Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,369

All time

Critical · Active

12,003

CVSS ≥ 9.0

New · 14 days

2,211

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 2071–2100 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-27396	high	7.3/10	WordPress Directory Pro plugin <= 2.5.6 - Broken Access Control vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27390	high	8.8/10	WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.1 - Account Takeover vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27389	critical	9.8/10	WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.1 - Account Takeover vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27388	high	7.5/10	WordPress DesignThemes Booking Manager plugin <= 2.0 - Broken Access Control vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27386	high	7.5/10	WordPress DesignThemes Directory Addon plugin <= 1.8 - Broken Access Control vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27385	high	7.1/10	WordPress DesignThemes Portfolio plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27384	critical	9.0/10	WordPress W3 Total Cache plugin <= 2.9.1 - Arbitrary Code Execution vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27383	high	8.1/10	WordPress Metro theme <= 2.13 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27382	high	7.1/10	WordPress Metro theme <= 2.13 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27381	high	8.1/10	WordPress Aora theme <= 1.3.15 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27379	high	8.8/10	WordPress NextScripts plugin <= 4.4.7 - PHP Object Injection vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27376	high	7.1/10	WordPress Claue - Clean, Minimal Elementor WooCommerce Theme theme <= 2.2.7 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27375	high	7.1/10	WordPress Gecko theme <= 1.9.8 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27374	high	7.5/10	WordPress WooCommerce Order Details plugin <= 3.1 - Broken Access Control vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27373	high	8.5/10	WordPress Tablesome plugin <= 1.2.3 - SQL Injection vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27370	high	7.5/10	WordPress Chaty plugin <= 3.5.1 - Sensitive Data Exposure vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27369	high	8.1/10	WordPress Celeste theme <= 1.3.6 - PHP Object Injection vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27367	high	7.1/10	WordPress Musico theme < 3.4.5 - Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27363	high	7.1/10	WordPress WP Bakery Autoresponder Addon plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27362	medium	6.5/10	WordPress WP Bakery Autoresponder Addon plugin <= 1.0.6 - Broken Access Control vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27361	high	7.5/10	WordPress Responsive Posts Carousel Pro plugin <= 15.1 - Broken Access Control vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27359	high	7.1/10	WordPress Awa Plugins plugin <= 1.4.4 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27358	high	7.1/10	WordPress Architecturer theme < 3.9.5 - Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27354	medium	6.5/10	WordPress WooCommerce Coming Soon Product with Countdown plugin <= 5.0 - Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27353	high	7.1/10	WordPress Grand News \| Magazine Newspaper WordPress theme <= 3.4.3 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27352	high	7.1/10	WordPress Starto theme < 2.2.5 - Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27348	high	7.1/10	WordPress Photography theme < 7.7.6 - Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27344	medium	5.9/10	WordPress inseri core plugin <= 1.0.5 - Broken Access Control vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27342	high	8.1/10	WordPress TopFit - Fitness and Gym WordPress Theme theme <= 1.9 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27341	high	8.1/10	WordPress TopScorer - Sports WordPress Theme theme <= 1.2 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago