Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,596

All time

Critical · Active

12,236

CVSS ≥ 9.0

New · 14 days

3,050

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 17941–17948 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2020-11028	medium	5.8/10	Unauthenticated disclosure of certain private posts in WordPress	Apr 30, 2020 6y ago
CVE-2020-11029	medium	5.8/10	Cross-site scripting in stats method (object cache) in WordPress	Apr 30, 2020 6y ago
CVE-2020-11030	medium	6.4/10	Cross-site scripting (XSS) in Search block in WordPress	Apr 30, 2020 6y ago
CVE-2020-11025	medium	5.8/10	Authenticated cross-site scripting (XSS) in WordPress Customizer	Apr 30, 2020 6y ago
CVE-2020-11027	medium	6.1/10	Password reset links invalidation issue in WordPress	Apr 30, 2020 6y ago
CVE-2019-16781	medium	5.8/10	Stored cross-site scripting (XSS) in WordPress block editor	Dec 26, 2019 6y ago
CVE-2019-16780	medium	5.8/10	Stored cross-site scripting (XSS) in WordPress block editor	Dec 26, 2019 6y ago
CVE-2016-6565	—	—	The Imagely NextGen Gallery plugin for Wordpress prior to version 2.1.57 may execute code from an uploaded malicious file	Jul 13, 2018 8y ago