Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,529

All time

Critical · Active

12,232

CVSS ≥ 9.0

New · 14 days

3,110

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 16561–16590 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-24412	medium	5.9/10	WordPress Image Social Feed Plugin Plugin <= 1.7.6 is vulnerable to Cross Site Scripting (XSS)	Sep 1, 2023 3y ago
CVE-2023-25477	medium	5.9/10	WordPress Video Gallery Plugin <= 1.3.12 is vulnerable to Cross Site Scripting (XSS)	Sep 1, 2023 3y ago
CVE-2023-27621	medium	5.9/10	WordPress Livestream Notice Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-24401	medium	5.9/10	WordPress Mobile Call Now & Map Buttons Plugin <= 1.5.0 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-24397	medium	5.9/10	WordPress Reservation.Studio widget Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-25471	high	7.1/10	WordPress WCP OpenWeather Plugin <= 2.5.0 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-28415	medium	5.9/10	WordPress Side Cart Woocommerce (Ajax) Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-28692	medium	5.9/10	WordPress WP Abstracts Plugin <= 2.6.3 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-25466	medium	5.8/10	WordPress Who Hit The Page – Hit Counter Plugin <= 1.4.14.3 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-35092	medium	5.9/10	WordPress breadcrumb simple Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-35094	medium	6.5/10	WordPress WP Matterport Shortcode Plugin <= 2.1.4 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-25453	high	7.1/10	WordPress WordPress Tables Plugin <= 1.3.9 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-34372	medium	5.9/10	WordPress Download SpamReferrerBlock Plugin <= 2.22 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-32294	medium	5.9/10	WordPress GDPR Cookie Consent Notice Box Plugin <= 1.1.6 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-34004	medium	6.5/10	WordPress WooCommerce Box Office Plugin <= 1.1.50 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-34008	high	7.1/10	WordPress WP ERP Plugin <= 1.12.3 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-34022	high	7.1/10	WordPress Dynamic QR Code Generator Plugin <= 0.0.5 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-34023	high	7.1/10	WordPress WordPress Social Login Plugin <= 3.0.4 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-34032	high	7.1/10	WordPress bbPress Toolkit Plugin <= 1.0.12 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-34172	medium	5.9/10	WordPress WordPress Social Login Plugin <= 3.0.4 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-34173	medium	5.9/10	WordPress Yandex Metrica Counter Plugin <= 1.4.3 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-34174	high	7.1/10	WordPress BBS e-Popup Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-34180	high	7.1/10	WordPress Google Fonts For WordPress Plugin <= 3.0.0 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-34175	high	7.1/10	WordPress Login Configurator Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-34176	high	7.1/10	WordPress Chilexpress woo oficial Plugin <= 1.2.9 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-34184	high	7.1/10	WordPress Woocommerce Order address Print Plugin <= 3.2 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-34183	medium	5.9/10	WordPress Unite Gallery Lite Plugin <= 1.7.61 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-34187	medium	5.9/10	WordPress Call Now Icon Animate Plugin <= 0.1.0 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-27426	medium	5.9/10	WordPress NotifyVisitors Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-33929	medium	5.9/10	WordPress Easy Admin Menu Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago