Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,368

All time

Critical · Active

12,132

CVSS ≥ 9.0

New · 14 days

2,817

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 3631–3660 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-7111	medium	5.1/10	Portabilis i-Educar Course Module educar_curso_det.php cross site scripting	Jul 7, 2025 1y ago
CVE-2025-7110	medium	5.1/10	Portabilis i-Educar School Module educar_escola_lst.php cross site scripting	Jul 7, 2025 1y ago
CVE-2025-7109	medium	5.1/10	Portabilis i-Educar Student Benefits Registration educar_aluno_beneficio_lst.php cross site scripting	Jul 7, 2025 1y ago
CVE-2025-7103	medium	5.3/10	BoyunCMS curl Index.php server-side request forgery	Jul 7, 2025 1y ago
CVE-2025-7102	medium	5.3/10	BoyunCMS Server.php sql injection	Jul 7, 2025 1y ago
CVE-2025-7101	medium	5.3/10	BoyunCMS Configuration File install_ok.php code injection	Jul 7, 2025 1y ago
CVE-2025-7100	medium	5.3/10	BoyunCMS Index.php unrestricted upload	Jul 7, 2025 1y ago
CVE-2025-7099	medium	6.3/10	BoyunCMS Installation install2.php deserialization	Jul 6, 2025 1y ago
CVE-2025-48952	critical	9.4/10	NetAlertX has Password Bypass Vulnerability due to Loose Comparison in PHP	Jul 4, 2025 1y ago
CVE-2025-52828	high	8.8/10	WordPress Red Art theme <= 3.8 - PHP Object Injection Vulnerability	Jul 4, 2025 1y ago
CVE-2025-7060	low	2.1/10	Monitorr Installer mkdbajax.php input validation	Jul 4, 2025 1y ago
CVE-2025-34061	critical	9.3/10	PHPStudy 2016-2018 Backdoor Remote Code Execution Vulnerability	Jul 3, 2025 1y ago
CVE-2024-13786	critical	9.8/10	Education Center \| LMS & Online Courses WordPress Theme <= 3.6.10 - PHP Object Injection	Jul 2, 2025 1y ago
CVE-2025-6464	high	7.5/10	Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.44.2 - Unauthenticated PHP Object Injection (PHAR) Triggered via Administrator Form Submission Deletion	Jul 2, 2025 1y ago
CVE-2025-6459	high	8.8/10	Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Cross-Site Request Forgery to PHP Code Injection in bsaCreateAdTemplate	Jul 2, 2025 1y ago
CVE-2025-34081	medium	6.9/10	CONPROSYS HMI System (CHS) < 3.7.7 Exposed PHP Debug Info	Jul 1, 2025 1y ago
CVE-2025-6963	medium	6.9/10	Campcodes Employee Management System myprofile.php sql injection	Jul 1, 2025 1y ago
CVE-2025-6962	medium	6.9/10	Campcodes Employee Management System myprofileup.php sql injection	Jul 1, 2025 1y ago
CVE-2025-6961	medium	6.9/10	Campcodes Employee Management System mark.php sql injection	Jul 1, 2025 1y ago
CVE-2025-6960	medium	6.9/10	Campcodes Employee Management System empproject.php sql injection	Jul 1, 2025 1y ago
CVE-2025-6959	medium	6.9/10	Campcodes Employee Management System eloginwel.php sql injection	Jul 1, 2025 1y ago
CVE-2025-6958	medium	6.9/10	Campcodes Employee Management System edit.php sql injection	Jul 1, 2025 1y ago
CVE-2025-6957	medium	6.9/10	Campcodes Employee Management System eprocess.php sql injection	Jul 1, 2025 1y ago
CVE-2025-6956	medium	6.9/10	Campcodes Employee Management System changepassemp.php sql injection	Jul 1, 2025 1y ago
CVE-2025-6955	medium	6.9/10	Campcodes Employee Management System aprocess.php sql injection	Jul 1, 2025 1y ago
CVE-2025-6954	medium	6.9/10	Campcodes Employee Management System applyleave.php sql injection	Jul 1, 2025 1y ago
CVE-2025-6938	medium	6.9/10	code-projects Simple Pizza Ordering System editcus.php sql injection	Jul 1, 2025 1y ago
CVE-2025-6937	medium	6.9/10	code-projects Simple Pizza Ordering System large.php sql injection	Jul 1, 2025 1y ago
CVE-2025-6936	medium	6.9/10	code-projects Simple Pizza Ordering System addpro.php sql injection	Jul 1, 2025 1y ago
CVE-2025-6935	medium	6.9/10	Campcodes Sales and Inventory System payment_add.php sql injection	Jun 30, 2025 1y ago