Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

350,744

All time

Critical · Active

12,340

CVSS ≥ 9.0

New · 14 days

1,134

Newly disclosed

Feed last synced

40 mins ago

Data freshness

Showing 2161–2190 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-27370	high	7.5/10	WordPress Chaty plugin <= 3.5.1 - Sensitive Data Exposure vulnerability	Mar 5, 2026 6mo ago
CVE-2026-27369	high	8.1/10	WordPress Celeste theme <= 1.3.6 - PHP Object Injection vulnerability	Mar 5, 2026 6mo ago
CVE-2026-27367	high	7.1/10	WordPress Musico theme < 3.4.5 - Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 6mo ago
CVE-2026-27363	high	7.1/10	WordPress WP Bakery Autoresponder Addon plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 6mo ago
CVE-2026-27362	medium	6.5/10	WordPress WP Bakery Autoresponder Addon plugin <= 1.0.6 - Broken Access Control vulnerability	Mar 5, 2026 6mo ago
CVE-2026-27361	high	7.5/10	WordPress Responsive Posts Carousel Pro plugin <= 15.1 - Broken Access Control vulnerability	Mar 5, 2026 6mo ago
CVE-2026-27359	high	7.1/10	WordPress Awa Plugins plugin <= 1.4.4 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 6mo ago
CVE-2026-27358	high	7.1/10	WordPress Architecturer theme < 3.9.5 - Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 6mo ago
CVE-2026-27354	medium	6.5/10	WordPress WooCommerce Coming Soon Product with Countdown plugin <= 5.0 - Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 6mo ago
CVE-2026-27353	high	7.1/10	WordPress Grand News \| Magazine Newspaper WordPress theme <= 3.4.3 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 6mo ago
CVE-2026-27352	high	7.1/10	WordPress Starto theme < 2.2.5 - Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 6mo ago
CVE-2026-27348	high	7.1/10	WordPress Photography theme < 7.7.6 - Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 6mo ago
CVE-2026-27344	medium	5.9/10	WordPress inseri core plugin <= 1.0.5 - Broken Access Control vulnerability	Mar 5, 2026 6mo ago
CVE-2026-27342	high	8.1/10	WordPress TopFit - Fitness and Gym WordPress Theme theme <= 1.9 - Local File Inclusion vulnerability	Mar 5, 2026 6mo ago
CVE-2026-27341	high	8.1/10	WordPress TopScorer - Sports WordPress Theme theme <= 1.2 - Local File Inclusion vulnerability	Mar 5, 2026 6mo ago
CVE-2026-27340	high	8.1/10	WordPress Apollo \| Night Club, DJ Event WordPress Theme theme <= 1.3.1 - Local File Inclusion vulnerability	Mar 5, 2026 6mo ago
CVE-2026-27339	high	8.1/10	WordPress Buzz Stone \| Magazine & Viral Blog WordPress Theme theme <= 1.0.2 - Local File Inclusion vulnerability	Mar 5, 2026 6mo ago
CVE-2026-27338	high	8.8/10	WordPress Car Zone theme <= 3.7 - Deserialization of untrusted data vulnerability	Mar 5, 2026 6mo ago
CVE-2026-27337	high	8.1/10	WordPress Chronicle - Lifestyle Magazine & Blog WordPress Theme theme <= 1.0 - Local File Inclusion vulnerability	Mar 5, 2026 6mo ago
CVE-2026-27336	high	8.1/10	WordPress Consultor \| Consulting, Accounting & Legal Counsel WordPress Theme theme <= 1.2.4 - Local File Inclusion vulnerability	Mar 5, 2026 6mo ago
CVE-2026-27335	high	8.1/10	WordPress Ekoterra - NonProfit, Green Energy & Ecology Theme theme <= 1.0.0 - Local File Inclusion vulnerability	Mar 5, 2026 6mo ago
CVE-2026-27334	high	8.1/10	WordPress Alchemists theme <= 4.6.0 - Local File Inclusion vulnerability	Mar 5, 2026 6mo ago
CVE-2026-27332	high	7.1/10	WordPress Agrofood theme < 1.4.0 - Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 6mo ago
CVE-2026-27326	high	8.1/10	WordPress AC Services \| HVAC, Air Conditioning & Heating Company WordPress Theme theme <= 1.2.5 - Local File Inclusion vulnerability	Mar 5, 2026 6mo ago
CVE-2026-27098	high	8.1/10	WordPress Au Pair Agency - Babysitting & Nanny Theme theme <= 1.2.2 - Deserialization of untrusted data vulnerability	Mar 5, 2026 6mo ago
CVE-2026-27097	high	8.1/10	WordPress CasaMia \| Property Rental Real Estate WordPress Theme theme <= 1.1.2 - Local File Inclusion vulnerability	Mar 5, 2026 6mo ago
CVE-2026-24963	high	7.2/10	WordPress Amelia plugin <= 1.2.38 - Privilege Escalation vulnerability	Mar 5, 2026 6mo ago
CVE-2026-24960	critical	9.9/10	WordPress Charety theme < 2.0.2 - Arbitrary File Upload vulnerability	Mar 5, 2026 6mo ago
CVE-2026-24385	high	7.5/10	WordPress Podlove Web Player plugin <= 5.9.1 - PHP Object Injection vulnerability	Mar 5, 2026 6mo ago
CVE-2026-23802	critical	9.1/10	WordPress AI Engine plugin <= 3.3.2 - Arbitrary File Upload vulnerability	Mar 5, 2026 6mo ago