Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,543

All time

Critical · Active

12,233

CVSS ≥ 9.0

New · 14 days

3,049

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 17401–17430 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-24384	medium	4.3/10	WordPress Organization chart Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 23, 2023 3y ago
CVE-2022-4786	—	—	Video.js - HTML5 Video Player for WordPress <= 4.5.0 - Contributor+ Stored XSS via Shortcode	Feb 21, 2023 3y ago
CVE-2023-24388	medium	5.4/10	WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 17, 2023 3y ago
CVE-2023-23899	medium	4.3/10	WordPress Extensions For CF7 Plugin <= 2.0.8 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 17, 2023 3y ago
CVE-2023-24382	medium	5.4/10	WordPress Material Design Icons for Page Builders Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 14, 2023 3y ago
CVE-2022-46862	medium	4.3/10	WordPress Quiz And Survey Master Plugin <= 8.0.7 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 14, 2023 3y ago
CVE-2023-24377	medium	4.3/10	WordPress Ecwid Shopping Cart Plugin <= 6.11.3 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 14, 2023 3y ago
CVE-2023-25065	medium	5.4/10	WordPress WP Tabs Plugin <= 2.1.14 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 14, 2023 3y ago
CVE-2023-25066	medium	4.3/10	WordPress FV Flowplayer Video Player Plugin <= 7.5.30.7212 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 14, 2023 3y ago
CVE-2022-43469	medium	5.4/10	WordPress Corona Virus (COVID-19) Banner & Live Data Plugin <= 1.7.0.6 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 14, 2023 3y ago
CVE-2022-41134	medium	5.4/10	WordPress Optinly Plugin <= 1.0.15 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 13, 2023 3y ago
CVE-2023-0270	—	—	YaMaps for WordPress Plugin < 0.6.26 - Contributor+ Stored XSS	Feb 13, 2023 3y ago
CVE-2022-41620	medium	5.4/10	WordPress SeoSamba for WordPress Webmasters Plugin <= 1.0.5 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 8, 2023 3y ago
CVE-2022-4626	—	—	PPWP – WordPress Password Protect Page < 1.8.6 - Contributor+ Stored XSS in Shortcode	Feb 6, 2023 3y ago
CVE-2022-4321	—	—	PDF Generator for WordPress < 1.1.2 - Reflected XSS	Feb 6, 2023 3y ago
CVE-2022-4674	—	—	Ibtana – WordPress Website Builder < 1.1.8.8 - Contributor+ Stored XSS via Shortcode	Feb 6, 2023 3y ago
CVE-2022-29416	medium	4.7/10	WordPress Afterpay Gateway for WooCommerce Plugin <= 3.5.0 is vulnerable to Cross Site Scripting (XSS)	Feb 6, 2023 3y ago
CVE-2022-46842	medium	5.4/10	WordPress JS Help Desk plugin <= 2.7.1 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 2, 2023 3y ago
CVE-2022-46815	medium	5.4/10	WordPress Conditional Shipping for WooCommerce Plugin <= 2.3.1 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 2, 2023 3y ago
CVE-2022-45807	medium	5.4/10	WordPress WP Mail Log Plugin <= 1.0.1 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 2, 2023 3y ago
CVE-2022-45067	medium	4.3/10	WordPress Exclusive Addons Elementor Plugin <= 2.6.1 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 2, 2023 3y ago
CVE-2022-40692	medium	5.4/10	WordPress Sunshine Photo Cart Plugin <= 2.9.13 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 2, 2023 3y ago
CVE-2022-44585	medium	5.4/10	WordPress Homepage Pop-up Plugin <= 1.2.5 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 2, 2023 3y ago
CVE-2022-36401	medium	5.4/10	WordPress TeraWallet – For WooCommerce Plugin <= 1.3.24 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 2, 2023 3y ago
CVE-2022-4654	—	—	Pricing Tables WordPress Plugin – Easy Pricing Tables < 3.2.3 - Contributor+ Stored XSS via Shortcode	Jan 30, 2023 3y ago
CVE-2022-4496	—	—	miniOrange WordPress SAML SSO multiple versions - Open Redirect in SSO login	Jan 30, 2023 3y ago
CVE-2022-45820	critical	9.1/10	WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to SQL Injection	Jan 24, 2023 3y ago
CVE-2022-45808	critical	9.9/10	WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to SQL Injection	Jan 24, 2023 3y ago
CVE-2022-47615	critical	9.3/10	WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to Local File Inclusion	Jan 24, 2023 3y ago
CVE-2023-22721	medium	6.5/10	WordPress Oi Yandex.Maps for WordPress Plugin <= 3.2.7 is vulnerable to Cross Site Scripting (XSS)	Jan 23, 2023 3y ago