Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,124

All time

Critical · Active

11,966

CVSS ≥ 9.0

New · 14 days

2,707

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1–30 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-78200	medium	5.3/10	itsourcecode Library Management System editbooks.php sql injection	Aug 24, 2026 today
CVE-2026-78115	medium	5.3/10	SourceCodester Class and Exam Timetabling System User Account Update edit_user_account.php improper authorization	Aug 23, 2026 today
CVE-2026-78060	medium	5.3/10	SourceCodester Stock Management System getOrderReport.php cross site scripting	Aug 23, 2026 yesterday
CVE-2026-78055	medium	5.3/10	SourceCodester Class and Exam Timetabling System BSIT2.php cross site scripting	Aug 23, 2026 yesterday
CVE-2026-0551	high	8.8/10	PPWP – Password Protect Pages <= 1.9.18 - Authenticated (Contributor+) PHP Object Injection via post_protection_roles	Aug 22, 2026 yesterday
CVE-2026-4703	critical	9.8/10	WS Form LITE <= 1.10.80 - Unauthenticated PHP Object Injection via Form Submission	Aug 22, 2026 yesterday
CVE-2026-34836	medium	6.5/10	Combodo iTop: Improper access control in ajax.render.php and ajax.document.php	Aug 21, 2026 2d ago
CVE-2026-34741	high	8.6/10	Combodo iTop: Authentication bypass in exec.php allows PHP file execution	Aug 21, 2026 2d ago
CVE-2026-77681	medium	5.3/10	CodeAstro Online Job Portal update-profile.php unrestricted upload	Aug 21, 2026 2d ago
CVE-2026-77392	medium	5.3/10	SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP submit.php saveUser sql injection	Aug 21, 2026 3d ago
CVE-2026-77391	medium	5.3/10	SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP cross-site request forgery	Aug 21, 2026 3d ago
CVE-2026-76999	medium	5.3/10	SourceCodester CET Automated Grading System with AI Predictive Analytics index.php add_grade improper authorization	Aug 20, 2026 3d ago
CVE-2026-63722	high	8.7/10	ICEcoder 8.1 Unauthenticated RCE via terminal-xhr.php	Aug 19, 2026 4d ago
CVE-2026-67364	critical	10.0/10	Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2	Aug 19, 2026 4d ago
CVE-2026-76050	medium	6.9/10	SourceCodester Simple Online Food Ordering System ajax.php delete_menu sql injection	Aug 19, 2026 5d ago
CVE-2026-76049	medium	6.9/10	SourceCodester Simple Online Food Ordering System ajax.php save_menu sql injection	Aug 19, 2026 5d ago
CVE-2026-75986	medium	6.9/10	code-projects Online Job Portal System Password Recovery ForPass.php sql injection	Aug 19, 2026 5d ago
CVE-2026-73341	critical	9.8/10	WordPress RegistrationMagic plugin <= 6.0.9.7 - PHP Object Injection vulnerability	Aug 18, 2026 5d ago
CVE-2026-66620	high	7.2/10	WordPress OptionTree plugin <= 2.7.3 - PHP Object Injection vulnerability	Aug 18, 2026 5d ago
CVE-2026-32470	critical	9.8/10	WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerability	Aug 18, 2026 5d ago
CVE-2026-32465	high	8.8/10	WordPress Essential Real Estate plugin <= 5.3.3 - PHP Object Injection vulnerability	Aug 18, 2026 5d ago
CVE-2026-75088	medium	5.3/10	itsourcecode Hospital Management System viewbilling.php sql injection	Aug 18, 2026 6d ago
CVE-2026-75080	medium	6.9/10	SourceCodester Class and Exam Timetabling System edit_subject1.php sql injection	Aug 17, 2026 6d ago
CVE-2026-75014	medium	6.9/10	SourceCodester Pet Grooming Management Software get_barcode_data.php sql injection	Aug 17, 2026 6d ago
CVE-2026-20000	medium	5.3/10	itsourcecode Hospital Management System viewprescriptionrecord.php sql injection	Aug 17, 2026 7d ago
CVE-2026-19972	medium	5.3/10	itsourcecode Hospital Management System viewpatient.php sql injection	Aug 17, 2026 7d ago
CVE-2026-19930	medium	5.3/10	Dolibarr User Cloning card.php ldap injection	Aug 16, 2026 8d ago
CVE-2026-19925	medium	5.1/10	SourceCodester Stock Management System Master.php delete_supplier sql injection	Aug 16, 2026 8d ago
CVE-2026-19921	medium	5.3/10	code-projects Online Shopping System homeaction.php sql injection	Aug 16, 2026 8d ago
CVE-2026-19920	medium	5.3/10	code-projects Online Shopping System action.php sql injection	Aug 15, 2026 8d ago