Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,528

All time

Critical · Active

12,232

CVSS ≥ 9.0

New · 14 days

3,109

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 16381–16410 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-25033	medium	5.4/10	WordPress Social Share Boost Plugin <= 4.5 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 2y ago
CVE-2022-47175	medium	4.3/10	WordPress Royal Elementor Addons Plugin <= 1.3.75 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 2y ago
CVE-2023-25480	medium	4.3/10	WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor Plugin <= 1.24.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 2y ago
CVE-2023-40671	medium	4.3/10	WordPress DX-auto-save-images Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 2y ago
CVE-2023-40008	medium	4.3/10	WordPress Simple Org Chart Plugin <= 2.3.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 2y ago
CVE-2023-40556	medium	4.3/10	WordPress Schedule Posts Calendar Plugin <= 5.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 2y ago
CVE-2023-40559	medium	4.3/10	WordPress WooCommerce Dynamic Pricing and Discount Rules Plugin <= 2.4.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 4, 2023 2y ago
CVE-2023-27433	medium	5.4/10	WordPress Make Paths Relative Plugin <= 1.3.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 4, 2023 2y ago
CVE-2023-25025	medium	4.3/10	WordPress WP-CopyProtect [Protect your blog posts] Plugin <= 3.1.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 4, 2023 2y ago
CVE-2023-25489	medium	4.3/10	WordPress Update Theme and Plugins from Zip File Plugin <= 2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 4, 2023 2y ago
CVE-2023-25788	medium	6.3/10	WordPress Saphali Woocommerce Lite Plugin <= 1.8.13 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 4, 2023 2y ago
CVE-2023-25980	medium	4.3/10	WordPress Optimize Database after Deleting Revisions Plugin <= 5.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 4, 2023 2y ago
CVE-2023-37995	medium	4.3/10	WordPress WP-CopyProtect [Protect your blog posts] Plugin <= 3.1.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 4, 2023 2y ago
CVE-2023-5357	medium	6.4/10	Instagram for WordPress <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	Oct 4, 2023 2y ago
CVE-2023-40558	medium	5.4/10	WordPress Video Gallery & Management Plugin <= 3.3.5 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-39158	medium	4.3/10	WordPress Woocommerce Category Banner Management Plugin <= 2.4.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-41244	medium	4.3/10	WordPress Localize Remote Images Plugin <= 1.0.9 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-41693	medium	5.4/10	WordPress MyCryptoCheckout Plugin <= 2.125 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-27435	medium	6.3/10	WordPress HTTP Auth Plugin <= 0.3.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-32091	medium	5.4/10	WordPress POEditor Plugin <= 0.9.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-40009	medium	5.4/10	WordPress WP Pipes Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-39159	medium	4.3/10	WordPress Fraud Prevention For Woocommerce Plugin <= 2.1.5 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-40212	medium	4.3/10	WordPress WooCommerce Product Attachment Plugin <= 2.1.8 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-40199	medium	5.4/10	WordPress WP Like Button Plugin <= 1.7.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-40198	medium	5.4/10	WordPress Easy Cookie Law Plugin <= 3.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-40201	medium	6.5/10	WordPress Futurio Extra Plugin <= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-40202	medium	5.4/10	WordPress WP HTML Mail Plugin <= 3.4.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-40210	medium	5.4/10	WordPress SB Child List Plugin <= 4.5 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-2830	medium	5.4/10	WordPress WP Testimonials Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-39989	medium	5.4/10	WordPress Header Footer Code Manager Plugin <= 1.1.34 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago