Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

344,180

All time

Critical · Active

11,533

CVSS ≥ 9.0

New · 14 days

2,691

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1–30 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-19196	medium	6.9/10	SourceCodester Photo Share Website ajax.php login sql injection	Aug 7, 2026 today
CVE-2026-67434	high	7.3/10	PHP_CodeSniffer gitblame report command injection via crafted filename	Aug 6, 2026 today
CVE-2026-19071	medium	5.3/10	itsourcecode Hospital Management System viewappointment.php sql injection	Aug 6, 2026 today
CVE-2026-19070	medium	5.3/10	itsourcecode Hospital Management System viewadmin.php sql injection	Aug 6, 2026 today
CVE-2026-19069	medium	5.3/10	itsourcecode Hospital Management System treatmentrecord.php sql injection	Aug 6, 2026 today
CVE-2026-19068	medium	5.3/10	itsourcecode Hospital Management System treatmentdetail.php sql injection	Aug 6, 2026 today
CVE-2026-19067	medium	5.3/10	itsourcecode Hospital Management System treatment.php sql injection	Aug 6, 2026 today
CVE-2026-19066	medium	5.3/10	SourceCodester Online Examination & Learning Management System view_students.php authorization	Aug 6, 2026 today
CVE-2026-19065	medium	5.3/10	SourceCodester Online Examination & Learning Management System upload_files.php unrestricted upload	Aug 6, 2026 today
CVE-2026-19064	medium	5.3/10	SourceCodester Online Examination & Learning Management System view.php authorization	Aug 6, 2026 today
CVE-2026-65581	critical	9.8/10	WordPress AI ANN theme <= 1.29.0 - PHP Object Injection vulnerability	Aug 6, 2026 today
CVE-2026-65579	critical	9.8/10	WordPress Agricola theme <= 1.21.0 - PHP Object Injection vulnerability	Aug 6, 2026 today
CVE-2026-65578	critical	9.8/10	WordPress Agora theme <= 1.9 - PHP Object Injection vulnerability	Aug 6, 2026 today
CVE-2026-65577	critical	9.8/10	WordPress Advice theme <= 1.18.0 - PHP Object Injection vulnerability	Aug 6, 2026 today
CVE-2026-65576	critical	9.8/10	WordPress Adrena theme <= 1.2.14 - PHP Object Injection vulnerability	Aug 6, 2026 today
CVE-2026-65575	critical	9.8/10	WordPress Accalia theme <= 1.5.3 - PHP Object Injection vulnerability	Aug 6, 2026 today
CVE-2026-65574	critical	9.8/10	WordPress Abogado theme <= 1.18 - PHP Object Injection vulnerability	Aug 6, 2026 today
CVE-2026-65573	critical	9.8/10	WordPress Abelle theme <= 1.22 - PHP Object Injection vulnerability	Aug 6, 2026 today
CVE-2026-65572	critical	9.8/10	WordPress A.Williams theme <= 1.3.1 - PHP Object Injection vulnerability	Aug 6, 2026 today
CVE-2026-65571	critical	9.8/10	WordPress 69 Clothing theme <= 1.2.11.1 - PHP Object Injection vulnerability	Aug 6, 2026 today
CVE-2026-65556	critical	9.8/10	WordPress WPBruiser {no- Captcha anti-Spam} plugin <= 3.1.43 - PHP Object Injection vulnerability	Aug 6, 2026 today
CVE-2026-65552	critical	9.8/10	WordPress Export User Data plugin <= 2.2.6 - PHP Object Injection vulnerability	Aug 6, 2026 today
CVE-2026-65549	high	7.2/10	WordPress Jeg Elementor Kit plugin <= 3.2.10 - PHP Object Injection vulnerability	Aug 6, 2026 today
CVE-2026-28139	critical	9.8/10	WordPress Ajax Search Lite plugin <= 4.14.4 - PHP Object Injection vulnerability	Aug 6, 2026 today
CVE-2026-19020	medium	5.3/10	itsourcecode Hospital Management System servicetype.php sql injection	Aug 6, 2026 yesterday
CVE-2026-18968	medium	5.3/10	ttttonyhe OBlog tags.php cross site scripting	Aug 5, 2026 yesterday
CVE-2026-18959	medium	5.3/10	yushine InnoShop Files Endpoint panel-api.php destroyFiles path traversal	Aug 5, 2026 yesterday
CVE-2026-18958	medium	6.9/10	imranrisal-dev Student-Management-System Login loginCheckTest.php sql injection	Aug 5, 2026 yesterday
CVE-2026-53992	medium	5.1/10	Reflected XSS in ProjectSend thumbnails-regenerate.php via start_date / end_date Parameters	Aug 5, 2026 yesterday
CVE-2026-71207	critical	9.8/10	Stock-Inventory-Management-System: Unauthenticated SQL Injection and Hardcoded Credentials in login.php Enable Full Authentication Bypass	Aug 5, 2026 2d ago