Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

344,248

All time

Critical · Active

11,543

CVSS ≥ 9.0

New · 14 days

2,500

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 16201–16230 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-44262	medium	5.9/10	WordPress Blocks Plugin <= 1.6.41 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-44145	medium	6.5/10	WordPress Anchor Episodes Index (Spotify for Podcasters) Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-44144	high	7.1/10	WordPress Dreamfox Media Payment gateway per Product for Woocommerce Plugin <= 3.2.7 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-44263	medium	5.9/10	WordPress Social Metrics Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-44239	medium	5.9/10	WordPress WWM Social Share On Image Hover Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-44244	high	7.1/10	WordPress FooGallery Plugin <= 2.2.44 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-44477	medium	6.5/10	WordPress Cooked Plugin <= 1.7.13 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-44474	high	7.1/10	WordPress Tiger Forms Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-41859	medium	5.9/10	WordPress Order Delivery Date for WP e-Commerce Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-41856	high	7.1/10	WordPress Click To Tweet Plugin <= 2.0.14 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-41855	medium	5.9/10	WordPress Regpack Plugin <= 0.1 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-41847	medium	6.5/10	WordPress Notice Bar Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-41800	medium	5.9/10	WordPress UniConsent Cookie Consent CMP for GDPR / CCPA Plugin <= 1.4.2 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-41797	medium	6.5/10	WordPress Locations Plugin <= 4.0 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-44479	medium	5.9/10	WordPress WP Jump Menu Plugin <= 3.6.4 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-41737	medium	5.9/10	WordPress Swifty Bar, sticky bar by WPGens Plugin <= 1.2.10 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-41736	medium	5.9/10	WordPress Email posts to subscribers Plugin <= 6.2 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-41734	medium	5.9/10	WordPress Insert Estimated Reading Time Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-41733	medium	5.9/10	WordPress Back To The Top Button Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-41731	medium	5.9/10	WordPress wordpress publish post email notification Plugin <= 1.0.2.2 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-41729	medium	5.9/10	WordPress SendPress Newsletters Plugin <= 1.22.3.31 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-41728	medium	6.5/10	WordPress Rescue Shortcodes Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-41692	high	7.1/10	WordPress Attorney Theme <= 3 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-39308	high	7.1/10	WordPress User Feedback Plugin <= 1.0.7 is vulnerable to Cross Site Scripting (XSS)	Sep 29, 2023 2y ago
CVE-2023-41691	high	7.1/10	WordPress WooCommerce PensoPay Plugin <= 6.3.1 is vulnerable to Cross Site Scripting (XSS)	Sep 29, 2023 2y ago
CVE-2023-41687	medium	6.5/10	WordPress Goods Catalog Plugin <= 2.4.1 is vulnerable to Cross Site Scripting (XSS)	Sep 29, 2023 2y ago
CVE-2023-41666	medium	6.5/10	WordPress Stock Quotes List Plugin <= 2.9.9 is vulnerable to Cross Site Scripting (XSS)	Sep 29, 2023 2y ago
CVE-2023-41663	high	7.1/10	WordPress WP Bannerize Pro Plugin <= 1.6.9 is vulnerable to Cross Site Scripting (XSS)	Sep 29, 2023 2y ago
CVE-2023-41662	high	7.1/10	WordPress WP-dTree Plugin <= 4.4.5 is vulnerable to Cross Site Scripting (XSS)	Sep 29, 2023 2y ago
CVE-2023-41661	medium	5.9/10	WordPress Smarty for WordPress Plugin <= 3.1.35 is vulnerable to Cross Site Scripting (XSS)	Sep 29, 2023 2y ago