Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

337,300

All time

Critical · Active

10,667

CVSS ≥ 9.0

New · 14 days

1,883

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 3391–3420 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-7138	medium	5.3/10	SourceCodester Best Salon Management System admin-profile.php sql injection	Jul 7, 2025 12mo ago
CVE-2025-7137	medium	5.3/10	SourceCodester Best Salon Management System schedule-staff.php sql injection	Jul 7, 2025 12mo ago
CVE-2025-53529	critical	9.8/10	WeGIA allows SQL Injection in html/funcionario/profile_funcionario.php (id_funcionario parameter)	Jul 7, 2025 12mo ago
CVE-2025-53527	high	8.3/10	WeGIA allows Time-Based Blind SQL Injection in the relatorio_geracao.php endpoint	Jul 7, 2025 12mo ago
CVE-2025-53526	low	2.0/10	WeGIA allows Stored XSS attacks in novo_memorando.php	Jul 7, 2025 12mo ago
CVE-2025-7136	medium	6.9/10	Campcodes Online Recruitment Management System view_vacancy.php sql injection	Jul 7, 2025 12mo ago
CVE-2025-53525	low	2.0/10	WebGia allows Cross-Site Scripting (XSS) in profile_familiar.php via the id_dependente parameter	Jul 7, 2025 12mo ago
CVE-2025-53377	low	2.0/10	WebGia allows Cross-Site Scripting (XSS) in cadastro_dependente_pessoa_nova.php via the id_funcionario parameter	Jul 7, 2025 12mo ago
CVE-2025-7135	medium	6.9/10	Campcodes Online Recruitment Management System ajax.php sql injection	Jul 7, 2025 12mo ago
CVE-2025-7134	medium	6.9/10	Campcodes Online Recruitment Management System ajax.php sql injection	Jul 7, 2025 12mo ago
CVE-2025-7132	medium	6.9/10	Campcodes Payroll Management System ajax.php sql injection	Jul 7, 2025 12mo ago
CVE-2025-7131	medium	6.9/10	Campcodes Payroll Management System ajax.php sql injection	Jul 7, 2025 12mo ago
CVE-2025-7130	medium	6.9/10	Campcodes Payroll Management System ajax.php sql injection	Jul 7, 2025 1y ago
CVE-2025-7129	medium	6.9/10	Campcodes Payroll Management System ajax.php sql injection	Jul 7, 2025 1y ago
CVE-2025-7128	medium	6.9/10	Campcodes Payroll Management System ajax.php sql injection	Jul 7, 2025 1y ago
CVE-2025-7127	medium	5.1/10	itsourcecode Employee Management System changepassword.php sql injection	Jul 7, 2025 1y ago
CVE-2025-7126	medium	5.3/10	itsourcecode Employee Management System adminprofile.php sql injection	Jul 7, 2025 1y ago
CVE-2025-7125	medium	5.3/10	itsourcecode Employee Management System editempeducation.php sql injection	Jul 7, 2025 1y ago
CVE-2025-7124	medium	5.3/10	code-projects Online Note Sharing Profile Image userprofile.php unrestricted upload	Jul 7, 2025 1y ago
CVE-2025-7123	medium	5.1/10	Campcodes Complaint Management System complaint-details.php sql injection	Jul 7, 2025 1y ago
CVE-2025-7122	medium	6.9/10	Campcodes Complaint Management System index.php sql injection	Jul 7, 2025 1y ago
CVE-2025-7121	medium	5.3/10	Campcodes Complaint Management System complaint-details.php sql injection	Jul 7, 2025 1y ago
CVE-2025-7120	medium	6.9/10	Campcodes Complaint Management System check_availability.php sql injection	Jul 7, 2025 1y ago
CVE-2025-7119	medium	6.9/10	Campcodes Complaint Management System index.php sql injection	Jul 7, 2025 1y ago
CVE-2025-7112	medium	5.1/10	Portabilis i-Educar Function Management Module educar_funcao_det.php cross site scripting	Jul 7, 2025 1y ago
CVE-2025-7111	medium	5.1/10	Portabilis i-Educar Course Module educar_curso_det.php cross site scripting	Jul 7, 2025 1y ago
CVE-2025-7110	medium	5.1/10	Portabilis i-Educar School Module educar_escola_lst.php cross site scripting	Jul 7, 2025 1y ago
CVE-2025-7109	medium	5.1/10	Portabilis i-Educar Student Benefits Registration educar_aluno_beneficio_lst.php cross site scripting	Jul 7, 2025 1y ago
CVE-2025-7103	medium	5.3/10	BoyunCMS curl Index.php server-side request forgery	Jul 7, 2025 1y ago
CVE-2025-7102	medium	5.3/10	BoyunCMS Server.php sql injection	Jul 7, 2025 1y ago