Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

344,385

All time

Critical · Active

11,573

CVSS ≥ 9.0

New · 14 days

2,520

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 16861–16890 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-2490	medium	5.9/10	WordPress UserAgent-Spy Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)	May 11, 2023 3y ago
CVE-2022-45846	medium	5.4/10	WordPress Image Map Pro Plugin < 5.6.9 is vulnerable to Cross Site Request Forgery (CSRF)	May 10, 2023 3y ago
CVE-2022-47587	medium	5.9/10	WordPress WP Search Analytics Plugin <= 1.4.5 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-47590	high	7.1/10	WordPress Maintenance Switch Plugin <= 1.5.2 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-47600	high	7.1/10	WordPress Mass Email To users Plugin <= 1.1.4 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-47606	medium	5.9/10	WordPress WP-CORS Plugin <= 0.2.1 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-47423	medium	5.9/10	WordPress WP-dTree Plugin <= 4.4.5 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-47436	medium	5.9/10	WordPress Yatra Plugin <= 2.1.14 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-47441	high	7.1/10	WordPress Charitable Plugin <= 1.7.0.10 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-47137	medium	5.9/10	WordPress Ninja Tables Plugin <= 4.3.4 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-46861	medium	5.9/10	WordPress Login Page Styler Plugin <= 6.2 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-46817	medium	5.9/10	WordPress Flyzoo Chat Plugin <= 2.3.3 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-46819	medium	5.9/10	WordPress Continuous announcement scroller Plugin <= 13.0 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-33961	medium	4.0/10	WordPress YellowPencil Visual CSS Style Editor Plugin <= 7.5.8 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-32970	medium	4.1/10	WordPress Themify Portfolio Post Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-27455	high	7.1/10	WordPress Update Image Tag Alt Attribute Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-27419	high	7.1/10	WordPress Viable blog Theme <= 1.1.4 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-30746	medium	5.9/10	WordPress Booqable Rental Plugin Plugin <= 2.4.15 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-22696	medium	6.5/10	WordPress Affiliate Links Lite Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-29101	high	7.1/10	WordPress Betheme Theme <= 26.7.5 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-24406	medium	5.9/10	WordPress Simple Popup Images Plugin <= 1.8.6 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-22711	medium	6.5/10	WordPress IMPress Listings Plugin <= 2.6.2 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-24418	medium	5.9/10	WordPress Tiny carousel horizontal slider plus Plugin <= 3.2 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-28932	medium	5.9/10	WordPress WPMobile.App Plugin <= 11.20 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-24392	high	7.1/10	WordPress Full Width Banner Slider Wp Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-30777	high	7.1/10	WordPress Advanced Custom Fields / Advanced Custom Fields PRO plugins <= 6.1.5 vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-46844	medium	6.5/10	WordPress PixFields Plugin <= 0.7.0 is vulnerable to Cross Site Scripting (XSS)	May 9, 2023 3y ago
CVE-2022-46858	high	7.1/10	WordPress Product Specifications for Woocommerce Plugin <= 0.6.0 is vulnerable to Cross Site Scripting (XSS)	May 9, 2023 3y ago
CVE-2022-46864	high	7.1/10	WordPress Woocommerce Custom Checkout Fields Editor With Drag & Drop Plugin <= 0.1 is vulnerable to Cross Site Scripting (XSS)	May 9, 2023 3y ago
CVE-2022-46822	high	7.1/10	WordPress WooCommerce JazzCash Gateway Plugin Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)	May 9, 2023 3y ago