Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

702

Newly disclosed

Feed last synced

14 hrs ago

Data freshness

Showing 271–300 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-9449	medium	5.3/10	code-projects Employee Management System changepassemp.php sql injection	May 25, 2026 1mo ago
CVE-2026-9448	medium	5.3/10	code-projects Employee Management System applyleave.php cross site scripting	May 25, 2026 1mo ago
CVE-2026-9447	medium	6.9/10	SourceCodester Simple POS and Inventory System search.php sql injection	May 25, 2026 1mo ago
CVE-2026-9446	medium	5.1/10	SourceCodester Simple POS and Inventory System edit_customer.php sql injection	May 25, 2026 1mo ago
CVE-2026-9445	medium	5.3/10	SourceCodester Simple POS and Inventory System File Extension addproduct.php unrestricted upload	May 25, 2026 1mo ago
CVE-2026-9444	medium	5.1/10	SourceCodester Simple POS and Inventory System GET Parameter deleteproduct.php delete sql injection	May 25, 2026 1mo ago
CVE-2026-9438	medium	5.3/10	yashpokharna2555 StudentManagementSystem courseDel.php resource injection	May 25, 2026 1mo ago
CVE-2026-9421	medium	6.9/10	KLiK SocialMediaWebsite File upload.inc.php uniqid unrestricted upload	May 25, 2026 1mo ago
CVE-2026-9419	medium	5.3/10	code-projects Employee Management System empproject.php cross site scripting	May 25, 2026 1mo ago
CVE-2026-9418	medium	5.3/10	code-projects Employee Management System changepassemp.php cross site scripting	May 25, 2026 1mo ago
CVE-2026-9417	medium	5.3/10	code-projects Employee Management System myprofileup.php cross site scripting	May 25, 2026 1mo ago
CVE-2026-9416	medium	5.3/10	code-projects Employee Management System myprofile.php cross site scripting	May 25, 2026 1mo ago
CVE-2026-9415	medium	5.3/10	code-projects Employee Management System eloginwel.php cross site scripting	May 25, 2026 1mo ago
CVE-2026-9414	medium	5.1/10	SourceCodester Indian Invoicing System Invoice Template Render Database-Backed add_order.php cross site scripting	May 25, 2026 1mo ago
CVE-2026-9413	medium	5.3/10	SourceCodester Indian Invoicing System category.php cross site scripting	May 25, 2026 1mo ago
CVE-2026-9411	medium	5.3/10	SourceCodester Indian Invoicing System Invoice Generation IGST_Invoice.php sql injection	May 25, 2026 1mo ago
CVE-2026-9383	medium	6.9/10	itsourcecode Electronic Judging System login.php sql injection	May 24, 2026 1mo ago
CVE-2026-9377	medium	4.8/10	SourceCodester SUP Online Shopping productedit.php cross site scripting	May 24, 2026 1mo ago
CVE-2026-9364	medium	6.9/10	projectworlds Online Art Gallery Shop adminHome.php sql injection	May 24, 2026 1mo ago
CVE-2026-9356	medium	6.9/10	SourceCodester Hospitals Patient Records Management System manage_history.php sql injection	May 24, 2026 1mo ago
CVE-2026-9355	medium	6.9/10	SourceCodester Hospitals Patient Records Management System Master.php save_patient_history sql injection	May 24, 2026 1mo ago
CVE-2026-9342	medium	5.3/10	SourceCodester Hospitals Patient Records Management System view_history.php sql injection	May 23, 2026 1mo ago
CVE-2018-25357	critical	9.3/10	Dolibarr ERP CRM 7.0.3 Remote Code Execution via install/step1.php	May 23, 2026 1mo ago
CVE-2018-25350	critical	9.3/10	userSpice 4.3.24 Username Enumeration via existingUsernameCheck.php	May 23, 2026 1mo ago
CVE-2018-25346	high	7.1/10	WordPress Form Maker Plugin 1.12.24 SQL Injection via admin-ajax.php	May 23, 2026 1mo ago
CVE-2018-25343	medium	5.3/10	Smartshop 1 Cross-Site Request Forgery via editprofile.php	May 23, 2026 1mo ago
CVE-2018-25342	high	8.8/10	Smartshop 1 SQL Injection via search.php	May 23, 2026 1mo ago
CVE-2018-25341	high	8.8/10	Smartshop 1 SQL Injection via product.php id Parameter	May 23, 2026 1mo ago
CVE-2018-25340	high	8.8/10	Smartshop 1 SQL Injection via category.php	May 23, 2026 1mo ago
CVE-2026-9302	medium	5.3/10	546669204 vps-inventory-monitoring VpsTest Console VpsTest.php eval code injection	May 23, 2026 1mo ago