Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

344,248

All time

Critical · Active

11,543

CVSS ≥ 9.0

New · 14 days

2,500

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 16231–16260 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-41658	high	7.1/10	WordPress Photo Gallery Slideshow & Masonry Tiled Gallery Plugin <= 1.0.13 is vulnerable to Cross Site Scripting (XSS)	Sep 29, 2023 2y ago
CVE-2023-41657	medium	5.9/10	WordPress HollerBox Plugin <= 2.3.2 is vulnerable to Cross Site Scripting (XSS)	Sep 29, 2023 2y ago
CVE-2023-41655	medium	5.9/10	WordPress authLdap Plugin <= 2.5.9 is vulnerable to Cross Site Scripting (XSS)	Sep 29, 2023 2y ago
CVE-2023-41653	high	7.1/10	WordPress Sermon'e – Sermons Online Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-41242	medium	5.9/10	WordPress Snap Pixel Plugin <= 1.5.7 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-41241	medium	5.9/10	WordPress SureCart Plugin <= 2.5.0 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-41238	high	7.1/10	WordPress Social Media & Share Icons Plugin <= 2.8.3 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-41237	high	7.1/10	WordPress Arya Multipurpose Pro Theme <= 1.0.8 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-41236	high	7.1/10	WordPress Happy Elementor Addons Pro Plugin <= 2.8.0 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-41235	high	7.1/10	WordPress Everest News Pro Theme <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-40333	high	7.1/10	WordPress Bridge Core Plugin <= 3.0.9 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-30493	high	7.1/10	WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-30472	high	7.1/10	WordPress URL Shortener by MyThemeShop Plugin <= 1.0.17 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-30471	high	7.1/10	WordPress WP Search Analytics Plugin <= 1.4.7 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-27622	medium	5.9/10	WordPress GuruWalk Affiliates Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-27628	medium	6.5/10	WordPress Sitekit Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-25483	medium	5.9/10	WordPress Easy Coming Soon Plugin <= 2.3 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-40677	medium	5.9/10	WordPress Vertical Marquee Plugin Plugin <= 7.1 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-40675	medium	5.9/10	WordPress Landing Page Builder Plugin <= 1.5.1.2 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-40669	medium	6.5/10	WordPress Collapse-O-Matic Plugin <= 1.8.5.5 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-40676	medium	5.9/10	WordPress Slimstat Analytics Plugin <= 5.0.8 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-40667	high	7.1/10	WordPress Simple URLs Plugin <= 117 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-40668	medium	5.9/10	WordPress Save as PDF plugin by Pdfcrowd Plugin <= 2.16.0 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-40665	medium	5.9/10	WordPress Save as Image plugin by Pdfcrowd Plugin <= 2.16.0 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-40664	high	7.1/10	WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-40663	high	7.1/10	WordPress WP VR Plugin <= 8.3.4 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-40330	high	7.1/10	WordPress GD Security Headers Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-40605	medium	6.5/10	WordPress Typing Effect Plugin <= 1.3.6 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-27616	high	7.1/10	WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-27617	medium	5.9/10	WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago