Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,051

All time

Critical · Active

12,083

CVSS ≥ 9.0

New · 14 days

2,565

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 3091–3120 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-54012	high	7.2/10	WordPress Welcart e-Commerce Plugin <= 2.11.16 - PHP Object Injection Vulnerability	Aug 20, 2025 1y ago
CVE-2025-54014	critical	9.8/10	WordPress MediCenter - Health Medical Clinic <= 15.1 - PHP Object Injection Vulnerability	Aug 20, 2025 1y ago
CVE-2025-54053	medium	6.6/10	WordPress Groundhogg plugin <= 4.2.2 - PHP Object Injection vulnerability	Aug 20, 2025 1y ago
CVE-2025-8289	high	7.5/10	Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection via PHAR Deserialization	Aug 20, 2025 1y ago
CVE-2025-8145	high	8.8/10	Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection	Aug 20, 2025 1y ago
CVE-2025-9156	medium	6.9/10	itsourcecode Sports Management System sports.php sql injection	Aug 19, 2025 1y ago
CVE-2025-9155	medium	6.9/10	itsourcecode Online Tour and Travel Management System forget_password.php sql injection	Aug 19, 2025 1y ago
CVE-2025-9154	medium	6.9/10	itsourcecode Online Tour and Travel Management System page-login.php sql injection	Aug 19, 2025 1y ago
CVE-2025-9153	medium	5.3/10	itsourcecode Online Tour and Travel Management System travellers.php unrestricted upload	Aug 19, 2025 1y ago
CVE-2025-9150	medium	6.9/10	Surbowl dormitory-management-php violation_add.php sql injection	Aug 19, 2025 1y ago
CVE-2025-9147	medium	5.1/10	jasonclark getsemantic index.php cross site scripting	Aug 19, 2025 1y ago
CVE-2025-9140	medium	5.3/10	Shanghai Lingdang Information Technology Lingdang CRM tabdetail_moduleSave.php sql injection	Aug 19, 2025 1y ago
CVE-2025-49895	medium	6.5/10	WordPress ServerBuddy by PluginBuddy.com plugin <= 1.0.5 - CSRF to PHP Object Injection vulnerability	Aug 16, 2025 1y ago
CVE-2025-9053	medium	6.9/10	projectworlds Travel Management System updatesubcategory.php sql injection	Aug 15, 2025 1y ago
CVE-2025-9052	medium	6.9/10	projectworlds Travel Management System updatepackage.php sql injection	Aug 15, 2025 1y ago
CVE-2025-9051	medium	6.9/10	projectworlds Travel Management System updatecategory.php sql injection	Aug 15, 2025 1y ago
CVE-2025-9050	medium	6.9/10	projectworlds Travel Management System addcategory.php sql injection	Aug 15, 2025 1y ago
CVE-2025-9047	medium	6.9/10	projectworlds Visitor Management System visitor_out.php sql injection	Aug 15, 2025 1y ago
CVE-2025-9028	medium	6.9/10	code-projects Online Medicine Guide adphar.php sql injection	Aug 15, 2025 1y ago
CVE-2025-9027	medium	6.9/10	code-projects Online Medicine Guide addelivery.php sql injection	Aug 15, 2025 1y ago
CVE-2025-9025	medium	5.3/10	code-projects Simple Cafe Ordering System portal.php sql injection	Aug 15, 2025 1y ago
CVE-2025-9024	medium	6.9/10	PHPGurukul Beauty Parlour Management System book-appointment.php sql injection	Aug 15, 2025 1y ago
CVE-2025-9022	medium	6.9/10	SourceCodester Online Bank Management System statements.php sql injection	Aug 15, 2025 1y ago
CVE-2025-9021	medium	6.9/10	SourceCodester Online Bank Management System transfer.php sql injection	Aug 15, 2025 1y ago
CVE-2025-9017	medium	5.3/10	PHPGurukul Zoo Management System add-foreigner-ticket.php cross site scripting	Aug 15, 2025 1y ago
CVE-2025-9013	medium	6.9/10	PHPGurukul Online Shopping Portal Project password-recovery.php sql injection	Aug 15, 2025 1y ago
CVE-2025-9012	medium	6.9/10	PHPGurukul Online Shopping Portal Project bill-ship-addresses.php sql injection	Aug 15, 2025 1y ago
CVE-2025-9011	medium	6.9/10	PHPGurukul Online Shopping Portal Project signup.php sql injection	Aug 15, 2025 1y ago
CVE-2025-9010	medium	6.9/10	itsourcecode Online Tour and Travel Management System booking_report.php sql injection	Aug 15, 2025 1y ago
CVE-2025-9009	medium	6.9/10	itsourcecode Online Tour and Travel Management System email_setup.php sql injection	Aug 15, 2025 1y ago