Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,080

All time

Critical · Active

12,093

CVSS ≥ 9.0

New · 14 days

2,568

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 3331–3360 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-8156	medium	5.3/10	PHPGurukul User Registration & Login and User Management lastsevendays-reg-users.php sql injection	Jul 25, 2025 1y ago
CVE-2025-8135	medium	5.3/10	itsourcecode Insurance Management System updateAgent.php sql injection	Jul 25, 2025 1y ago
CVE-2025-8134	medium	5.3/10	PHPGurukul BP Monitoring Management System bwdates-report-result.php sql injection	Jul 25, 2025 1y ago
CVE-2025-8115	medium	5.1/10	PHPGurukul Taxi Stand Management System new-autoortaxi-entry-form.php cross site scripting	Jul 24, 2025 1y ago
CVE-2016-15044	critical	9.3/10	Kaltura < 11.1.0-2 PHP Object Injection RCE	Jul 23, 2025 1y ago
CVE-2018-25114	critical	9.3/10	osCommerce 2.3.4.1 Installer Unauthenticated Configuration File Injection PHP Code Execution	Jul 23, 2025 1y ago
CVE-2025-54138	high	7.5/10	LibreNMS has Authenticated Local File Inclusion in ajax_form.php that Allows RCE	Jul 22, 2025 1y ago
CVE-2025-8018	medium	5.3/10	code-projects Food Ordering Review System reservation_page.php sql injection	Jul 22, 2025 1y ago
CVE-2025-7951	medium	5.1/10	code-projects Public Chat Room send_message.php cross site scripting	Jul 22, 2025 1y ago
CVE-2025-7950	medium	6.9/10	code-projects Public Chat Room login.php sql injection	Jul 22, 2025 1y ago
CVE-2025-7946	medium	5.3/10	PHPGurukul Apartment Visitors Management System HTTP POST Request search-visitor.php cross site scripting	Jul 22, 2025 1y ago
CVE-2025-7944	medium	5.3/10	PHPGurukul Taxi Stand Management System search.php cross site scripting	Jul 21, 2025 1y ago
CVE-2025-7943	medium	5.3/10	PHPGurukul Taxi Stand Management System search-autoortaxi.php cross site scripting	Jul 21, 2025 1y ago
CVE-2025-7942	medium	5.1/10	PHPGurukul Taxi Stand Management System admin-profile.php cross site scripting	Jul 21, 2025 1y ago
CVE-2025-7941	medium	5.1/10	PHPGurukul Time Table Generator System profile.php cross site scripting	Jul 21, 2025 1y ago
CVE-2025-7933	medium	6.9/10	Campcodes Sales and Inventory System Setting settings_update.php sql injection	Jul 21, 2025 1y ago
CVE-2025-7931	medium	6.9/10	code-projects Church Donation System admin_pic.php unrestricted upload	Jul 21, 2025 1y ago
CVE-2025-7930	medium	6.9/10	code-projects Church Donation System add_members.php sql injection	Jul 21, 2025 1y ago
CVE-2025-7929	medium	6.9/10	code-projects Church Donation System edit_Members.php sql injection	Jul 21, 2025 1y ago
CVE-2025-7928	medium	6.9/10	code-projects Church Donation System edit_user.php sql injection	Jul 21, 2025 1y ago
CVE-2025-7927	medium	5.3/10	PHPGurukul Online Banquet Booking System view-user-queries.php sql injection	Jul 21, 2025 1y ago
CVE-2025-7926	medium	5.1/10	PHPGurukul Online Banquet Booking System booking-search.php cross site scripting	Jul 21, 2025 1y ago
CVE-2025-7925	medium	5.3/10	PHPGurukul Online Banquet Booking System login.php cross site scripting	Jul 21, 2025 1y ago
CVE-2025-7924	medium	5.1/10	PHPGurukul Online Banquet Booking System admin-profile.php cross site scripting	Jul 21, 2025 1y ago
CVE-2025-7915	medium	6.9/10	Chanjet CRM Login Page mailinactive.php sql injection	Jul 21, 2025 1y ago
CVE-2025-7905	medium	5.3/10	itsourcecode Insurance Management System insertPayment.php sql injection	Jul 20, 2025 1y ago
CVE-2025-7904	medium	5.3/10	itsourcecode Insurance Management System insertNominee.php sql injection	Jul 20, 2025 1y ago
CVE-2025-7887	medium	5.3/10	Zavy86 WikiDocs template.inc.php cross site scripting	Jul 20, 2025 1y ago
CVE-2025-7886	medium	6.9/10	pmTicket Project-Management-Software class.database.php getUserLanguage sql injection	Jul 20, 2025 1y ago
CVE-2025-7869	medium	5.1/10	Portabilis i-Educar Turma Module educar_turma_tipo_det.php cross site scripting	Jul 20, 2025 1y ago