Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

344,471

All time

Critical · Active

11,586

CVSS ≥ 9.0

New · 14 days

2,450

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 17701–17710 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2020-4046	medium	5.4/10	Authenticated XSS through embed block in WordPress	Jun 12, 2020 6y ago
CVE-2020-11026	high	8.7/10	Specially crafted filenames in WordPress leading to XSS	Apr 30, 2020 6y ago
CVE-2020-11028	medium	5.8/10	Unauthenticated disclosure of certain private posts in WordPress	Apr 30, 2020 6y ago
CVE-2020-11029	medium	5.8/10	Cross-site scripting in stats method (object cache) in WordPress	Apr 30, 2020 6y ago
CVE-2020-11030	medium	6.4/10	Cross-site scripting (XSS) in Search block in WordPress	Apr 30, 2020 6y ago
CVE-2020-11025	medium	5.8/10	Authenticated cross-site scripting (XSS) in WordPress Customizer	Apr 30, 2020 6y ago
CVE-2020-11027	medium	6.1/10	Password reset links invalidation issue in WordPress	Apr 30, 2020 6y ago
CVE-2019-16781	medium	5.8/10	Stored cross-site scripting (XSS) in WordPress block editor	Dec 26, 2019 6y ago
CVE-2019-16780	medium	5.8/10	Stored cross-site scripting (XSS) in WordPress block editor	Dec 26, 2019 6y ago
CVE-2016-6565	—	—	The Imagely NextGen Gallery plugin for Wordpress prior to version 2.1.57 may execute code from an uploaded malicious file	Jul 13, 2018 8y ago