Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,529

All time

Critical · Active

12,232

CVSS ≥ 9.0

New · 14 days

3,105

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 16741–16770 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-36385	high	7.1/10	WordPress PostX – Gutenberg Blocks for Post Grid Plugin <= 2.9.9 is vulnerable to Cross Site Scripting (XSS)	Jul 25, 2023 3y ago
CVE-2023-34017	high	7.1/10	WordPress Five Star Restaurant Reservations Plugin <= 2.6.7 is vulnerable to Cross Site Scripting (XSS)	Jul 25, 2023 3y ago
CVE-2023-36502	high	7.1/10	WordPress Balkon Theme <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)	Jul 25, 2023 3y ago
CVE-2023-36501	high	7.1/10	WordPress teachPress Plugin <= 9.0.2 is vulnerable to Cross Site Scripting (XSS)	Jul 25, 2023 3y ago
CVE-2023-34369	medium	5.9/10	WordPress Login Configurator Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)	Jul 25, 2023 3y ago
CVE-2023-35043	high	7.1/10	WordPress Recent Posts Slider Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)	Jul 25, 2023 3y ago
CVE-2023-33925	high	7.1/10	WordPress WooCommerce Product Categories Selection Widget Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)	Jul 25, 2023 3y ago
CVE-2023-33312	high	7.1/10	WordPress Easy Captcha Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)	Jul 18, 2023 3y ago
CVE-2023-33329	medium	5.9/10	WordPress Custom Post Type Generator Plugin <= 2.4.2 is vulnerable to Cross Site Scripting (XSS)	Jul 18, 2023 3y ago
CVE-2023-36383	medium	5.9/10	WordPress Event Manager for WooCommerce Plugin <= 3.9.5 is vulnerable to Cross Site Scripting (XSS)	Jul 18, 2023 3y ago
CVE-2023-36384	high	7.1/10	WordPress Booking Calendar Contact Form Plugin <= 1.2.40 is vulnerable to Cross Site Scripting (XSS)	Jul 18, 2023 3y ago
CVE-2023-24390	medium	5.9/10	WordPress WeSecur Security Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)	Jul 18, 2023 3y ago
CVE-2022-47421	medium	5.9/10	WordPress ARMember (free) and ARMember (premium) plugins - vulnerable to Auth. Stored Cross Site Scripting (XSS)	Jul 18, 2023 3y ago
CVE-2022-34155	high	8.8/10	WordPress OAuth Single Sign On – SSO (OAuth Client) Plugin <= 6.23.3 is vulnerable to Broken Authentication	Jul 18, 2023 3y ago
CVE-2023-32965	high	7.1/10	WordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Scripting (XSS)	Jul 18, 2023 3y ago
CVE-2023-37892	medium	4.3/10	WordPress Shortcode IMDB Plugin <= 6.0.8 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2023-37973	medium	5.4/10	WordPress Replace Word Plugin <= 2.1 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2023-37889	medium	4.3/10	WordPress WPAdmin AWS CDN Plugin <= 2.0.13 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2023-25036	medium	4.3/10	WordPress Social Media Icons Widget Plugin <= 1.6 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2023-37387	medium	5.4/10	WordPress Classified Listing Plugin <= 2.4.5 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2022-47169	medium	4.3/10	WordPress Visibility Logic for Elementor Plugin <= 2.3.4 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2023-37386	medium	5.4/10	WordPress Media Library Helper by Codexin Plugin <= 1.2.0 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2023-25475	medium	4.3/10	WordPress Smart YouTube PRO Plugin <= 4.3 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2022-45828	medium	4.3/10	WordPress NOO Timetable Plugin <= 2.1.3 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2022-46857	medium	5.4/10	WordPress SiteAlert (Formerly WP Health) Plugin <= 1.9.7 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2023-25473	medium	5.4/10	WordPress Flickr Justified Gallery Plugin <= 3.5 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2023-25482	medium	4.3/10	WordPress WP Tiles Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2022-38062	medium	4.3/10	WordPress Download Theme Plugin <= 1.0.9 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2022-36424	medium	4.3/10	WordPress Easy Appointments Plugin <= 3.11.9 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-37985	medium	4.3/10	WordPress Five Star Restaurant Menu Plugin <= 2.4.6 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago