Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,080

All time

Critical · Active

12,093

CVSS ≥ 9.0

New · 14 days

2,552

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 3421–3450 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-24777	high	8.8/10	WordPress Hillter theme <= 3.0.7 - PHP Object Injection Vulnerability	Jul 16, 2025 1y ago
CVE-2025-28961	critical	9.8/10	WordPress URL Shortener <= 3.0.7 - PHP Object Injection Vulnerability	Jul 16, 2025 1y ago
CVE-2025-30949	critical	9.8/10	WordPress Site Chat on Telegram plugin <= 1.0.4 - PHP Object Injection Vulnerability	Jul 16, 2025 1y ago
CVE-2025-30973	critical	9.8/10	WordPress CoSchool LMS plugin <= 1.4.3 - PHP Object Injection Vulnerability	Jul 16, 2025 1y ago
CVE-2025-31422	high	8.8/10	WordPress Visual Art \| Gallery WordPress Theme <= 2.4 - PHP Object Injection Vulnerability	Jul 16, 2025 1y ago
CVE-2025-52779	high	7.1/10	WordPress Dot html,php,xml etc pages plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability	Jul 16, 2025 1y ago
CVE-2025-53990	high	7.2/10	WordPress JetFormBuilder plugin <= 3.5.1.2 - PHP Object Injection Vulnerability	Jul 16, 2025 1y ago
CVE-2025-40724	medium	5.1/10	Stored Cross-Site Scripting (XSS) in Pharmacy POS PHP Script	Jul 16, 2025 1y ago
CVE-2025-34115	high	8.7/10	OP5 Monitor <= 7.1.9 Authenticated Command Execution via command_test.php	Jul 15, 2025 1y ago
CVE-2025-53824	medium	6.4/10	WeGIA ReflectedCross-Site Scripting (XSS) vulnerability in endpoint 'cadastro_pet.php' parameter 'msg'	Jul 14, 2025 1y ago
CVE-2025-53823	critical	10.0/10	WeGIA vulnerable to SQL Injection (Blind Time-Based) in `processa_deletar_socio.php` parameter `id_socio`	Jul 14, 2025 1y ago
CVE-2025-53822	medium	6.5/10	WeGIA vulnerable to Reflected Cross-Site Scripting in endpoint 'relatorio_geracao.php' parameter 'tipo_relatorio'	Jul 14, 2025 1y ago
CVE-2025-53821	medium	4.7/10	WeGIA vulnerable to Open Redirect in endpoint 'control.php' parameter 'nextPage'	Jul 14, 2025 1y ago
CVE-2025-53820	medium	6.5/10	WeGIA vulnerable to Cross-Site Scripting (XSS) Reflected via endpoint 'index.php' parameter 'erro'	Jul 14, 2025 1y ago
CVE-2025-7612	medium	6.9/10	code-projects Mobile Shop login.php sql injection	Jul 14, 2025 1y ago
CVE-2025-7611	medium	6.9/10	code-projects Wedding Reservation global.php sql injection	Jul 14, 2025 1y ago
CVE-2025-7610	medium	6.9/10	code-projects Electricity Billing System change_password.php sql injection	Jul 14, 2025 1y ago
CVE-2025-7609	medium	6.9/10	code-projects Simple Shopping Cart register.php sql injection	Jul 14, 2025 1y ago
CVE-2025-7608	medium	6.9/10	code-projects Simple Shopping Cart userlogin.php sql injection	Jul 14, 2025 1y ago
CVE-2025-7607	medium	6.9/10	code-projects Simple Shopping Cart save_order.php sql injection	Jul 14, 2025 1y ago
CVE-2025-7606	medium	6.9/10	code-projects AVL Rooms city.php sql injection	Jul 14, 2025 1y ago
CVE-2025-7605	medium	6.9/10	code-projects AVL Rooms profile.php sql injection	Jul 14, 2025 1y ago
CVE-2025-7604	medium	6.9/10	PHPGurukul Hospital Management System user-login.php sql injection	Jul 14, 2025 1y ago
CVE-2025-7601	medium	5.1/10	PHPGurukul Online Library Management System student-history.php cross site scripting	Jul 14, 2025 1y ago
CVE-2025-7600	medium	5.3/10	PHPGurukul Online Library Management System student-history.php sql injection	Jul 14, 2025 1y ago
CVE-2025-7599	medium	5.3/10	PHPGurukul Dairy Farm Shop Management System invoice.php sql injection	Jul 14, 2025 1y ago
CVE-2025-7595	medium	6.9/10	code-projects Job Diary view-cad.php sql injection	Jul 14, 2025 1y ago
CVE-2025-7594	medium	6.9/10	code-projects Job Diary view-emp.php sql injection	Jul 14, 2025 1y ago
CVE-2025-7593	medium	6.9/10	code-projects Job Diary view-all.php sql injection	Jul 14, 2025 1y ago
CVE-2025-7592	medium	5.3/10	PHPGurukul Dairy Farm Shop Management System invoices.php sql injection	Jul 14, 2025 1y ago