Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

337,414

All time

Critical · Active

10,677

CVSS ≥ 9.0

New · 14 days

1,985

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 3691–3720 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-6102	high	8.7/10	Wifi-soft UniBox Controller logout.php os command injection	Jun 16, 2025 1y ago
CVE-2025-6096	medium	5.3/10	codesiddhant Jasmin Ransomware dashboard.php sql injection	Jun 15, 2025 1y ago
CVE-2025-6095	medium	6.9/10	codesiddhant Jasmin Ransomware checklogin.php sql injection	Jun 15, 2025 1y ago
CVE-2025-6094	medium	5.3/10	qianfox FoxCMS Download.php batchCope sql injection	Jun 15, 2025 1y ago
CVE-2025-6009	medium	5.1/10	kiCode111 like-girl ipAddPost.php sql injection	Jun 12, 2025 1y ago
CVE-2025-6008	medium	5.1/10	kiCode111 like-girl ImgAddPost.php sql injection	Jun 12, 2025 1y ago
CVE-2025-6007	medium	5.1/10	kiCode111 like-girl CopyadminPost.php sql injection	Jun 12, 2025 1y ago
CVE-2025-6006	medium	5.1/10	kiCode111 like-girl ImgUpdaPost.php sql injection	Jun 12, 2025 1y ago
CVE-2025-6005	medium	5.1/10	kiCode111 like-girl aboutPost.php sql injection	Jun 12, 2025 1y ago
CVE-2025-5984	medium	5.1/10	SourceCodester Online Student Clearance System add-fee.php cross site scripting	Jun 10, 2025 1y ago
CVE-2025-5980	medium	6.9/10	code-projects Restaurant Order System order.php sql injection	Jun 10, 2025 1y ago
CVE-2025-5979	medium	6.9/10	code-projects School Fees Payment System branch.php sql injection	Jun 10, 2025 1y ago
CVE-2025-5977	medium	6.9/10	code-projects School Fees Payment System datatable.php sql injection	Jun 10, 2025 1y ago
CVE-2025-5976	medium	5.1/10	PHPGurukul Rail Pass Management System add-pass.php cross site scripting	Jun 10, 2025 1y ago
CVE-2025-5975	medium	5.3/10	PHPGurukul Rail Pass Management System download-pass.php cross site scripting	Jun 10, 2025 1y ago
CVE-2025-5974	medium	5.1/10	PHPGurukul Restaurant Table Booking System check-status.php cross site scripting	Jun 10, 2025 1y ago
CVE-2025-5973	medium	4.8/10	PHPGurukul Restaurant Table Booking System add-table.php cross site scripting	Jun 10, 2025 1y ago
CVE-2025-5972	medium	4.8/10	PHPGurukul Restaurant Table Booking System manage-subadmins.php cross site scripting	Jun 10, 2025 1y ago
CVE-2025-5971	medium	5.3/10	code-projects School Fees Payment System ajx.php sql injection	Jun 10, 2025 1y ago
CVE-2025-5970	medium	4.8/10	PHPGurukul Restaurant Table Booking System add-subadmin.php cross site scripting	Jun 10, 2025 1y ago
CVE-2025-49507	critical	9.8/10	WordPress CozyStay theme < 1.7.1 - PHP Object Injection vulnerability	Jun 10, 2025 1y ago
CVE-2025-5952	medium	6.9/10	Zend.To NSSDropoff.php exec os command injection	Jun 10, 2025 1y ago
CVE-2025-5913	medium	6.9/10	PHPGurukul Vehicle Record Management System search-vehicle.php sql injection	Jun 10, 2025 1y ago
CVE-2025-49141	high	8.6/10	HaxCMS-PHP Command Injection Vulnerability	Jun 9, 2025 1y ago
CVE-2025-5886	medium	5.1/10	Emlog article.php cross site scripting	Jun 9, 2025 1y ago
CVE-2025-31396	critical	9.8/10	WordPress FLAP - Business WordPress Theme <= 1.5 - PHP Object Injection Vulnerability	Jun 9, 2025 1y ago
CVE-2025-5881	medium	5.3/10	code-projects Chat System confirm_password.php sql injection	Jun 9, 2025 1y ago
CVE-2025-5877	medium	5.3/10	Fengoffice Feng Office Document Upload ApplicationDataObject.class.php xml external entity reference	Jun 9, 2025 1y ago
CVE-2025-5873	medium	5.3/10	eCharge Hardy Barth Salia PLCC Web UI firmware.php unrestricted upload	Jun 9, 2025 1y ago
CVE-2025-5860	medium	6.9/10	PHPGurukul Maid Hiring Management System search-booking-request.php sql injection	Jun 9, 2025 1y ago