Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,080

All time

Critical · Active

12,093

CVSS ≥ 9.0

New · 14 days

2,552

Newly disclosed

Feed last synced

5 hrs ago

Data freshness

Showing 3511–3540 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-7476	medium	6.9/10	code-projects Simple Car Rental System approve.php sql injection	Jul 12, 2025 1y ago
CVE-2025-7475	medium	6.9/10	code-projects Simple Car Rental System pay.php sql injection	Jul 12, 2025 1y ago
CVE-2025-7474	medium	6.9/10	code-projects Job Diary search.php sql injection	Jul 12, 2025 1y ago
CVE-2025-7471	medium	6.9/10	code-projects Modern Bag login-back.php sql injection	Jul 12, 2025 1y ago
CVE-2025-7470	medium	6.9/10	Campcodes Sales and Inventory System product_add.php unrestricted upload	Jul 12, 2025 1y ago
CVE-2025-7469	medium	6.9/10	Campcodes Sales and Inventory System product_add.php sql injection	Jul 12, 2025 1y ago
CVE-2025-7467	medium	6.9/10	code-projects Modern Bag product-detail.php sql injection	Jul 12, 2025 1y ago
CVE-2025-7504	high	7.5/10	Friends 3.5.1 - Authenticated (Subscriber+) PHP Object Injection	Jul 12, 2025 1y ago
CVE-2025-7466	medium	6.9/10	1000projects ABC Courier Management add_dealerrequest.php sql injection	Jul 12, 2025 1y ago
CVE-2025-7461	medium	6.9/10	code-projects Modern Bag action.php sql injection	Jul 12, 2025 1y ago
CVE-2025-7459	medium	6.9/10	code-projects Mobile Shop EditMobile.php sql injection	Jul 11, 2025 1y ago
CVE-2025-7457	medium	6.9/10	Campcodes Online Movie Theater Seat Reservation System manage_movie.php sql injection	Jul 11, 2025 1y ago
CVE-2025-7456	medium	6.9/10	Campcodes Online Movie Theater Seat Reservation System reserve.php sql injection	Jul 11, 2025 1y ago
CVE-2025-7455	medium	6.9/10	Campcodes Online Movie Theater Seat Reservation System manage_reserve.php sql injection	Jul 11, 2025 1y ago
CVE-2025-7454	medium	6.9/10	Campcodes Online Movie Theater Seat Reservation System manage_theater.php sql injection	Jul 11, 2025 1y ago
CVE-2025-53642	medium	4.8/10	haxcms-nodejs and haxcms-php Improperly Terminate Sessions	Jul 11, 2025 1y ago
CVE-2025-7401	critical	9.8/10	Premium Age Verification / Restriction for WordPress <= 3.0.2 - Unauthenticated Arbitrary File Read and Write via remote_tunnel.php	Jul 11, 2025 1y ago
CVE-2025-7436	medium	6.9/10	Campcodes Online Recruitment Management System ajax.php sql injection	Jul 11, 2025 1y ago
CVE-2025-7435	medium	5.1/10	LiveHelperChat lhc-php-resque Extension List list cross site scripting	Jul 11, 2025 1y ago
CVE-2025-7413	medium	5.3/10	code-projects Library System profile.php unrestricted upload	Jul 10, 2025 1y ago
CVE-2025-7412	medium	5.3/10	code-projects Library System profile.php unrestricted upload	Jul 10, 2025 1y ago
CVE-2025-34099	critical	9.3/10	VICIdial vicidial_sales_viewer.php Unauthenticated Command Injection via Basic Auth Password	Jul 10, 2025 1y ago
CVE-2025-7411	medium	6.9/10	code-projects LifeStyle Store success.php sql injection	Jul 10, 2025 1y ago
CVE-2025-7410	medium	6.9/10	code-projects LifeStyle Store cart_remove.php sql injection	Jul 10, 2025 1y ago
CVE-2025-7409	medium	6.9/10	code-projects Mobile Shop LoginAsAdmin.php sql injection	Jul 10, 2025 1y ago
CVE-2025-7408	medium	5.1/10	SourceCodester Zoo Management System animal_form_template.php cross site scripting	Jul 10, 2025 1y ago
CVE-2025-7381	medium	5.3/10	Exposure of sensitive PHP information to an unauthorized control sphere in mautic/mautic images	Jul 9, 2025 1y ago
CVE-2025-7220	medium	6.9/10	Campcodes Payroll Management System ajax.php sql injection	Jul 9, 2025 1y ago
CVE-2025-7219	medium	6.9/10	Campcodes Payroll Management System ajax.php sql injection	Jul 9, 2025 1y ago
CVE-2025-7218	medium	6.9/10	Campcodes Payroll Management System ajax.php sql injection	Jul 9, 2025 1y ago