Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,530

All time

Critical · Active

12,232

CVSS ≥ 9.0

New · 14 days

3,091

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 17041–17070 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-25474	medium	4.3/10	WordPress About Me 3000 widget Plugin <= 2.2.6 is vulnerable to Cross Site Request Forgery (CSRF)	May 23, 2023 3y ago
CVE-2022-46813	medium	4.3/10	WordPress Advanced Database Cleaner Plugin <= 3.1.1 is vulnerable to Cross Site Request Forgery (CSRF)	May 23, 2023 3y ago
CVE-2023-26011	medium	4.3/10	WordPress Read More Excerpt Link Plugin <= 1.6 is vulnerable to Cross Site Request Forgery (CSRF)	May 23, 2023 3y ago
CVE-2023-26014	medium	4.3/10	WordPress Minify HTML Plugin <= 2.1.7 is vulnerable to Cross Site Request Forgery (CSRF)	May 23, 2023 3y ago
CVE-2023-25056	medium	4.3/10	WordPress Feed Them Social Plugin <= 3.0.2 is vulnerable to Cross Site Request Forgery (CSRF)	May 23, 2023 3y ago
CVE-2022-46853	medium	4.3/10	WordPress The Post Grid Plugin <= 5.0.4 is vulnerable to Cross Site Request Forgery (CSRF)	May 23, 2023 3y ago
CVE-2022-46851	medium	4.3/10	WordPress Starter Templates Plugin <= 3.1.20 is vulnerable to Cross Site Request Forgery (CSRF)	May 23, 2023 3y ago
CVE-2023-25707	medium	6.3/10	WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.12 is vulnerable to Cross Site Request Forgery (CSRF)	May 23, 2023 3y ago
CVE-2023-25481	medium	5.4/10	WordPress Podlove Subscribe button Plugin <= 1.3.7 is vulnerable to Cross Site Request Forgery (CSRF)	May 23, 2023 3y ago
CVE-2023-25472	medium	4.3/10	WordPress Podlove Podcast Publisher Plugin <= 3.8.3 is vulnerable to Cross Site Request Forgery (CSRF)	May 23, 2023 3y ago
CVE-2023-25448	medium	5.4/10	WordPress Archivist – Custom Archive Templates Plugin <= 1.7.4 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2023-25447	medium	4.3/10	WordPress ColorWay Theme <= 4.2.3 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-41608	medium	5.4/10	WordPress Asgaros Forum Plugin <= 2.2.0 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-44739	medium	5.3/10	WordPress Quick Restaurant Reservations Plugin <= 1.5.4 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-45076	medium	4.3/10	WordPress Flexible Elementor Panel Plugin <= 2.3.8 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-45079	medium	4.7/10	WordPress Loginizer Plugin <= 1.7.5 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-45376	medium	4.3/10	WordPress Side Cart Woocommerce (Ajax) Plugin < 2.1 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-47167	medium	5.4/10	WordPress Crayon Syntax Highlighter Plugin <= 2.8.4 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-47183	medium	5.4/10	WordPress Extra Block Design, Style, CSS for ANY Gutenberg Blocks Plugin <= 0.2.6 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-47611	medium	4.3/10	WordPress Hover Image Plugin <= 1.4.1 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-47609	medium	6.3/10	WordPress DNUI Plugin <= 2.8.1 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-47142	medium	4.3/10	WordPress Mediamatic – Media Library Folders Plugin <= 2.8.1 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2023-22714	medium	4.3/10	WordPress Coming Soon by Supsystic Plugin <= 1.7.10 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2023-22709	medium	4.3/10	WordPress SRS Simple Hits Counter Plugin <= 1.1.0 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2023-22692	medium	4.3/10	WordPress Name Directory Plugin <= 1.27.1 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2023-22688	medium	4.3/10	WordPress WP Tabs Slides Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-47134	medium	4.3/10	WordPress Gallery Metabox Plugin <= 1.5 is vulnerable to Cross Site Request Forgery (CSRF)	May 20, 2023 3y ago
CVE-2023-32589	medium	4.3/10	WordPress Dyslexiefont Free Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF)	May 20, 2023 3y ago
CVE-2023-22689	medium	5.4/10	WordPress Auto Affiliate Links Plugin <= 6.3 is vulnerable to Broken Access Control	May 20, 2023 3y ago
CVE-2023-24414	medium	4.3/10	WordPress Robo Gallery Plugin <= 3.2.11 is vulnerable to Cross Site Request Forgery (CSRF)	May 20, 2023 3y ago