medium	6.5/10	WordPress WP ULike Plugin <= 4.6.8 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45637	high	7.1/10	WordPress EventPrime Plugin <= 3.1.5 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45634	medium	5.8/10	WordPress Copy Or Move Comments Plugin <= 5.0.4 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-46204	medium	4.3/10	WordPress Duplicate Theme Plugin <= 0.1.6 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 24, 2023 2y ago
CVE-2023-46202	medium	4.3/10	WordPress Auto Login New User After Registration Plugin <= 1.9.6 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 24, 2023 2y ago
CVE-2023-46198	medium	5.4/10	WordPress Appointment Calendar Plugin <= 2.9.6 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 24, 2023 2y ago
CVE-2023-46193	medium	4.3/10	WordPress Internal Link Building Plugin <= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 24, 2023 2y ago
CVE-2023-46191	medium	4.3/10	WordPress Open Graph Metabox Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 24, 2023 2y ago
CVE-2023-46190	medium	4.3/10	WordPress Novo-Map : your WP posts on custom google maps Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 24, 2023 2y ago
CVE-2023-46189	medium	4.3/10	WordPress Google Calendar Events Plugin <= 3.2.5 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 24, 2023 2y ago
CVE-2023-46152	medium	4.3/10	WordPress WOLF Plugin <= 1.0.7.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 24, 2023 2y ago
CVE-2023-46151	medium	4.3/10	WordPress Product Category Tree Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 24, 2023 2y ago
CVE-2023-46150	medium	5.4/10	WordPress WP Radio plugin <= 3.1.9 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 24, 2023 2y ago
CVE-2023-46095	medium	5.4/10	WordPress Smooth Scroll Links Plugin <= 1.1.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 22, 2023 2y ago
CVE-2023-46089	medium	4.3/10	WordPress Userback Plugin <= 1.0.13 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 22, 2023 2y ago
CVE-2023-46085	medium	4.3/10	WordPress Wp Ultimate Review Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 22, 2023 2y ago
CVE-2023-46078	medium	5.4/10	WordPress Serial Numbers for WooCommerce – License Manager Plugin <= 1.6.3 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 21, 2023 2y ago
CVE-2023-46067	medium	4.3/10	WordPress Rocket Font Plugin <= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 21, 2023 2y ago
CVE-2020-36706	critical	9.8/10	Simple:Press – WordPress Forum Plugin <= 6.6.0 - Arbitrary File Upload	Oct 20, 2023 2y ago