Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,529

All time

Critical · Active

12,232

CVSS ≥ 9.0

New · 14 days

3,110

Newly disclosed

Feed last synced

36 mins ago

Data freshness

Showing 16411–16440 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-39917	medium	4.3/10	WordPress Photo Gallery by Ays Plugin <= 5.2.6 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-39165	medium	5.4/10	WordPress Sign-up Sheets Plugin <= 2.2.8 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-39923	medium	5.4/10	WordPress The Post Grid Plugin <= 7.2.7 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-25989	medium	4.3/10	Cross-Site Request Forgery (CSRF) vulnerability in multiple WordPress plugins by Meks	Oct 3, 2023 2y ago
CVE-2023-25463	medium	5.4/10	WordPress wp tell a friend popup form Plugin <= 7.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-38390	medium	4.3/10	WordPress Mobile Address Bar Changer Plugin <= 3.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-38396	medium	5.4/10	WordPress Google Map Shortcode Plugin <= 3.1.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-37990	medium	4.3/10	WordPress Perelink Pro Plugin <= 2.1.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-38398	medium	4.3/10	WordPress Taboola Plugin <= 2.0.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2022-46841	medium	5.4/10	WordPress Oxygen Builder Plugin < 4.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-38381	medium	5.4/10	WordPress WP-FlyBox Plugin <= 6.46 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-37998	medium	4.3/10	WordPress Disabler Plugin <= 3.0.3 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-37996	medium	5.4/10	WordPress GTmetrix for WordPress Plugin <= 0.4.7 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-37992	medium	5.4/10	WordPress Smarty for WordPress Plugin <= 3.1.35 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-37991	medium	4.3/10	WordPress WP Emoji One Plugin <= 0.6.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-37891	medium	4.3/10	WordPress Exit Popups & Onsite Retargeting by OptiMonk Plugin <= 2.0.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-44228	medium	5.9/10	WordPress Onclick Show Popup Plugin <= 8.1 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-44266	medium	5.9/10	WordPress WP Adminify Plugin <= 3.1.6 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-44230	medium	5.9/10	WordPress Popup contact form Plugin <= 7.1 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-44265	medium	5.9/10	WordPress Popup contact form Plugin <= 7.1 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-44264	medium	6.5/10	WordPress The Awesome Feed – Custom Feed Plugin <= 2.2.5 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-44242	medium	6.5/10	WordPress Images Slideshow by 2J Plugin <= 1.3.54 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-44245	high	7.1/10	WordPress Contractor Contact Form Website to Workflow Tool Plugin <= 4.0.0 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-44262	medium	5.9/10	WordPress Blocks Plugin <= 1.6.41 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-44145	medium	6.5/10	WordPress Anchor Episodes Index (Spotify for Podcasters) Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-44144	high	7.1/10	WordPress Dreamfox Media Payment gateway per Product for Woocommerce Plugin <= 3.2.7 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-44263	medium	5.9/10	WordPress Social Metrics Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-44239	medium	5.9/10	WordPress WWM Social Share On Image Hover Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-44244	high	7.1/10	WordPress FooGallery Plugin <= 2.2.44 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago
CVE-2023-44477	medium	6.5/10	WordPress Cooked Plugin <= 1.7.13 is vulnerable to Cross Site Scripting (XSS)	Oct 2, 2023 2y ago