Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,051

All time

Critical · Active

12,083

CVSS ≥ 9.0

New · 14 days

2,565

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 3061–3090 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-9402	medium	5.1/10	HuangDou UTCMS Config update.php server-side request forgery	Aug 25, 2025 1y ago
CVE-2025-9401	medium	6.3/10	HuangDou UTCMS Login login.php comparison	Aug 25, 2025 1y ago
CVE-2025-9400	medium	5.3/10	YiFang CMS P_file.php mergeMultipartUpload unrestricted upload	Aug 25, 2025 1y ago
CVE-2025-9399	medium	5.3/10	YiFang CMS L_tool.php sql injection	Aug 25, 2025 1y ago
CVE-2025-9398	medium	6.9/10	YiFang CMS Migrate.php exportInstallTable information disclosure	Aug 24, 2025 1y ago
CVE-2025-9397	medium	5.3/10	givanz Vvveb media.php unrestricted upload	Aug 24, 2025 1y ago
CVE-2025-9387	medium	5.3/10	DCN DCME-720 Web Management Backend ip_block.php os command injection	Aug 24, 2025 1y ago
CVE-2025-38624	—	—	PCI: pnv_php: Clean up allocated IRQs on unplug	Aug 22, 2025 1y ago
CVE-2025-38623	—	—	PCI: pnv_php: Fix surprise plug detection and recovery	Aug 22, 2025 1y ago
CVE-2025-57765	medium	6.5/10	WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'pre_cadastro_adotante.php' parameter 'msg_e'	Aug 21, 2025 1y ago
CVE-2025-57764	medium	6.5/10	WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'cargos.php' parameter 'msg_e'	Aug 21, 2025 1y ago
CVE-2025-9311	medium	6.9/10	itsourcecode Apartment Management System addfair.php sql injection	Aug 21, 2025 1y ago
CVE-2025-57763	medium	6.4/10	Cross-Site Scripting (XSS) Reflected in 'insere_despacho.php' parameter 'sccs'	Aug 21, 2025 1y ago
CVE-2025-57762	medium	6.4/10	WeGIA Stored Cross-Site Scripting (XSS) vulnerability in the endpoint 'dependente_docdependente.php' with parameter 'nome'	Aug 21, 2025 1y ago
CVE-2025-57761	critical	9.4/10	WeGIA SQL Injection vulnerability via 'id_funcionario' param at endpoint `/html/funcionario/dependente_remover.php`	Aug 21, 2025 1y ago
CVE-2025-9307	medium	6.9/10	PHPGurukul Online Course Registration session.php sql injection	Aug 21, 2025 1y ago
CVE-2025-9305	medium	6.9/10	SourceCodester Online Bank Management System mnotice.php sql injection	Aug 21, 2025 1y ago
CVE-2025-9304	medium	6.9/10	SourceCodester Online Bank Management System show.php sql injection	Aug 21, 2025 1y ago
CVE-2025-9302	medium	6.9/10	PHPGurukul User Management System signup.php sql injection	Aug 21, 2025 1y ago
CVE-2025-9296	medium	5.1/10	Emlog Pro blogger.php unrestricted upload	Aug 21, 2025 1y ago
CVE-2025-9238	medium	6.9/10	Swatadru Exam-Seating-Arrangement Student Login student.php sql injection	Aug 20, 2025 1y ago
CVE-2025-9237	medium	5.1/10	CodeAstro Ecommerce Website Edit Your Account my_account.php cross site scripting	Aug 20, 2025 1y ago
CVE-2025-9236	medium	5.3/10	Portabilis i-Educar Tipos de usuàrio educar_tipo_usuario_lst.php sql injection	Aug 20, 2025 1y ago
CVE-2010-20059	critical	9.3/10	FreeNAS < 0.7.2 rev 5543 exec_raw.php Arbitrary Command Execution	Aug 20, 2025 1y ago
CVE-2025-49434	critical	9.8/10	WordPress Cars4Rent Theme <= 1.4.2 - PHP Object Injection Vulnerability	Aug 20, 2025 1y ago
CVE-2025-49438	high	8.1/10	WordPress Simple Login Log plugin <= 1.1.3 - PHP Object Injection vulnerability	Aug 20, 2025 1y ago
CVE-2025-49890	critical	9.8/10	WordPress Organic Beauty Theme <= 1.4.6 - PHP Object Injection Vulnerability	Aug 20, 2025 1y ago
CVE-2025-53299	critical	9.8/10	WordPress ThemeMakers Visual Content Composer Plugin <= 1.5.8 - PHP Object Injection Vulnerability	Aug 20, 2025 1y ago
CVE-2025-53560	high	8.8/10	WordPress Noisa theme <= 2.6.0 - PHP Object Injection Vulnerability	Aug 20, 2025 1y ago
CVE-2025-54007	high	8.8/10	WordPress Post Grid and Gutenberg Blocks Plugin <= 2.3.11 - PHP Object Injection Vulnerability	Aug 20, 2025 1y ago