Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,163

All time

Critical · Active

11,974

CVSS ≥ 9.0

New · 14 days

2,676

Newly disclosed

Feed last synced

38 mins ago

Data freshness

Showing 271–300 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-13567	medium	5.3/10	code-projects Online Music Site POST Request Feedback.php cross site scripting	Jun 29, 2026 1mo ago
CVE-2026-40522	high	7.1/10	FrontAccounting < 2.4.20 SQL Injection via rep601.php	Jun 29, 2026 1mo ago
CVE-2026-40523	high	7.2/10	FrontAccounting < 2.4.20 SQL Injection via reporting/rep710.php	Jun 29, 2026 1mo ago
CVE-2026-13566	medium	6.9/10	SourceCodester Class and Exam Timetabling System preview3.php sql injection	Jun 29, 2026 1mo ago
CVE-2026-13565	medium	6.9/10	SourceCodester Class and Exam Timetabling System edit_class1.php sql injection	Jun 29, 2026 1mo ago
CVE-2026-13559	medium	6.9/10	code-projects Real State Services single-list_sale.php add sql injection	Jun 29, 2026 1mo ago
CVE-2026-13555	medium	6.9/10	itsourcecode Online Hotel Management System controller.php add sql injection	Jun 29, 2026 1mo ago
CVE-2026-13553	medium	6.9/10	itsourcecode Online Hotel Management System controller.php add unrestricted upload	Jun 29, 2026 1mo ago
CVE-2026-13552	medium	6.9/10	itsourcecode Online Hotel Management System controller.php edit sql injection	Jun 29, 2026 1mo ago
CVE-2026-13551	medium	6.9/10	itsourcecode Baptism Information Management System editBaptism.php sql injection	Jun 29, 2026 1mo ago
CVE-2026-13550	medium	6.9/10	itsourcecode Baptism Information Management System delbaptism.php sql injection	Jun 29, 2026 1mo ago
CVE-2026-13549	medium	5.3/10	CodeAstro Complaint Management System Report Endpoint Report.php deletereport authorization	Jun 29, 2026 1mo ago
CVE-2026-13548	medium	5.3/10	itsourcecode Hospital Management System doctortimings.php sql injection	Jun 29, 2026 1mo ago
CVE-2026-13542	medium	5.3/10	itsourcecode Hospital Management System doctorprofile.php sql injection	Jun 29, 2026 1mo ago
CVE-2026-13541	medium	5.3/10	itsourcecode Hospital Management System doctorchangepassword.php sql injection	Jun 29, 2026 1mo ago
CVE-2026-13535	medium	5.3/10	CodeAstro Human Resource Management System View Endpoint Employee_model.php GetFileInfo sql injection	Jun 29, 2026 1mo ago
CVE-2026-13532	medium	5.3/10	itsourcecode Hospital Management System departmentDoctor.php sql injection	Jun 29, 2026 1mo ago
CVE-2026-13531	medium	5.3/10	itsourcecode Hospital Management System department.php sql injection	Jun 29, 2026 1mo ago
CVE-2026-13530	medium	5.3/10	itsourcecode Hospital Management System Appointment appointmentdetail.php sql injection	Jun 29, 2026 1mo ago
CVE-2026-13529	medium	6.3/10	YzmCMS index.php sql injection	Jun 29, 2026 1mo ago
CVE-2026-13527	medium	6.9/10	SourceCodester Class and Exam Timetabling System preview4.php sql injection	Jun 29, 2026 1mo ago
CVE-2026-13526	medium	6.9/10	SourceCodester Class and Exam Timetabling System edit_class.php sql injection	Jun 29, 2026 1mo ago
CVE-2026-13525	medium	5.3/10	CodeAstro Human Resource Management System Update_Earn_Leave Endpoint Employee_model.php emselectByCode sql injection	Jun 29, 2026 1mo ago
CVE-2026-13521	medium	6.9/10	SourceCodester Class and Exam Timetabling System preview5.php sql injection	Jun 29, 2026 1mo ago
CVE-2026-13520	medium	5.3/10	itsourcecode Hospital Management System Appointment appointmentapproval.php sql injection	Jun 29, 2026 1mo ago
CVE-2026-13499	medium	5.3/10	yashpokharna2555 restaurent-management-system Registration login_register.php cross site scripting	Jun 28, 2026 1mo ago
CVE-2026-13497	medium	5.3/10	itsourcecode Hospital Management System appointment.php sql injection	Jun 28, 2026 1mo ago
CVE-2026-13496	medium	5.3/10	itsourcecode Hospital Management System ajaxmedicine.php sql injection	Jun 28, 2026 1mo ago
CVE-2026-13488	medium	6.9/10	SourceCodester Class and Exam Timetabling System preview7.php sql injection	Jun 28, 2026 1mo ago
CVE-2026-13486	medium	6.9/10	SourceCodester Class and Exam Timetabling System preview6.php sql injection	Jun 28, 2026 1mo ago