Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

702

Newly disclosed

Feed last synced

15 hrs ago

Data freshness

Showing 301–330 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-8350	high	7.5/10	Concrete CMS 9.5.0 and below is vulnerable to missing authorization in the bulk_user_assignment.php which can lead to privilege escalation to Administrative Group	May 21, 2026 1mo ago
CVE-2026-8134	critical	9.4/10	Concrete CMS 9.5.0 and below is vulnerable to Authenticated RCE via Composer customTemplate Path Traversal leading to PHP File Inclusion	May 21, 2026 1mo ago
CVE-2026-48249	high	8.2/10	Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in rm/incs/mobile_login.inc.php	May 21, 2026 1mo ago
CVE-2026-48248	high	8.2/10	Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/login.inc.php	May 21, 2026 1mo ago
CVE-2026-48247	high	8.2/10	Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/functions.inc.php	May 21, 2026 1mo ago
CVE-2026-48246	high	8.2/10	Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in ajax/reports.php	May 21, 2026 1mo ago
CVE-2026-48245	medium	6.9/10	Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in tables.php	May 21, 2026 1mo ago
CVE-2026-48244	medium	6.9/10	Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in settings.inc.php	May 21, 2026 1mo ago
CVE-2026-48243	medium	6.9/10	Open ISES Tickets < 3.44.2 Hardcoded WhitePages API Key in wp1.php	May 21, 2026 1mo ago
CVE-2026-48242	critical	9.2/10	Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in import_mdb.php	May 21, 2026 1mo ago
CVE-2026-48241	critical	9.2/10	Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in loader.php	May 21, 2026 1mo ago
CVE-2026-48240	high	7.1/10	Open ISES Tickets < 3.44.2 SQL Injection via ajax/statistics.php tick_id and f_tick_id Parameters	May 21, 2026 1mo ago
CVE-2026-48239	high	7.1/10	Open ISES Tickets < 3.44.2 SQL Injection via ajax/reports.php tick_id Parameter	May 21, 2026 1mo ago
CVE-2026-48238	high	7.1/10	Open ISES Tickets < 3.44.2 SQL Injection via ajax/mobile_main.php id Parameter	May 21, 2026 1mo ago
CVE-2026-48237	high	7.1/10	Open ISES Tickets < 3.44.2 SQL Injection via message.php frm_ticket_id and frm_resp_id Parameters	May 21, 2026 1mo ago
CVE-2026-48236	high	7.1/10	Open ISES Tickets < 3.44.2 SQL Injection via db_loader.php Multiple Parameters	May 21, 2026 1mo ago
CVE-2026-48235	high	8.8/10	Open ISES Tickets < 3.44.2 SQL Injection in incs/remotes.inc.php via External GPS Tracker Data	May 21, 2026 1mo ago
CVE-2026-48234	high	7.1/10	Open ISES Tickets < 3.44.2 SQL Injection via portal/ajax/list_requests.php sort and dir Parameters	May 21, 2026 1mo ago
CVE-2026-48233	high	7.1/10	Open ISES Tickets < 3.44.2 SQL Injection via ajax/sit_incidents.php offset Parameter	May 21, 2026 1mo ago
CVE-2026-48232	high	7.1/10	Open ISES Tickets < 3.44.2 SQL Injection via ajax/fullsit_incidents.php offset Parameter	May 21, 2026 1mo ago
CVE-2026-48231	high	7.1/10	Open ISES Tickets < 3.44.2 SQL Injection via tables.php Multiple Parameters	May 21, 2026 1mo ago
CVE-2026-48230	medium	5.1/10	Open ISES Tickets < 3.44.2 Reflected XSS via ticketsmdb_import.php Multiple POST Parameters	May 21, 2026 1mo ago
CVE-2026-48229	medium	5.1/10	Open ISES Tickets < 3.44.2 Reflected XSS via routes_i.php ticket_id Parameter	May 21, 2026 1mo ago
CVE-2026-48228	medium	5.1/10	Open ISES Tickets < 3.44.2 Reflected XSS via patient_w.php id and ticket_id Parameters	May 21, 2026 1mo ago
CVE-2026-48227	medium	5.1/10	Open ISES Tickets < 3.44.2 Reflected XSS via patient.php id and ticket_id Parameters	May 21, 2026 1mo ago
CVE-2026-48226	medium	5.1/10	Open ISES Tickets < 3.44.2 Reflected XSS via os_watch.php ref and mode_orig Parameters	May 21, 2026 1mo ago
CVE-2026-48225	medium	5.1/10	Open ISES Tickets < 3.44.2 Reflected XSS via landb.php _type Parameter	May 21, 2026 1mo ago
CVE-2026-48224	medium	5.1/10	Open ISES Tickets < 3.44.2 Reflected XSS via ics214.php frm_add_str Parameter	May 21, 2026 1mo ago
CVE-2026-48223	medium	5.1/10	Open ISES Tickets < 3.44.2 Reflected XSS via ics213rr.php frm_add_str Parameter	May 21, 2026 1mo ago
CVE-2026-48222	medium	5.1/10	Open ISES Tickets < 3.44.2 Reflected XSS via ics213.php frm_add_str Parameter	May 21, 2026 1mo ago