Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,163

All time

Critical · Active

11,974

CVSS ≥ 9.0

New · 14 days

2,676

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 301–330 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-13485	medium	6.9/10	SourceCodester Class and Exam Timetabling System preview.php sql injection	Jun 28, 2026 1mo ago
CVE-2026-12789	medium	5.1/10	ILIAS Learning Management System Learning Progress Tracking class.ilTrQuery.php executeQueries sql injection	Jun 21, 2026 2mo ago
CVE-2026-56346	medium	6.9/10	AVideo - Unauthenticated PGP Message Decryption via decryptMessage.json.php Endpoint	Jun 20, 2026 2mo ago
CVE-2026-55742	critical	9.6/10	Cotonti CSRF in admin.rights.php allows privilege escalation	Jun 18, 2026 2mo ago
CVE-2026-55741	high	8.8/10	Cotonti CSRF in admin.config.php allows unauthorized configuration changes	Jun 18, 2026 2mo ago
CVE-2026-55740	critical	9.8/10	SQL Injection in Nur-Alam39 bus-ticket bus_info.php via busid parameter	Jun 18, 2026 2mo ago
CVE-2026-12115	medium	6.6/10	Counter Box <= 2.0.13 - Authenticated (Administrator+) PHP Object Injection via Import	Jun 17, 2026 2mo ago
CVE-2026-49781	critical	9.8/10	WordPress OttoKit plugin <= 1.1.27 - PHP Object Injection vulnerability	Jun 15, 2026 2mo ago
CVE-2026-49770	critical	9.8/10	WordPress WP Travel Engine plugin <= 6.7.12 - PHP Object Injection vulnerability	Jun 15, 2026 2mo ago
CVE-2026-49769	critical	9.8/10	WordPress wpForo Forum plugin <= 3.1.0 - PHP Object Injection vulnerability	Jun 15, 2026 2mo ago
CVE-2026-49768	critical	9.8/10	WordPress Happyforms plugin <= 1.26.13 - PHP Object Injection vulnerability	Jun 15, 2026 2mo ago
CVE-2026-49765	critical	9.8/10	WordPress Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.1.8 - PHP Object Injection vulnerability	Jun 15, 2026 2mo ago
CVE-2026-49763	critical	9.8/10	WordPress Integration for Contact Form 7 HubSpot plugin <= 1.3.7 - PHP Object Injection vulnerability	Jun 15, 2026 2mo ago
CVE-2026-49109	critical	9.8/10	WordPress Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin <= 1.4.3 - PHP Object Injection vulnerability	Jun 15, 2026 2mo ago
CVE-2026-49106	critical	9.8/10	WordPress Integration for Contact Form 7 and Constant Contact plugin <= 1.1.6 - PHP Object Injection vulnerability	Jun 15, 2026 2mo ago
CVE-2026-49105	critical	9.8/10	WordPress WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin <= 1.1.4 - PHP Object Injection vulnerability	Jun 15, 2026 2mo ago
CVE-2026-49104	critical	9.8/10	WordPress Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin <= 1.2.1 - PHP Object Injection vulnerability	Jun 15, 2026 2mo ago
CVE-2026-49085	critical	9.8/10	WordPress WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin <= 1.1.4 - PHP Object Injection vulnerability	Jun 15, 2026 2mo ago
CVE-2026-42687	high	8.1/10	WordPress EventPrime plugin <= 4.3.2.1 - PHP Object Injection vulnerability	Jun 15, 2026 2mo ago
CVE-2026-39532	high	8.8/10	WordPress Events Calendar for GeoDirectory plugin <= 2.3.25 - PHP Object Injection vulnerability	Jun 15, 2026 2mo ago
CVE-2026-39499	high	7.2/10	WordPress Advanced Product Fields (Product Addons) for WooCommerce plugin <= 1.6.19 - PHP Object Injection vulnerability	Jun 15, 2026 2mo ago
CVE-2026-39498	high	7.2/10	WordPress YayMail plugin <= 4.3.3 - PHP Object Injection vulnerability	Jun 15, 2026 2mo ago
CVE-2026-39481	high	7.2/10	WordPress Modula Image Gallery plugin <= 2.14.18 - PHP Object Injection vulnerability	Jun 15, 2026 2mo ago
CVE-2026-39478	high	8.8/10	WordPress Anti-Malware Security and Brute-Force Firewall plugin <= 4.23.87 - PHP Object Injection vulnerability	Jun 15, 2026 2mo ago
CVE-2026-39474	high	8.8/10	WordPress Post Duplicator plugin <= 3.0.10 - PHP Object Injection vulnerability	Jun 15, 2026 2mo ago
CVE-2026-39472	high	7.2/10	WordPress WooCommerce PDF Invoices & Packing Slips plugin < 5.9.0 - PHP Object Injection vulnerability	Jun 15, 2026 2mo ago
CVE-2026-39471	high	7.2/10	WordPress ShortPixel Image Optimizer plugin <= 6.4.3 - PHP Object Injection vulnerability	Jun 15, 2026 2mo ago
CVE-2026-39434	high	7.2/10	WordPress CTX Feed plugin <= 6.6.26 - PHP Object Injection vulnerability	Jun 15, 2026 2mo ago
CVE-2026-27053	critical	9.8/10	WordPress Broadcast Live Video plugin < 7.1.3 - PHP Object Injection vulnerability	Jun 15, 2026 2mo ago
CVE-2026-9691	critical	9.8/10	WordPress Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.1.1 - PHP Object Injection vulnerability	Jun 15, 2026 2mo ago