Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,368

All time

Critical · Active

12,132

CVSS ≥ 9.0

New · 14 days

2,789

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 3931–3960 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-31396	critical	9.8/10	WordPress FLAP - Business WordPress Theme <= 1.5 - PHP Object Injection Vulnerability	Jun 9, 2025 1y ago
CVE-2025-5881	medium	5.3/10	code-projects Chat System confirm_password.php sql injection	Jun 9, 2025 1y ago
CVE-2025-5877	medium	5.3/10	Fengoffice Feng Office Document Upload ApplicationDataObject.class.php xml external entity reference	Jun 9, 2025 1y ago
CVE-2025-5873	medium	5.3/10	eCharge Hardy Barth Salia PLCC Web UI firmware.php unrestricted upload	Jun 9, 2025 1y ago
CVE-2025-5860	medium	6.9/10	PHPGurukul Maid Hiring Management System search-booking-request.php sql injection	Jun 9, 2025 1y ago
CVE-2025-5859	medium	5.3/10	PHPGurukul Nipah Virus Testing Management System test-details.php sql injection	Jun 9, 2025 1y ago
CVE-2025-5858	medium	5.3/10	PHPGurukul Nipah Virus Testing Management System patient-report.php sql injection	Jun 9, 2025 1y ago
CVE-2025-5857	medium	5.3/10	code-projects Patient Record Management System urinalysis_record.php sql injection	Jun 9, 2025 1y ago
CVE-2025-5856	medium	6.9/10	PHPGurukul BP Monitoring Management System registration.php sql injection	Jun 9, 2025 1y ago
CVE-2025-5840	medium	6.9/10	SourceCodester Client Database Management System user_update_customer_order.php unrestricted upload	Jun 7, 2025 1y ago
CVE-2025-5838	medium	5.3/10	PHPGurukul Employee Record Management System adminprofile.php sql injection	Jun 7, 2025 1y ago
CVE-2025-5837	medium	5.3/10	PHPGurukul Employee Record Management System allemployees.php sql injection	Jun 7, 2025 1y ago
CVE-2025-5797	medium	5.1/10	code-projects Laundry System insert_type.php cross site scripting	Jun 6, 2025 1y ago
CVE-2025-5796	medium	5.1/10	code-projects Laundry System edit_type.php cross site scripting	Jun 6, 2025 1y ago
CVE-2025-5784	medium	5.3/10	PHPGurukul Employee Record Management System myexp.php sql injection	Jun 6, 2025 1y ago
CVE-2025-5783	medium	5.3/10	PHPGurukul Employee Record Management System editmyexp.php sql injection	Jun 6, 2025 1y ago
CVE-2025-5782	medium	5.3/10	PHPGurukul Employee Record Management System resetpassword.php sql injection	Jun 6, 2025 1y ago
CVE-2025-5780	medium	5.3/10	code-projects Patient Record Management System view_dental.php sql injection	Jun 6, 2025 1y ago
CVE-2025-5779	medium	5.3/10	code-projects Patient Record Management System birthing.php sql injection	Jun 6, 2025 1y ago
CVE-2025-5765	medium	5.1/10	code-projects Laundry System edit_laundry.php cross site scripting	Jun 6, 2025 1y ago
CVE-2025-5764	medium	5.1/10	code-projects Laundry System insert_laundry.php cross site scripting	Jun 6, 2025 1y ago
CVE-2025-49072	critical	9.8/10	WordPress Mr. Murphy < 1.2.12.1 - PHP Object Injection Vulnerability	Jun 6, 2025 1y ago
CVE-2025-49073	critical	9.8/10	WordPress Sweet Dessert < 1.1.13 - PHP Object Injection Vulnerability	Jun 6, 2025 1y ago
CVE-2025-5762	medium	5.3/10	code-projects Patient Record Management System view_hematology.php sql injection	Jun 6, 2025 1y ago
CVE-2025-39358	high	8.8/10	WordPress WP Posts Carousel <= 1.3.12 - PHP Object Injection Vulnerability	Jun 6, 2025 1y ago
CVE-2025-47584	high	8.5/10	WordPress Photography theme <= 7.5.2 - PHP Object Injection vulnerability	Jun 6, 2025 1y ago
CVE-2025-5761	medium	5.3/10	PHPGurukul BP Monitoring Management System edit-family-member.php sql injection	Jun 6, 2025 1y ago
CVE-2025-5759	medium	6.9/10	PHPGurukul Local Services Search Engine Management System edit-person-detail.php sql injection	Jun 6, 2025 1y ago
CVE-2025-5758	medium	6.9/10	SourceCodester Open Source Clinic Management System doctor.php sql injection	Jun 6, 2025 1y ago
CVE-2025-5757	medium	5.1/10	code-projects Traffic Offense Reporting System save-reported.php cross site scripting	Jun 6, 2025 1y ago