Feed live

mysql CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,348

All time

Critical · Active

12,003

CVSS ≥ 9.0

New · 14 days

2,237

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 31–60 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-12743	medium	6.0/10	SQL Injection in Looker Project Generation Endpoint Allows Access to Internal MySQL Database	Nov 19, 2025 9mo ago
CVE-2025-12202	medium	5.3/10	ajayrandhawa User-Management-PHP-MYSQL web cross-site request forgery	Oct 27, 2025 10mo ago
CVE-2025-12201	medium	5.1/10	ajayrandhawa User-Management-PHP-MYSQL User Management edit-user.php unrestricted upload	Oct 27, 2025 10mo ago
CVE-2025-62611	high	8.2/10	aiomysql allows arbitrary access to client files through vulnerability of a malicious MySQL server	Oct 22, 2025 10mo ago
CVE-2025-10770	medium	5.3/10	jeecgboot JimuReport MySQL JDBC testConnection deserialization	Sep 21, 2025 11mo ago
CVE-2025-9273	medium	4.3/10	CData API Server MySQL Misconfiguration Information Disclosure Vulnerability	Sep 2, 2025 11mo ago
CVE-2025-48998	high	7.3/10	Dataease MYSQL JDBC File Reading Vulnerability	Jun 3, 2025 1y ago
CVE-2025-24375	medium	5.0/10	MySQL K8s charm could leak credentials for root-level user `serverconfig`	Apr 9, 2025 1y ago
CVE-2025-22526	critical	9.8/10	WordPress PHP/MySQL CPU performance statistics Plugin <= 1.2.1 - PHP Object Injection vulnerability	Mar 28, 2025 1y ago
CVE-2025-27018	—	—	Apache Airflow MySQL Provider: SQL injection in MySQL provider core function	Mar 19, 2025 1y ago
CVE-2025-27103	high	7.3/10	Dataease Mysql JDBC Connection Parameters Not Being Verified Leads to Arbitrary File Read Vulnerability	Mar 13, 2025 1y ago
CVE-2025-24974	high	7.3/10	DataEase Mysql JDBC Connection Parameters Not Being Verified Leads to Arbitrary File Read Vulnerability	Mar 13, 2025 1y ago
CVE-2025-1084	medium	5.3/10	Mindskip xzs-mysql 学之思开源考试系统 cross-site request forgery	Feb 6, 2025 1y ago
CVE-2025-1083	low	2.3/10	Mindskip xzs-mysql 学之思开源考试系统 CORS cross-domain policy	Feb 6, 2025 1y ago
CVE-2025-1082	medium	5.1/10	Mindskip xzs-mysql 学之思开源考试系统 Exam Edit edit cross site scripting	Feb 6, 2025 1y ago
CVE-2024-45627	—	—	Apache Linkis Metadata Query Service JDBC: JDBC Datasource Module with Mysql has file read vulnerability	Jan 14, 2025 1y ago
CVE-2024-55953	high	8.6/10	Dataease Mysql JDBC Connection Parameters Not Verified Leads to Deserialization and Arbitrary File Read Vulnerability	Dec 18, 2024 1y ago
CVE-2024-8929	medium	5.8/10	Leak partial content of the heap through heap buffer over-read in mysqlnd	Nov 22, 2024 1y ago
CVE-2024-45537	—	—	Apache Druid: Users can provide MySQL JDBC properties not on allow list	Sep 17, 2024 1y ago
CVE-2024-45308	medium	6.5/10	MySQL & free URL mode allows to hide existing notes in hedgedoc	Sep 2, 2024 1y ago
CVE-2024-4977	—	—	Index WP MySQL For Speed < 1.4.18 - Admin+ Reflected XSS	Jul 13, 2024 2y ago
CVE-2023-51588	high	7.8/10	Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalation Vulnerability	May 3, 2024 2y ago
CVE-2023-42123	high	8.8/10	Control Web Panel mysql_manager Command Injection Remote Code Execution Vulnerability	May 3, 2024 2y ago
CVE-2024-2265	medium	5.3/10	keerti1924 PHP-MYSQL-User-Login-System login.sql inclusion of sensitive information in source code	Mar 7, 2024 2y ago
CVE-2024-2264	high	7.3/10	keerti1924 PHP-MYSQL-User-Login-System login.php sql injection	Mar 7, 2024 2y ago
CVE-2024-27295	high	8.2/10	Directus MySQL accent insensitive email matching	Mar 1, 2024 2y ago
CVE-2024-1702	medium	6.3/10	keerti1924 PHP-MYSQL-User-Login-System edit.php sql injection	Feb 21, 2024 2y ago
CVE-2024-1701	medium	5.3/10	keerti1924 PHP-MYSQL-User-Login-System edit.php access control	Feb 21, 2024 2y ago
CVE-2024-1700	medium	4.3/10	keerti1924 PHP-MYSQL-User-Login-System signup.php cross site scripting	Feb 21, 2024 2y ago
CVE-2024-1346	medium	6.8/10	Weak MySQL database root password in LaborOfficeFree	Feb 19, 2024 2y ago