Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,163

All time

Critical · Active

11,974

CVSS ≥ 9.0

New · 14 days

2,675

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 361–390 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-11582	medium	6.9/10	CodeAstro Student Attendance Management System index.php sql injection	Jun 8, 2026 2mo ago
CVE-2026-11559	medium	5.3/10	CodeAstro Payroll System view_account.php sql injection	Jun 8, 2026 2mo ago
CVE-2026-11558	medium	5.3/10	CodeAstro Payroll System home_salary.php sql injection	Jun 8, 2026 2mo ago
CVE-2026-11552	medium	6.9/10	SourceCodester Onlne Examination & Learning Management System import_users.php hard-coded password	Jun 8, 2026 2mo ago
CVE-2026-11534	medium	5.1/10	imvks786 student_management_system add.php cross site scripting	Jun 8, 2026 2mo ago
CVE-2026-11533	medium	5.3/10	imvks786 student_management_system Student Deletion Endpoint see.php improper authorization	Jun 8, 2026 2mo ago
CVE-2026-11532	medium	5.3/10	imvks786 student_management_system Student Record add.php access control	Jun 8, 2026 2mo ago
CVE-2026-11531	medium	6.9/10	imvks786 student_management_system Administrator Login Endpoint admin_login.php sql injection	Jun 8, 2026 2mo ago
CVE-2026-48488	low	2.7/10	phpMyFAQ has Weak Cryptography - SHA1 for Password Hashing	Jun 8, 2026 2mo ago
CVE-2026-11520	medium	5.1/10	SourceCodester Inventory System header.php cross site scripting	Jun 8, 2026 2mo ago
CVE-2026-11519	medium	5.3/10	SourceCodester Inventory System Account Creation users_handler.php improper authorization	Jun 8, 2026 2mo ago
CVE-2026-11518	medium	5.3/10	SourceCodester Inventory System User Management users.php cross site scripting	Jun 8, 2026 2mo ago
CVE-2026-11515	medium	6.9/10	SourceCodester Barangay Resident Profiling and Information Management System Password Reset passsword_reset.php hard-coded password	Jun 8, 2026 2mo ago
CVE-2026-11514	medium	5.3/10	itsourcecode Hospital Management System addpatient.php sql injection	Jun 8, 2026 2mo ago
CVE-2026-11513	medium	5.3/10	itsourcecode Hospital Management System adminaccount.php sql injection	Jun 8, 2026 2mo ago
CVE-2026-11512	medium	5.3/10	itsourcecode Hospital Management System billing.php cross site scripting	Jun 8, 2026 2mo ago
CVE-2026-11511	medium	5.1/10	Bolt CMS HTML Attribute TextType.php HTML injection	Jun 8, 2026 2mo ago
CVE-2026-11510	medium	5.3/10	CodeAstro Leave Management System add_leave.php sql injection	Jun 8, 2026 2mo ago
CVE-2026-11509	medium	5.3/10	CodeAstro Leave Management System search_staff_for_updation.php sql injection	Jun 8, 2026 2mo ago
CVE-2026-11508	medium	5.3/10	CodeAstro Leave Management System search_staff_to_assign_pc.php sql injection	Jun 8, 2026 2mo ago
CVE-2026-11507	medium	5.3/10	CodeAstro Leave Management System delete_leave_type.php sql injection	Jun 8, 2026 2mo ago
CVE-2026-11506	medium	5.3/10	CodeAstro Leave Management System search_staff_for_deletion.php sql injection	Jun 8, 2026 2mo ago
CVE-2026-11501	medium	6.9/10	SourceCodester Hospitals Patient Records Management System Master.php save_patient sql injection	Jun 8, 2026 2mo ago
CVE-2026-11495	medium	5.3/10	CodeAstro Ingredients Stock Management System add_stock.php sql injection	Jun 8, 2026 2mo ago
CVE-2026-11490	medium	6.9/10	code-projects Online Music Site Search.php sql injection	Jun 8, 2026 2mo ago
CVE-2026-11489	medium	6.9/10	code-projects Online Music Site AdminDeleteAlbum.php sql injection	Jun 8, 2026 2mo ago
CVE-2026-11488	medium	6.9/10	code-projects Simple Flight Ticket Booking System POST Parameter checkUser.php sql injection	Jun 8, 2026 2mo ago
CVE-2026-11486	medium	6.9/10	SourceCodester Class and Exam Timetabling System archive1.php sql injection	Jun 8, 2026 2mo ago
CVE-2026-11485	medium	6.9/10	SourceCodester Class and Exam Timetabling System archive2.php sql injection	Jun 8, 2026 2mo ago
CVE-2026-11484	medium	6.9/10	SourceCodester Class and Exam Timetabling System archive3.php sql injection	Jun 8, 2026 2mo ago