Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,080

All time

Critical · Active

12,093

CVSS ≥ 9.0

New · 14 days

2,552

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 3391–3420 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-54077	medium	6.5/10	WeGIA Reflected Cross-Site Scripting (XSS) vulnerability in endpoint 'personalizacao.php' parameter 'err'	Jul 18, 2025 1y ago
CVE-2025-54076	medium	6.5/10	WeGIA Reflected Cross-Site Scripting (XSS) vulnerability in endpoint 'pre_cadastro_atendido.php' parameter 'msg_e'	Jul 18, 2025 1y ago
CVE-2025-7791	medium	5.1/10	PHPGurukul Online Security Guards Hiring System search.php cross site scripting	Jul 18, 2025 1y ago
CVE-2025-7767	medium	5.1/10	PHPGurukul Art Gallery Management System edit-art-medium-detail.php cross site scripting	Jul 18, 2025 1y ago
CVE-2025-7765	medium	6.9/10	code-projects Online Appointment Booking System addmanagerclinic.php sql injection	Jul 17, 2025 1y ago
CVE-2025-7764	medium	6.9/10	code-projects Online Appointment Booking System deletedoctorclinic.php sql injection	Jul 17, 2025 1y ago
CVE-2025-7757	medium	6.9/10	PHPGurukul Land Record System edit-property.php sql injection	Jul 17, 2025 1y ago
CVE-2025-7755	medium	5.3/10	code-projects Online Ordering System edit_product.php unrestricted upload	Jul 17, 2025 1y ago
CVE-2025-7754	medium	5.3/10	code-projects Patient Record Management System xray_form.php sql injection	Jul 17, 2025 1y ago
CVE-2025-7753	medium	6.9/10	code-projects Online Appointment Booking System adddoctor.php sql injection	Jul 17, 2025 1y ago
CVE-2025-7752	medium	6.9/10	code-projects Online Appointment Booking System deletedoctor.php sql injection	Jul 17, 2025 1y ago
CVE-2025-7751	medium	6.9/10	code-projects Online Appointment Booking System addclinic.php sql injection	Jul 17, 2025 1y ago
CVE-2025-7750	medium	6.9/10	code-projects Online Appointment Booking System adddoctorclinic.php sql injection	Jul 17, 2025 1y ago
CVE-2025-7749	medium	6.9/10	code-projects Online Appointment Booking System getmanagerregion.php sql injection	Jul 17, 2025 1y ago
CVE-2025-54062	critical	9.4/10	WeGIA SQL Injection (Blind Time-Based) Vulnerability in id_dependente Parameter on profile_dependente.php Endpoint	Jul 17, 2025 1y ago
CVE-2025-54061	critical	9.4/10	WeGIASQL Injection (Blind Time-Based) Vulnerability in idatendido_familiares Parameter on dependente_editarDoc.php Endpoint	Jul 17, 2025 1y ago
CVE-2025-54060	critical	9.4/10	WeGIA SQL Injection (Blind Time-Based) Vulnerability in idatendido_familiares Parameter on dependente_editarInfoPessoal.php Endpoint	Jul 17, 2025 1y ago
CVE-2025-54058	critical	9.4/10	WeGIA SQL Injection (Blind Time-Based) Vulnerability in idatendido_familiares Parameter on dependente_editarEndereco.php Endpoint	Jul 17, 2025 1y ago
CVE-2025-53946	critical	9.4/10	WeGIA vulnerable to SQL Injection in endpoint profile_paciente.php parameter id_fichamedica	Jul 17, 2025 1y ago
CVE-2025-34121	critical	9.3/10	Idera Up.Time ≤ 7.2 post2file.php Arbitrary File Upload RCE	Jul 16, 2025 1y ago
CVE-2025-53937	critical	9.4/10	WeGIA has SQL Injection (Blind Time-Based) Vulnerability in `cargo` Parameter on `control.php` Endpoint	Jul 16, 2025 1y ago
CVE-2025-53936	medium	6.4/10	WeGIA vulnerable to Reflected Cross-Site Scripting via endpoint `personalizacao_selecao.php` parameter `nome_car`	Jul 16, 2025 1y ago
CVE-2025-53935	medium	6.4/10	WeGIA vulnerable to Reflected Cross-Site Scripting via endpoint `personalizacao_selecao.php` parameter `id`	Jul 16, 2025 1y ago
CVE-2025-53934	medium	6.4/10	WeGIA vulnerable to Stored Cross-Site Scripting via endpoint 'control.php' parameter 'descricao_emergencia'	Jul 16, 2025 1y ago
CVE-2025-53933	medium	6.4/10	WeGIA vulnerable to Stored Cross-Site Scripting via endpoint 'adicionar_enfermidade.php' parameter 'nome'	Jul 16, 2025 1y ago
CVE-2025-53932	medium	6.4/10	WeGIA vulnerable to Reflected Cross-Site Scripting via endpoint 'cadastro_adotante.php' parameter 'cpf'	Jul 16, 2025 1y ago
CVE-2025-53931	medium	6.4/10	WeGIA vulnerable to Stored Cross-Site Scripting via endpoint `adicionar_raca.php` parameter `raca`	Jul 16, 2025 1y ago
CVE-2025-53930	medium	6.4/10	WeGIA vulnerable to Stored Cross-Site Scripting (XSS) via endpoint 'adicionar_especie.php' parameter 'especie'	Jul 16, 2025 1y ago
CVE-2025-53929	medium	6.4/10	WeGIA vulnerable to Stored Cross-Site Scripting (XSS) via endpoint `adicionar_cor.php` parameter `cor`	Jul 16, 2025 1y ago
CVE-2025-24779	high	8.8/10	WordPress Yogi theme < 2.9.3 - PHP Object Injection Vulnerability	Jul 16, 2025 1y ago