Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,368

All time

Critical · Active

12,132

CVSS ≥ 9.0

New · 14 days

2,817

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 3601–3630 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-7143	medium	4.8/10	SourceCodester Best Salon Management System Update Tax Page edit-tax.php cross site scripting	Jul 7, 2025 1y ago
CVE-2025-7142	medium	4.8/10	SourceCodester Best Salon Management System search-appointment.php cross site scripting	Jul 7, 2025 1y ago
CVE-2025-7141	medium	4.8/10	SourceCodester Best Salon Management System Update Staff Page edit_plan.php cross site scripting	Jul 7, 2025 1y ago
CVE-2025-7140	medium	4.8/10	SourceCodester Best Salon Management System Update Staff Page edit-staff.php cross site scripting	Jul 7, 2025 1y ago
CVE-2025-7139	medium	4.8/10	SourceCodester Best Salon Management System Update Customer Details Page edit-customer-detailed.php cross site scripting	Jul 7, 2025 1y ago
CVE-2025-7138	medium	5.3/10	SourceCodester Best Salon Management System admin-profile.php sql injection	Jul 7, 2025 1y ago
CVE-2025-7137	medium	5.3/10	SourceCodester Best Salon Management System schedule-staff.php sql injection	Jul 7, 2025 1y ago
CVE-2025-53529	critical	9.8/10	WeGIA allows SQL Injection in html/funcionario/profile_funcionario.php (id_funcionario parameter)	Jul 7, 2025 1y ago
CVE-2025-53527	high	8.3/10	WeGIA allows Time-Based Blind SQL Injection in the relatorio_geracao.php endpoint	Jul 7, 2025 1y ago
CVE-2025-53526	low	2.0/10	WeGIA allows Stored XSS attacks in novo_memorando.php	Jul 7, 2025 1y ago
CVE-2025-7136	medium	6.9/10	Campcodes Online Recruitment Management System view_vacancy.php sql injection	Jul 7, 2025 1y ago
CVE-2025-53525	low	2.0/10	WebGia allows Cross-Site Scripting (XSS) in profile_familiar.php via the id_dependente parameter	Jul 7, 2025 1y ago
CVE-2025-53377	low	2.0/10	WebGia allows Cross-Site Scripting (XSS) in cadastro_dependente_pessoa_nova.php via the id_funcionario parameter	Jul 7, 2025 1y ago
CVE-2025-7135	medium	6.9/10	Campcodes Online Recruitment Management System ajax.php sql injection	Jul 7, 2025 1y ago
CVE-2025-7134	medium	6.9/10	Campcodes Online Recruitment Management System ajax.php sql injection	Jul 7, 2025 1y ago
CVE-2025-7132	medium	6.9/10	Campcodes Payroll Management System ajax.php sql injection	Jul 7, 2025 1y ago
CVE-2025-7131	medium	6.9/10	Campcodes Payroll Management System ajax.php sql injection	Jul 7, 2025 1y ago
CVE-2025-7130	medium	6.9/10	Campcodes Payroll Management System ajax.php sql injection	Jul 7, 2025 1y ago
CVE-2025-7129	medium	6.9/10	Campcodes Payroll Management System ajax.php sql injection	Jul 7, 2025 1y ago
CVE-2025-7128	medium	6.9/10	Campcodes Payroll Management System ajax.php sql injection	Jul 7, 2025 1y ago
CVE-2025-7127	medium	5.1/10	itsourcecode Employee Management System changepassword.php sql injection	Jul 7, 2025 1y ago
CVE-2025-7126	medium	5.3/10	itsourcecode Employee Management System adminprofile.php sql injection	Jul 7, 2025 1y ago
CVE-2025-7125	medium	5.3/10	itsourcecode Employee Management System editempeducation.php sql injection	Jul 7, 2025 1y ago
CVE-2025-7124	medium	5.3/10	code-projects Online Note Sharing Profile Image userprofile.php unrestricted upload	Jul 7, 2025 1y ago
CVE-2025-7123	medium	5.1/10	Campcodes Complaint Management System complaint-details.php sql injection	Jul 7, 2025 1y ago
CVE-2025-7122	medium	6.9/10	Campcodes Complaint Management System index.php sql injection	Jul 7, 2025 1y ago
CVE-2025-7121	medium	5.3/10	Campcodes Complaint Management System complaint-details.php sql injection	Jul 7, 2025 1y ago
CVE-2025-7120	medium	6.9/10	Campcodes Complaint Management System check_availability.php sql injection	Jul 7, 2025 1y ago
CVE-2025-7119	medium	6.9/10	Campcodes Complaint Management System index.php sql injection	Jul 7, 2025 1y ago
CVE-2025-7112	medium	5.1/10	Portabilis i-Educar Function Management Module educar_funcao_det.php cross site scripting	Jul 7, 2025 1y ago