Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,530

All time

Critical · Active

12,232

CVSS ≥ 9.0

New · 14 days

3,091

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 17101–17130 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-47436	medium	5.9/10	WordPress Yatra Plugin <= 2.1.14 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-47441	high	7.1/10	WordPress Charitable Plugin <= 1.7.0.10 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-47137	medium	5.9/10	WordPress Ninja Tables Plugin <= 4.3.4 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-46861	medium	5.9/10	WordPress Login Page Styler Plugin <= 6.2 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-46817	medium	5.9/10	WordPress Flyzoo Chat Plugin <= 2.3.3 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-46819	medium	5.9/10	WordPress Continuous announcement scroller Plugin <= 13.0 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-33961	medium	4.0/10	WordPress YellowPencil Visual CSS Style Editor Plugin <= 7.5.8 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-32970	medium	4.1/10	WordPress Themify Portfolio Post Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-27455	high	7.1/10	WordPress Update Image Tag Alt Attribute Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-27419	high	7.1/10	WordPress Viable blog Theme <= 1.1.4 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-30746	medium	5.9/10	WordPress Booqable Rental Plugin Plugin <= 2.4.15 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-22696	medium	6.5/10	WordPress Affiliate Links Lite Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-29101	high	7.1/10	WordPress Betheme Theme <= 26.7.5 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-24406	medium	5.9/10	WordPress Simple Popup Images Plugin <= 1.8.6 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-22711	medium	6.5/10	WordPress IMPress Listings Plugin <= 2.6.2 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-24418	medium	5.9/10	WordPress Tiny carousel horizontal slider plus Plugin <= 3.2 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-28932	medium	5.9/10	WordPress WPMobile.App Plugin <= 11.20 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-24392	high	7.1/10	WordPress Full Width Banner Slider Wp Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-30777	high	7.1/10	WordPress Advanced Custom Fields / Advanced Custom Fields PRO plugins <= 6.1.5 vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-46844	medium	6.5/10	WordPress PixFields Plugin <= 0.7.0 is vulnerable to Cross Site Scripting (XSS)	May 9, 2023 3y ago
CVE-2022-46858	high	7.1/10	WordPress Product Specifications for Woocommerce Plugin <= 0.6.0 is vulnerable to Cross Site Scripting (XSS)	May 9, 2023 3y ago
CVE-2022-46864	high	7.1/10	WordPress Woocommerce Custom Checkout Fields Editor With Drag & Drop Plugin <= 0.1 is vulnerable to Cross Site Scripting (XSS)	May 9, 2023 3y ago
CVE-2022-46822	high	7.1/10	WordPress WooCommerce JazzCash Gateway Plugin Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)	May 9, 2023 3y ago
CVE-2023-24372	medium	5.9/10	WordPress Simple Custom Author Profiles Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)	May 9, 2023 3y ago
CVE-2022-41640	medium	6.5/10	WordPress Wholesale Suite Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS)	May 9, 2023 3y ago
CVE-2023-22710	high	7.1/10	WordPress Return and Warranty Management System for WooCommerce Plugin <= 1.2.3 is vulnerable to Cross Site Scripting (XSS)	May 8, 2023 3y ago
CVE-2023-24376	medium	5.9/10	WordPress WP Simple Events Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)	May 8, 2023 3y ago
CVE-2023-1979	medium	4.9/10	Auth bypass in Web Stories for WordPress plugin	May 8, 2023 3y ago
CVE-2023-24408	medium	6.5/10	WordPress Ecwid Shopping Cart Plugin <= 6.11.4 is vulnerable to Cross Site Scripting (XSS)	May 8, 2023 3y ago
CVE-2022-45065	high	7.1/10	WordPress SEO Plugin by Squirrly SEO Plugin <= 12.1.20 is vulnerable to Cross Site Scripting (XSS)	May 8, 2023 3y ago