Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,529

All time

Critical · Active

12,232

CVSS ≥ 9.0

New · 14 days

3,110

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 16501–16530 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-41868	high	7.1/10	WordPress Stagtools Plugin <= 2.3.7 is vulnerable to Cross Site Scripting (XSS)	Sep 25, 2023 2y ago
CVE-2023-41871	high	7.1/10	WordPress Poll Maker Plugin <= 4.7.0 is vulnerable to Cross Site Scripting (XSS)	Sep 25, 2023 2y ago
CVE-2023-4502	—	—	Translate WordPress with GTranslate < 3.0.4 - Admin+ Stored XSS	Sep 25, 2023 2y ago
CVE-2023-41872	high	7.1/10	WordPress WoodMart Theme <= 7.2.4 is vulnerable to Cross Site Scripting (XSS)	Sep 25, 2023 2y ago
CVE-2023-41874	high	7.1/10	WordPress Order Delivery Date for WooCommerce Plugin <= 3.20.0 is vulnerable to Cross Site Scripting (XSS)	Sep 25, 2023 2y ago
CVE-2023-41948	medium	5.9/10	WordPress Cookie Notice & Consent Plugin <= 1.6.0 is vulnerable to Cross Site Scripting (XSS)	Sep 25, 2023 2y ago
CVE-2023-41949	medium	5.9/10	WordPress iFolders Plugin <= 1.5.0 is vulnerable to Cross Site Scripting (XSS)	Sep 25, 2023 2y ago
CVE-2023-5062	medium	6.4/10	WordPress Charts <= 0.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	Sep 20, 2023 2y ago
CVE-2023-4840	medium	6.4/10	MapPress Maps for WordPress <= 2.88.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	Sep 12, 2023 2y ago
CVE-2023-40601	high	7.1/10	WordPress Mortgage Calculator Estatik Plugin <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)	Sep 6, 2023 2y ago
CVE-2023-40007	medium	5.9/10	WordPress CT Commerce Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)	Sep 6, 2023 2y ago
CVE-2023-40328	medium	5.9/10	WordPress Carrot Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)	Sep 6, 2023 2y ago
CVE-2023-40329	medium	5.9/10	WordPress Custom Admin Login Page \| WPZest Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)	Sep 6, 2023 2y ago
CVE-2023-40553	medium	5.8/10	WordPress Plausible Analytics Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)	Sep 6, 2023 2y ago
CVE-2023-40554	high	7.1/10	WordPress Blog2Social Plugin <= 7.2.0 is vulnerable to Cross Site Scripting (XSS)	Sep 6, 2023 2y ago
CVE-2023-40552	medium	5.9/10	WordPress Fitness calculators plugin Plugin <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)	Sep 6, 2023 2y ago
CVE-2023-40560	medium	5.9/10	WordPress Schedule Posts Calendar Plugin <= 5.2 is vulnerable to Cross Site Scripting (XSS)	Sep 6, 2023 2y ago
CVE-2023-30497	high	7.1/10	WordPress LINE Notify Plugin <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)	Sep 6, 2023 2y ago
CVE-2023-29441	high	7.1/10	WordPress WebLibrarian Plugin <= 3.5.8.1 is vulnerable to Cross Site Scripting (XSS)	Sep 6, 2023 2y ago
CVE-2023-4773	medium	6.4/10	WordPress Social Login <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	Sep 6, 2023 2y ago
CVE-2023-4636	medium	4.4/10	WordPress File Sharing Plugin <= 2.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting	Sep 5, 2023 2y ago
CVE-2023-32102	medium	6.5/10	WordPress Library Viewer Plugin <= 2.0.6 is vulnerable to Cross Site Scripting (XSS)	Sep 4, 2023 2y ago
CVE-2023-32578	medium	6.5/10	WordPress Column-Matic Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)	Sep 4, 2023 2y ago
CVE-2023-40197	medium	6.5/10	WordPress flowpaper Plugin <= 1.9.9 is vulnerable to Cross Site Scripting (XSS)	Sep 4, 2023 2y ago
CVE-2023-4151	—	—	Store Locator WordPress < 1.4.13 - Reflected XSS	Sep 4, 2023 2y ago
CVE-2023-40214	high	7.1/10	WordPress Business Pro Theme <= 1.10.4 is vulnerable to Cross Site Scripting (XSS)	Sep 4, 2023 2y ago
CVE-2023-40196	high	7.1/10	WordPress ImageRecycle pdf & image compression Plugin <= 3.1.11 is vulnerable to Cross Site Scripting (XSS)	Sep 4, 2023 2y ago
CVE-2023-32296	high	7.1/10	WordPress Kangu para WooCommerce Plugin <= 2.2.9 is vulnerable to Cross Site Scripting (XSS)	Sep 4, 2023 2y ago
CVE-2023-30485	high	7.1/10	WordPress Avartan Slider Lite Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS)	Sep 4, 2023 2y ago
CVE-2023-40205	high	7.1/10	WordPress PixTypes Plugin <= 1.4.15 is vulnerable to Cross Site Scripting (XSS)	Sep 4, 2023 2y ago