Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

337,460

All time

Critical · Active

10,680

CVSS ≥ 9.0

New · 14 days

2,021

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 3931–3960 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-48287	critical	9.8/10	WordPress Pix 4x sem juros - Pagaleve plugin <= 1.6.9 - PHP Object Injection Vulnerability	May 23, 2025 1y ago
CVE-2025-5108	medium	5.3/10	zongzhige ShopXO ZIP File Payment.php Upload unrestricted upload	May 23, 2025 1y ago
CVE-2025-5107	medium	5.3/10	Fujian Kelixun xml_cdr_details.php sql injection	May 23, 2025 1y ago
CVE-2025-5106	medium	6.9/10	Fujian Kelixun Filename fax_view.php os command injection	May 23, 2025 1y ago
CVE-2025-30169	medium	6.0/10	Admin Authorized File Upload and Execute PHP	May 22, 2025 1y ago
CVE-2025-5081	medium	6.9/10	Campcodes Cybercafe Management System adminprofile.php sql injection	May 22, 2025 1y ago
CVE-2025-5079	medium	6.9/10	PHPGurukul/Campcodes Online Shopping Portal updateorder.php sql injection	May 22, 2025 1y ago
CVE-2025-5078	medium	6.9/10	PHPGurukul/Campcodes Online Shopping Portal subcategory.php sql injection	May 22, 2025 1y ago
CVE-2025-5077	medium	6.9/10	Campcodes Online Shopping Portal edit-subcategory.php sql injection	May 22, 2025 1y ago
CVE-2025-3883	high	8.8/10	eCharge Hardy Barth cPH2 index.php Command Injection Remote Code Execution Vulnerability	May 22, 2025 1y ago
CVE-2025-3882	high	8.8/10	eCharge Hardy Barth cPH2 nwcheckexec.php dest Command Injection Remote Code Execution Vulnerability	May 22, 2025 1y ago
CVE-2025-3881	high	8.8/10	eCharge Hardy Barth cPH2 check_req.php ntp Command Injection Remote Code Execution Vulnerability	May 22, 2025 1y ago
CVE-2025-5059	medium	5.1/10	Campcodes Online Shopping Portal edit-subcategory.php unrestricted upload	May 21, 2025 1y ago
CVE-2025-5057	medium	6.9/10	Campcodes Online Shopping Portal insert-product.php sql injection	May 21, 2025 1y ago
CVE-2025-5056	medium	6.9/10	Campcodes Online Shopping Portal edit-products.php sql injection	May 21, 2025 1y ago
CVE-2025-5032	medium	6.9/10	Campcodes Online Shopping Portal edit-category.php sql injection	May 21, 2025 1y ago
CVE-2025-4803	high	7.2/10	Glossary by WPPedia <= 1.3.0 - Authenticated (Administrator+) PHP Object Injection	May 21, 2025 1y ago
CVE-2025-5008	medium	6.9/10	projectworlds Online Time Table Generator add_teacher.php sql injection	May 20, 2025 1y ago
CVE-2025-5007	medium	5.1/10	Part-DB Profile Picture Feature AttachmentSubmitHandler.php handleUpload cross site scripting	May 20, 2025 1y ago
CVE-2025-5006	medium	6.9/10	Campcodes Online Shopping Portal category.php sql injection	May 20, 2025 1y ago
CVE-2025-5004	medium	6.9/10	projectworlds Online Time Table Generator add_course.php sql injection	May 20, 2025 1y ago
CVE-2025-5003	medium	6.9/10	projectworlds Online Time Table Generator semester_ajax.php sql injection	May 20, 2025 1y ago
CVE-2025-5002	medium	6.9/10	SourceCodester Client Database Management System user_proposal_update_order.php sql injection	May 20, 2025 1y ago
CVE-2025-32926	critical	9.8/10	WordPress Grand Restaurant WordPress theme <= 7.0 - Path Traversal to PHP Object Injection vulnerability	May 19, 2025 1y ago
CVE-2025-32927	critical	9.8/10	WordPress FoodBakery plugin <= 3.3 - PHP Object Injection vulnerability	May 19, 2025 1y ago
CVE-2025-32928	critical	9.8/10	WordPress Altair theme <= 5.2.2 - PHP Object Injection vulnerability	May 19, 2025 1y ago
CVE-2025-39348	critical	9.8/10	WordPress Grand Restaurant WordPress theme <= 7.0 - PHP Object Injection vulnerability	May 19, 2025 1y ago
CVE-2025-39349	critical	9.8/10	WordPress CiyaShop theme <= 4.18.0 - PHP Object Injection vulnerability	May 19, 2025 1y ago
CVE-2025-39354	critical	9.8/10	WordPress Grand Conference theme <= 5.3 - PHP Object Injection vulnerability	May 19, 2025 1y ago
CVE-2025-39356	critical	9.8/10	WordPress Foodbakery Sticky Cart plugin <= 3.2 - PHP Object Injection vulnerability	May 19, 2025 1y ago