Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,080

All time

Critical · Active

12,093

CVSS ≥ 9.0

New · 14 days

2,578

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 3181–3210 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-8859	medium	5.3/10	code-projects eBlog Site File Upload save-slider.php unrestricted upload	Aug 11, 2025 1y ago
CVE-2025-8811	medium	6.9/10	code-projects Simple Art Gallery registration.php sql injection	Aug 10, 2025 1y ago
CVE-2025-8809	medium	6.9/10	code-projects Online Medicine Guide addelidetails.php sql injection	Aug 10, 2025 1y ago
CVE-2025-8785	medium	5.1/10	Portabilis i-Educar educar_usuario_lst.php cross site scripting	Aug 9, 2025 1y ago
CVE-2025-8784	medium	5.1/10	Portabilis i-Educar Cadastrar Vínculo funcionario_vinculo_cad.php cross site scripting	Aug 9, 2025 1y ago
CVE-2025-8772	medium	5.3/10	Vinades NukeViet Module index.php server-side request forgery	Aug 9, 2025 1y ago
CVE-2012-10045	critical	9.3/10	XODA 0.4.5 Arbitrary PHP File Upload	Aug 8, 2025 1y ago
CVE-2012-10049	critical	9.3/10	WebPageTest Arbitrary PHP File Upload RCE	Aug 8, 2025 1y ago
CVE-2012-10044	critical	10.0/10	MobileCartly 1.0 savepage.php Arbitrary File Creation	Aug 8, 2025 1y ago
CVE-2012-10052	critical	9.3/10	EGallery 1.2 Arbitrary PHP File Upload	Aug 8, 2025 1y ago
CVE-2010-10013	critical	9.3/10	AjaXplorer < 2.6 checkInstall.php Unauthenticated RCE	Aug 8, 2025 1y ago
CVE-2025-54785	high	8.8/10	SuiteCRM is Vulnerable to PHP Object Injection in Reports	Aug 6, 2025 1y ago
CVE-2012-10027	critical	9.3/10	WordPress Plugin WP-Property <= 1.35.0 PHP File Upload	Aug 5, 2025 1y ago
CVE-2012-10026	critical	10.0/10	WordPress Plugin Asset-Manager <= 2.0 PHP File Upload	Aug 5, 2025 1y ago
CVE-2013-10070	critical	10.0/10	PHP-Charts v1.0 PHP Code Execution	Aug 5, 2025 1y ago
CVE-2012-10033	critical	9.3/10	Narcissus backend.php Image Configuration Command Injection	Aug 5, 2025 1y ago
CVE-2025-8545	medium	4.8/10	Portabilis i-Educar educar_motivo_afastamento_cad.php cross site scripting	Aug 5, 2025 1y ago
CVE-2025-8543	medium	4.8/10	Portabilis i-Educar educar_raca_cad.php cross site scripting	Aug 5, 2025 1y ago
CVE-2025-8542	medium	4.8/10	Portabilis i-Educar empresas_cad.php cross site scripting	Aug 5, 2025 1y ago
CVE-2025-8541	medium	4.8/10	Portabilis i-Educar public_uf_cad.php cross site scripting	Aug 5, 2025 1y ago
CVE-2025-8540	medium	4.8/10	Portabilis i-Educar public_municipio_cad.php cross site scripting	Aug 5, 2025 1y ago
CVE-2025-8539	medium	4.8/10	Portabilis i-Educar public_distrito_cad.php cross site scripting	Aug 5, 2025 1y ago
CVE-2025-54780	high	7.7/10	glpi-screenshot-plugin exposes local files in /ajax/screenshot.php	Aug 5, 2025 1y ago
CVE-2025-8522	low	2.3/10	givanz Vvvebjs node.js save.php path traversal	Aug 4, 2025 1y ago
CVE-2025-8518	medium	5.1/10	givanz Vvveb Code Editor code.php save code injection	Aug 4, 2025 1y ago
CVE-2025-8510	medium	5.1/10	Portabilis i-Educar educar_matricula_lst.php Gerar cross site scripting	Aug 3, 2025 1y ago
CVE-2025-8509	medium	5.1/10	Portabilis i-Educar educar_servidor_cad.php cross site scripting	Aug 3, 2025 1y ago
CVE-2025-8508	medium	5.1/10	Portabilis i-Educar educar_avaliacao_desempenho_cad.php cross site scripting	Aug 3, 2025 1y ago
CVE-2025-8507	medium	5.1/10	Portabilis i-Educar educar_funcao_lst.php cross site scripting	Aug 3, 2025 1y ago
CVE-2025-8504	medium	5.3/10	code-projects Kitchen Treasure userregistration.php unrestricted upload	Aug 3, 2025 1y ago