Feed live

codeigniter CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,126

All time

Critical · Active

11,967

CVSS ≥ 9.0

New · 14 days

2,704

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1–22 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-63223	critical	9.8/10	CodeIgniter: Uploaded file extension validation bypass in is_image and mime_in rules	Jul 31, 2026 24d ago
CVE-2026-63222	high	7.5/10	CodeIgniter: Path traversal in UploadedFile::move() when using client-provided filenames	Jul 31, 2026 24d ago
CVE-2026-63221	critical	9.4/10	CodeIgniter: SQL injection is possible via Query Builder deleteBatch() when used with where() conditions	Jul 31, 2026 24d ago
CVE-2026-14637	high	8.8/10	kirilkirkov Ecommerce-CodeIgniter-Bootstrap ShoppingCart.php getCartItems deserialization	Jul 4, 2026 1mo ago
CVE-2026-14636	medium	5.3/10	kirilkirkov Ecommerce-CodeIgniter-Bootstrap Vendor Image Manager AddProduct.php do_upload_others_images path traversal	Jul 4, 2026 1mo ago
CVE-2026-14634	medium	5.3/10	kirilkirkov Ecommerce-CodeIgniter-Bootstrap Subscribed Emails Admin MY_Controller.php checkForPostRequests cross site scripting	Jul 4, 2026 1mo ago
CVE-2026-14633	medium	5.3/10	kirilkirkov Ecommerce-CodeIgniter-Bootstrap Hidden REST API Endpoint set cross site scripting	Jul 4, 2026 1mo ago
CVE-2026-14632	medium	5.3/10	kirilkirkov Ecommerce-CodeIgniter-Bootstrap Trusted Backend MY_Controller.php setReferrer redirect	Jul 4, 2026 1mo ago
CVE-2026-9518	medium	5.3/10	hemant6488 CodeIgniter-StudentManagementSystem Students Controller view_students.php addStudent cross site scripting	May 26, 2026 3mo ago
CVE-2026-9517	medium	6.9/10	hemant6488 CodeIgniter-StudentManagementSystem Student Management addStudentView access control	May 26, 2026 3mo ago
CVE-2025-54418	critical	9.8/10	CodeIgniter4's ImageMagick Handler has Command Injection Vulnerability	Jul 28, 2025 1y ago
CVE-2025-24013	medium	5.3/10	CodeIgniter validation of header name and value	Jan 20, 2025 1y ago
CVE-2024-29904	high	7.5/10	CodeIgniter4 Language class DoS Vulnerability	Mar 29, 2024 2y ago
CVE-2023-48707	medium	5.0/10	Cleartext Storage of Sensitive Information in codeigniter4/shield	Nov 24, 2023 2y ago
CVE-2023-48708	medium	5.0/10	Insertion of Sensitive Information into Log in codeigniter4/shield	Nov 24, 2023 2y ago
CVE-2023-46240	high	7.5/10	CodeIgniter4 vulnerable to information disclosure when detailed error report is displayed in production environment	Oct 31, 2023 2y ago
CVE-2023-27580	high	7.5/10	CodeIgniter Shield Password Shucking Vulnerability	Mar 13, 2023 3y ago
CVE-2022-46170	high	8.6/10	CodeIgniter is vulnerable to improper authentication via Session Handlers	Dec 22, 2022 3y ago
CVE-2022-23556	high	7.0/10	CodeIgniter is vulnerable to IP address spoofing when using proxy	Dec 22, 2022 3y ago
CVE-2022-39284	low	2.6/10	Secure or HttpOnly flag set in Config\Cookie is not reflected in Cookies issued in Codeigniter4	Oct 6, 2022 3y ago
CVE-2022-21715	medium	5.4/10	Cross-site Scripting Vulnerability in CodeIgniter4	Jan 24, 2022 4y ago
CVE-2022-21647	high	7.7/10	Deserialization of Untrusted Data in Codeigniter4	Jan 4, 2022 4y ago