Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

337,408

All time

Critical · Active

10,677

CVSS ≥ 9.0

New · 14 days

1,979

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 3661–3690 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-6284	medium	5.3/10	PHPGurukul Car Rental Portal cross-site request forgery	Jun 19, 2025 1y ago
CVE-2025-6266	medium	5.3/10	Teledyne FLIR AX8 upload.php unrestricted upload	Jun 19, 2025 1y ago
CVE-2025-52474	high	8.3/10	WeGIA SQL Injection Vulnerability in id Parameter on control.php Endpoint	Jun 19, 2025 1y ago
CVE-2025-50201	critical	9.8/10	WeGIA OS Command Injection in debug_info.php parameter 'branch'	Jun 19, 2025 1y ago
CVE-2025-30618	critical	9.8/10	WordPress Rapyd Payment Extension for WooCommerce plugin <= 1.2.0 - PHP Object Injection Vulnerability	Jun 17, 2025 1y ago
CVE-2025-31919	critical	9.8/10	WordPress Spare <= 1.7 - PHP Object Injection Vulnerability	Jun 17, 2025 1y ago
CVE-2025-49330	critical	9.8/10	WordPress Integration for Contact Form 7 and Zoho CRM, Bigin plugin <= 1.3.0 - PHP Object Injection Vulnerability	Jun 17, 2025 1y ago
CVE-2025-49331	high	7.2/10	WordPress eCommerce Product Catalog plugin <= 3.4.3 - PHP Object Injection Vulnerability	Jun 17, 2025 1y ago
CVE-2025-6173	medium	5.1/10	Webkul QloApps ajax_products_list.php sql injection	Jun 17, 2025 1y ago
CVE-2025-6161	medium	6.9/10	SourceCodester Simple Food Ordering System editproduct.php unrestricted upload	Jun 17, 2025 1y ago
CVE-2025-6160	medium	6.9/10	SourceCodester Client Database Management System user_customer_create_order.php sql injection	Jun 17, 2025 1y ago
CVE-2025-6159	medium	6.9/10	code-projects Hostel Management System allocate_room.php sql injection	Jun 17, 2025 1y ago
CVE-2025-6157	medium	6.9/10	PHPGurukul Nipah Virus Testing Management System registered-user-testing.php sql injection	Jun 17, 2025 1y ago
CVE-2025-6156	medium	5.3/10	PHPGurukul Nipah Virus Testing Management System bwdates-report-ds.php sql injection	Jun 17, 2025 1y ago
CVE-2025-6155	medium	6.9/10	PHPGurukul Hostel Management System login-hm.inc.php sql injection	Jun 17, 2025 1y ago
CVE-2025-6154	medium	6.9/10	PHPGurukul Hostel Management System login.inc.php sql injection	Jun 17, 2025 1y ago
CVE-2025-6153	medium	6.9/10	PHPGurukul Hostel Management System students.php sql injection	Jun 17, 2025 1y ago
CVE-2025-6136	medium	5.3/10	Projectworlds Life Insurance Management System insertPayment.php sql injection	Jun 16, 2025 1y ago
CVE-2025-6135	medium	5.3/10	Projectworlds Life Insurance Management System insertNominee.php sql injection	Jun 16, 2025 1y ago
CVE-2025-6134	medium	5.3/10	Projectworlds Life Insurance Management System insertClient.php sql injection	Jun 16, 2025 1y ago
CVE-2025-6133	medium	5.3/10	Projectworlds Life Insurance Management System insertagent.php sql injection	Jun 16, 2025 1y ago
CVE-2025-6132	medium	6.9/10	Chanjet CRM departmentsetting.php sql injection	Jun 16, 2025 1y ago
CVE-2025-6127	medium	5.1/10	PHPGurukul Nipah Virus Testing Management System search-report.php cross site scripting	Jun 16, 2025 1y ago
CVE-2025-6126	medium	5.3/10	PHPGurukul Rail Pass Management System contact.php cross site scripting	Jun 16, 2025 1y ago
CVE-2025-6125	medium	4.8/10	PHPGurukul Rail Pass Management System aboutus.php cross site scripting	Jun 16, 2025 1y ago
CVE-2025-6124	medium	6.9/10	code-projects Restaurant Order System tablelow.php sql injection	Jun 16, 2025 1y ago
CVE-2025-6123	medium	6.9/10	code-projects Restaurant Order System payment.php sql injection	Jun 16, 2025 1y ago
CVE-2025-6122	medium	5.3/10	code-projects Restaurant Order System table.php sql injection	Jun 16, 2025 1y ago
CVE-2025-6104	high	8.7/10	Wifi-soft UniBox Controller pms_check.php os command injection	Jun 16, 2025 1y ago
CVE-2025-6103	high	8.7/10	Wifi-soft UniBox Controller test_accesscodelogin.php os command injection	Jun 16, 2025 1y ago