Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,080

All time

Critical · Active

12,093

CVSS ≥ 9.0

New · 14 days

2,578

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 3151–3180 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-8952	medium	6.9/10	Campcodes Online Flight Booking Management System Login ajax.php sql injection	Aug 14, 2025 1y ago
CVE-2025-8951	medium	6.9/10	PHPGurukul Teachers Record Management System search.php sql injection	Aug 14, 2025 1y ago
CVE-2025-8950	medium	6.9/10	Campcodes Online Recruitment Management System index.php sql injection	Aug 14, 2025 1y ago
CVE-2025-8948	medium	6.9/10	projectworlds Visitor Management System front.php sql injection	Aug 14, 2025 1y ago
CVE-2025-8947	medium	6.9/10	projectworlds Visitor Management System query_data.php sql injection	Aug 14, 2025 1y ago
CVE-2025-8946	medium	6.9/10	projectworlds Online Notes Sharing Platform login.php sql injection	Aug 14, 2025 1y ago
CVE-2025-8936	medium	6.9/10	1000 Projects Sales Management System dordupdate.php sql injection	Aug 14, 2025 1y ago
CVE-2025-8935	medium	6.9/10	1000 Projects Sales Management System custcmp.php sql injection	Aug 14, 2025 1y ago
CVE-2025-8934	medium	5.3/10	1000 Projects Sales Management System sales.php cross site scripting	Aug 14, 2025 1y ago
CVE-2025-8933	medium	5.3/10	1000 Projects Sales Management System sales.php cross site scripting	Aug 14, 2025 1y ago
CVE-2025-8932	medium	6.9/10	1000 Projects Sales Management System sales.php sql injection	Aug 14, 2025 1y ago
CVE-2011-10011	critical	10.0/10	WeBid 1.0.2 converter.php Remote PHP Code Injection	Aug 13, 2025 1y ago
CVE-2011-10013	critical	10.0/10	Traq 2.0–2.3 admincp/common.php RCE	Aug 13, 2025 1y ago
CVE-2011-10017	critical	10.0/10	Snort Report nmap.php/nbtscan.php RCE	Aug 13, 2025 1y ago
CVE-2012-10056	high	8.7/10	PHP Volunteer Management System 1.0.2 Arbitrary File Upload	Aug 13, 2025 1y ago
CVE-2025-8926	medium	6.9/10	SourceCodester COVID 19 Testing Management System login.php sql injection	Aug 13, 2025 1y ago
CVE-2025-8925	medium	6.9/10	itsourcecode Sports Management System match.php sql injection	Aug 13, 2025 1y ago
CVE-2025-8924	medium	6.9/10	Campcodes Online Water Billing System viewbill.php sql injection	Aug 13, 2025 1y ago
CVE-2025-8923	medium	6.9/10	code-projects Job Diary edit-details.php sql injection	Aug 13, 2025 1y ago
CVE-2025-8922	medium	6.9/10	code-projects Job Diary admin-inbox.php sql injection	Aug 13, 2025 1y ago
CVE-2025-8921	medium	6.9/10	code-projects Job Diary user-apply.php sql injection	Aug 13, 2025 1y ago
CVE-2025-8918	medium	4.8/10	Portabilis i-Educar Editar educar_instituicao_cad.php cross site scripting	Aug 13, 2025 1y ago
CVE-2025-8908	medium	5.3/10	Shanghai Lingdang Information Technology Lingdang CRM event.php sql injection	Aug 13, 2025 1y ago
CVE-2025-7384	critical	9.8/10	Database for Contact Form 7, WPforms, Elementor forms <= 1.4.3 - Unauthenticated PHP Object Injection to Arbitrary File Deletion	Aug 13, 2025 1y ago
CVE-2025-55171	high	7.5/10	WeGIA Anonymous Attacker can Delete Arbitrary Image file at endpoint `/html/personalizacao_remover.php`	Aug 12, 2025 1y ago
CVE-2025-55170	medium	6.5/10	WeGIA reflected XSS via `verificacao` and `redir_config` param at endpoint `/html/alterar_senha.php`	Aug 12, 2025 1y ago
CVE-2025-55169	critical	10.0/10	WeGIA Path Traversal at endpoint 'html/socio/sistema/download_remessa.php' via parameter 'file'	Aug 12, 2025 1y ago
CVE-2025-55168	critical	9.4/10	WeGIA SQL Injection via id_fichamedica at endpoint `GET /html/saude/aplicar_medicamento.php`	Aug 12, 2025 1y ago
CVE-2025-55167	critical	9.4/10	WeGIA SQL Injection via id_fichamedica at endpoint `GET/html/funcionario/dependente_remover.php`	Aug 12, 2025 1y ago
CVE-2012-10037	critical	9.3/10	PhpTax pfilez Parameter Exec Remote Code Injection	Aug 11, 2025 1y ago