Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,529

All time

Critical · Active

12,232

CVSS ≥ 9.0

New · 14 days

3,105

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 16801–16830 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-36693	medium	4.3/10	WordPress WP RSS Images Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-37391	medium	5.4/10	WordPress WordPress Mobile Pack Plugin <= 3.4.1 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-34015	medium	5.4/10	WordPress Advanced Flat rate shipping Woocommerce Plugin <= 1.6.4.4 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-35913	medium	4.3/10	WordPress OOPSpam Anti-Spam Plugin <= 1.1.44 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-35774	medium	5.4/10	WordPress LWS Tools Plugin <= 2.4.1 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-36517	medium	4.3/10	WordPress WP Abstracts Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-35781	medium	5.4/10	WordPress LWS Cleaner Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2022-45823	medium	4.3/10	WordPress Video Contest WordPress Plugin Plugin <= 3.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-25468	medium	4.3/10	WordPress Reservation.Studio widget Plugin <= 1.0.11 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-23997	medium	4.3/10	WordPress Database Collation Fix Plugin <= 1.2.7 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-25487	medium	4.3/10	WordPress PixTypes Plugin <= 1.4.14 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-24421	medium	5.4/10	WordPress PHP Compatibility Checker Plugin <= 1.5.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-25051	medium	4.3/10	WordPress Comment Reply Notification Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-37392	medium	5.4/10	WordPress WP Dummy Content Generator Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-35912	medium	4.3/10	WordPress Potent Donations for WooCommerce Plugin <= 1.1.9 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-36691	medium	5.4/10	WordPress WebwinkelKeur Plugin <= 3.24 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-28995	medium	5.4/10	WordPress Configurable Tag Cloud Plugin <= 5.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-23993	medium	5.4/10	WordPress IP Blocker Lite Plugin <= 11.1.1 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-28986	medium	5.4/10	WordPress Affiliates Manager Plugin <= 2.9.20 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-29095	high	7.6/10	WordPress RSVPMarker Plugin < 10.5.5 is vulnerable to SQL Injection	Jul 10, 2023 3y ago
CVE-2023-28989	medium	4.3/10	WordPress Happy Addons for Elementor Plugin <= 3.8.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-25478	medium	4.3/10	WordPress Weather Station Plugin <= 3.8.12 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-22695	medium	4.3/10	WordPress Custom Field Template Plugin <= 2.5.8 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-22694	medium	4.3/10	WordPress BigContact Plugin <= 1.5.8 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-24405	medium	5.4/10	WordPress Contact Form 7 – PayPal & Stripe Add-on Plugin <= 1.9.3 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-22673	medium	5.4/10	WordPress Website Monetization by MageNet Plugin <= 1.0.29.1 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-24395	medium	5.4/10	WordPress Contact Form 7 Redirect & Thank You Page Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2020-8934	medium	4.3/10	Site Kit by Google plugin for WordPress	Jul 7, 2023 3y ago
CVE-2023-2982	critical	9.8/10	WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass	Jun 29, 2023 3y ago
CVE-2023-0873	—	—	Kanban Boards for WordPress < 2.5.21 - Admin+ Stored XSS	Jun 27, 2023 3y ago