Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,529

All time

Critical · Active

12,232

CVSS ≥ 9.0

New · 14 days

3,110

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 16531–16560 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-40206	medium	5.9/10	WordPress WP 404 Auto Redirect to Similar Post Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)	Sep 4, 2023 2y ago
CVE-2023-40208	high	7.1/10	WordPress Stock Ticker Plugin <= 3.23.3 is vulnerable to Cross Site Scripting (XSS)	Sep 4, 2023 2y ago
CVE-2023-39992	high	7.1/10	WordPress Online Booking & Scheduling Calendar for WordPress by vcita Plugin <= 4.3.2 is vulnerable to Cross Site Scripting (XSS)	Sep 4, 2023 2y ago
CVE-2023-30494	high	7.1/10	WordPress ImageRecycle pdf & image compression Plugin <= 3.1.10 is vulnerable to Cross Site Scripting (XSS)	Sep 4, 2023 2y ago
CVE-2023-31220	high	7.1/10	WordPress WP Categories Widget Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)	Sep 4, 2023 2y ago
CVE-2023-37393	high	7.1/10	WordPress Atarim Plugin <= 3.9.3 is vulnerable to Cross Site Scripting (XSS)	Sep 4, 2023 2y ago
CVE-2023-39988	medium	6.5/10	WordPress WxSync Plugin <= 2.7.23 is vulnerable to Cross Site Scripting (XSS)	Sep 4, 2023 2y ago
CVE-2023-39991	high	7.1/10	WordPress BigBlueButton Plugin <= 3.0.0-beta.4 is vulnerable to Cross Site Scripting (XSS)	Sep 4, 2023 2y ago
CVE-2023-39987	medium	5.9/10	WordPress wSecure Lite Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)	Sep 4, 2023 2y ago
CVE-2023-39918	high	7.1/10	WordPress Booking Package Plugin <= 1.6.01 is vulnerable to Cross Site Scripting (XSS)	Sep 4, 2023 2y ago
CVE-2023-39919	medium	5.9/10	WordPress wpShopGermany – Protected Shops Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)	Sep 4, 2023 2y ago
CVE-2023-25465	medium	5.9/10	WordPress wp tell a friend popup form Plugin <= 7.1 is vulnerable to Cross Site Scripting (XSS)	Sep 4, 2023 2y ago
CVE-2023-39162	high	7.1/10	WordPress User Email Verification for WooCommerce Plugin <= 3.5.0 is vulnerable to Cross Site Scripting (XSS)	Sep 4, 2023 2y ago
CVE-2023-39164	high	7.1/10	WordPress Molongui Plugin <= 4.6.19 is vulnerable to Cross Site Scripting (XSS)	Sep 4, 2023 2y ago
CVE-2023-36382	medium	5.9/10	WordPress Media Library Categories Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)	Sep 4, 2023 2y ago
CVE-2023-38476	medium	5.9/10	WordPress Client Portal : SuiteDash Direct Login Plugin <= 1.7.6 is vulnerable to Cross Site Scripting (XSS)	Sep 3, 2023 2y ago
CVE-2023-38482	medium	5.9/10	WordPress Post Affiliate Pro Plugin <= 1.25.0 is vulnerable to Cross Site Scripting (XSS)	Sep 3, 2023 2y ago
CVE-2023-38516	medium	6.5/10	WordPress Audio Player with Playlist Ultimate Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)	Sep 3, 2023 2y ago
CVE-2023-38517	medium	5.9/10	WordPress WRC Pricing Tables Plugin <= 2.3.7 is vulnerable to Cross Site Scripting (XSS)	Sep 3, 2023 2y ago
CVE-2023-38518	medium	5.9/10	WordPress Borderless Plugin <= 1.4.8 is vulnerable to Cross Site Scripting (XSS)	Sep 3, 2023 2y ago
CVE-2023-38387	medium	5.9/10	WordPress Elastic Email Sender Plugin <= 1.2.6 is vulnerable to Cross Site Scripting (XSS)	Sep 3, 2023 2y ago
CVE-2023-38521	medium	5.9/10	WordPress Exifography Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)	Sep 3, 2023 2y ago
CVE-2023-37997	high	7.1/10	WordPress Post List With Featured Image Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)	Sep 1, 2023 3y ago
CVE-2023-37994	medium	6.5/10	WordPress Art Decoration Shortcode Plugin <= 1.5.6 is vulnerable to Cross Site Scripting (XSS)	Sep 1, 2023 3y ago
CVE-2023-34011	high	7.1/10	WordPress ShopConstruct Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)	Sep 1, 2023 3y ago
CVE-2023-37986	medium	5.9/10	WordPress YourMembership Single Sign On Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)	Sep 1, 2023 3y ago
CVE-2023-37893	high	7.1/10	WordPress Coming Soon Chop Chop Plugin <= 2.2.4 is vulnerable to Cross Site Scripting (XSS)	Sep 1, 2023 3y ago
CVE-2023-25488	medium	5.9/10	WordPress WP Default Feature Image Plugin <= 1.0.1.1 is vulnerable to Cross Site Scripting (XSS)	Sep 1, 2023 3y ago
CVE-2023-25044	medium	5.9/10	WordPress Social Share Boost Plugin <= 4.4 is vulnerable to Cross Site Scripting (XSS)	Sep 1, 2023 3y ago
CVE-2023-25042	medium	5.9/10	WordPress oAuth Twitter Feed for Developers Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)	Sep 1, 2023 3y ago