Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

337,388

All time

Critical · Active

10,674

CVSS ≥ 9.0

New · 14 days

1,967

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 3511–3540 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-6826	medium	6.9/10	code-projects Payroll Management System ajax.php sql injection	Jun 28, 2025 1y ago
CVE-2025-6823	medium	6.9/10	code-projects Inventory Management System editProduct.php sql injection	Jun 28, 2025 1y ago
CVE-2025-6822	medium	6.9/10	code-projects Inventory Management System removeProduct.php sql injection	Jun 28, 2025 1y ago
CVE-2025-6821	medium	6.9/10	code-projects Inventory Management System createOrder.php sql injection	Jun 28, 2025 1y ago
CVE-2025-6820	medium	6.9/10	code-projects Inventory Management System createProduct.php sql injection	Jun 28, 2025 1y ago
CVE-2025-6819	medium	6.9/10	code-projects Inventory Management System removeBrand.php sql injection	Jun 28, 2025 1y ago
CVE-2025-6778	medium	4.8/10	code-projects Food Distributor Site save_settings.php cross site scripting	Jun 27, 2025 1y ago
CVE-2025-6777	medium	6.9/10	code-projects Food Distributor Site process_login.php sql injection	Jun 27, 2025 1y ago
CVE-2025-28970	critical	9.8/10	WordPress WP Optimize By xTraffic plugin <= 5.1.6 - PHP Object Injection Vulnerability	Jun 27, 2025 1y ago
CVE-2025-52725	critical	9.8/10	WordPress CouponXxL theme <= 3.0.0 - PHP Object Injection Vulnerability	Jun 27, 2025 1y ago
CVE-2025-52724	critical	9.8/10	WordPress Amwerk theme <= 1.2.0 - PHP Object Injection Vulnerability	Jun 27, 2025 1y ago
CVE-2025-52826	high	8.8/10	WordPress Sala theme <= 1.1.3 - PHP Object Injection Vulnerability	Jun 27, 2025 1y ago
CVE-2025-52827	high	8.8/10	WordPress Nuss theme <= 1.3.3 - PHP Object Injection Vulnerability	Jun 27, 2025 1y ago
CVE-2025-34045	high	8.7/10	WeiPHP Path Traversal Arbitrary File Read	Jun 26, 2025 1y ago
CVE-2025-6699	medium	5.1/10	LabRedesCefetRJ WeGIA Cadastro de Funcionário cadastro_funcionario.php cross site scripting	Jun 26, 2025 1y ago
CVE-2025-6698	medium	5.1/10	LabRedesCefetRJ WeGIA Adicionar tipo adicionar_tipoSaida.php cross site scripting	Jun 26, 2025 1y ago
CVE-2025-6697	medium	5.1/10	LabRedesCefetRJ WeGIA Adicionar tipo adicionar_tipoEntrada.php cross site scripting	Jun 26, 2025 1y ago
CVE-2025-6696	medium	5.1/10	LabRedesCefetRJ WeGIA Cadastro de Atendio Cadastro_Atendido.php cross site scripting	Jun 26, 2025 1y ago
CVE-2025-6695	medium	5.1/10	LabRedesCefetRJ WeGIA Additional Categoria adicionar_categoria.php cross site scripting	Jun 26, 2025 1y ago
CVE-2025-6694	medium	5.1/10	LabRedesCefetRJ WeGIA Adicionar Unidade adicionar_unidade.php cross site scripting	Jun 26, 2025 1y ago
CVE-2025-6668	medium	6.9/10	code-projects Inventory Management System fetchSelectedBrand.php sql injection	Jun 25, 2025 1y ago
CVE-2025-6667	medium	5.3/10	code-projects Car Rental System add_cars.php unrestricted upload	Jun 25, 2025 1y ago
CVE-2025-6665	medium	6.9/10	code-projects Inventory Management System editBrand.php sql injection	Jun 25, 2025 1y ago
CVE-2025-6612	medium	6.9/10	code-projects Inventory Management System removeCategories.php sql injection	Jun 25, 2025 1y ago
CVE-2025-6611	medium	6.9/10	code-projects Inventory Management System createBrand.php sql injection	Jun 25, 2025 1y ago
CVE-2025-6610	medium	5.1/10	itsourcecode Employee Management System editempprofile.php sql injection	Jun 25, 2025 1y ago
CVE-2025-6609	medium	5.3/10	SourceCodester Best Salon Management System bwdates-reports-details.php sql injection	Jun 25, 2025 1y ago
CVE-2025-6608	medium	5.3/10	SourceCodester Best Salon Management System edit-services.php sql injection	Jun 25, 2025 1y ago
CVE-2025-6607	medium	5.3/10	SourceCodester Best Salon Management System stock.php sql injection	Jun 25, 2025 1y ago
CVE-2025-6606	medium	5.3/10	SourceCodester Best Salon Management System add-services.php sql injection	Jun 25, 2025 1y ago