Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,528

All time

Critical · Active

12,232

CVSS ≥ 9.0

New · 14 days

3,109

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 16231–16260 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-5336	high	8.8/10	iPanorama 360 – WordPress Virtual Tour Builder <= 1.8.0 - Authenticated (Contributor+) SQL Injection via Shortcode	Oct 19, 2023 2y ago
CVE-2023-30781	high	7.1/10	WordPress Tweeple Plugin <= 0.9.5 is vulnerable to Cross Site Scripting (XSS)	Oct 18, 2023 2y ago
CVE-2023-45632	high	7.1/10	WordPress Video Player Plugin <= 1.5.22 is vulnerable to Cross Site Scripting (XSS)	Oct 18, 2023 2y ago
CVE-2023-45630	high	7.1/10	WordPress Responsive Image Gallery, Gallery Album Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)	Oct 18, 2023 2y ago
CVE-2023-45628	medium	6.5/10	WordPress QR Twitter Widget Plugin <= 0.2.3 is vulnerable to Cross Site Scripting (XSS)	Oct 18, 2023 2y ago
CVE-2023-45602	high	7.1/10	WordPress Ebook Store Plugin <= 5.785 is vulnerable to Cross Site Scripting (XSS)	Oct 18, 2023 2y ago
CVE-2023-45604	medium	5.9/10	WordPress Get Custom Field Values Plugin <= 4.0.1 is vulnerable to Cross Site Scripting (XSS)	Oct 18, 2023 2y ago
CVE-2023-45607	medium	6.5/10	WordPress WordPress Popular Posts Plugin <= 6.3.2 is vulnerable to Cross Site Scripting (XSS)	Oct 18, 2023 2y ago
CVE-2023-45608	medium	6.5/10	WordPress Smart Cookie Kit Plugin <= 2.3.1 is vulnerable to Cross Site Scripting (XSS)	Oct 18, 2023 2y ago
CVE-2023-45073	medium	5.9/10	WordPress Mendeley Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)	Oct 18, 2023 2y ago
CVE-2023-31217	medium	6.5/10	WordPress User Location and IP Plugin <= 1.6 is vulnerable to Cross Site Scripting (XSS)	Oct 18, 2023 2y ago
CVE-2023-45072	medium	5.9/10	WordPress Order auto complete for WooCommerce Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)	Oct 18, 2023 2y ago
CVE-2023-45071	high	7.1/10	WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)	Oct 18, 2023 2y ago
CVE-2023-45070	high	7.1/10	WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)	Oct 18, 2023 2y ago
CVE-2023-45067	medium	6.5/10	WordPress WP Simple HTML Sitemap Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)	Oct 18, 2023 2y ago
CVE-2023-45065	high	7.1/10	WordPress Bulk NoIndex & NoFollow Toolkit Plugin <= 1.42 is vulnerable to Cross Site Scripting (XSS)	Oct 18, 2023 2y ago
CVE-2023-45064	high	7.1/10	WordPress OPcache Dashboard Plugin <= 0.3.1 is vulnerable to Cross Site Scripting (XSS)	Oct 18, 2023 2y ago
CVE-2023-45062	high	7.1/10	WordPress Download canvasio3D Light Plugin <= 2.4.6 is vulnerable to Cross Site Scripting (XSS)	Oct 18, 2023 2y ago
CVE-2023-45059	medium	6.5/10	WordPress Gumroad Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)	Oct 18, 2023 2y ago
CVE-2023-45057	medium	5.9/10	WordPress Hitsteps Web Analytics Plugin <= 5.86 is vulnerable to Cross Site Scripting (XSS)	Oct 18, 2023 2y ago
CVE-2023-45056	medium	5.9/10	WordPress Open User Map \| Everybody can add locations Plugin <= 1.3.26 is vulnerable to Cross Site Scripting (XSS)	Oct 18, 2023 2y ago
CVE-2023-45054	high	7.1/10	WordPress Product Category Tree Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)	Oct 18, 2023 2y ago
CVE-2023-45051	medium	5.9/10	WordPress Image vertical reel scroll slideshow Plugin <= 9.0 is vulnerable to Cross Site Scripting (XSS)	Oct 18, 2023 2y ago
CVE-2023-45049	medium	6.5/10	WordPress YouTube Playlist Player Plugin <= 4.6.7 is vulnerable to Cross Site Scripting (XSS)	Oct 18, 2023 2y ago
CVE-2023-25476	high	7.1/10	WordPress AmpedSense – AdSense Split Tester Plugin <= 4.68 is vulnerable to Cross Site Scripting (XSS)	Oct 18, 2023 2y ago
CVE-2023-45008	medium	5.9/10	WordPress Comment Reply Email Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)	Oct 18, 2023 2y ago
CVE-2023-45007	high	7.1/10	WordPress Fotomoto Plugin <= 1.2.8 is vulnerable to Cross Site Scripting (XSS)	Oct 17, 2023 2y ago
CVE-2023-45006	high	7.1/10	WordPress WooODT Lite Plugin <= 2.4.6 is vulnerable to Cross Site Scripting (XSS)	Oct 17, 2023 2y ago
CVE-2023-45004	high	7.1/10	WordPress Woo Custom Emails Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)	Oct 17, 2023 2y ago
CVE-2023-45003	high	7.1/10	WordPress Social Feed Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)	Oct 17, 2023 2y ago