Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

337,461

All time

Critical · Active

10,680

CVSS ≥ 9.0

New · 14 days

2,022

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 3991–4020 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-4908	medium	6.9/10	PHPGurukul Daily Expense Tracker System expense-datewise-reports-detailed.php sql injection	May 19, 2025 1y ago
CVE-2025-4907	medium	6.9/10	PHPGurukul Daily Expense Tracker System forgot-password.php sql injection	May 19, 2025 1y ago
CVE-2025-4906	medium	6.9/10	PHPGurukul Notice Board System login.php sql injection	May 19, 2025 1y ago
CVE-2025-4900	medium	6.9/10	Campcodes Sales and Inventory System payment.php sql injection	May 18, 2025 1y ago
CVE-2025-4899	medium	6.9/10	Campcodes Sales and Inventory System transaction_update.php sql injection	May 18, 2025 1y ago
CVE-2025-4898	medium	5.3/10	SourceCodester Student Result Management System Logo File update_system.php unlink path traversal	May 18, 2025 1y ago
CVE-2025-4895	medium	6.9/10	SourceCodester Doctors Appointment System delete-session.php sql injection	May 18, 2025 1y ago
CVE-2025-4886	medium	6.9/10	itsourcecode Sales and Inventory System product_update.php sql injection	May 18, 2025 1y ago
CVE-2025-4885	medium	6.9/10	itsourcecode Sales and Inventory System product_add.php sql injection	May 18, 2025 1y ago
CVE-2025-4884	medium	6.9/10	itsourcecode Restaurant Management System assign_save.php sql injection	May 18, 2025 1y ago
CVE-2025-4882	medium	6.9/10	itsourcecode Restaurant Management System team_update.php sql injection	May 18, 2025 1y ago
CVE-2025-4881	medium	6.9/10	itsourcecode Restaurant Management System user_save.php sql injection	May 18, 2025 1y ago
CVE-2025-4880	medium	6.9/10	PHPGurukul News Portal aboutus.php sql injection	May 18, 2025 1y ago
CVE-2025-4875	medium	6.9/10	Campcodes Online Shopping Portal forgot-password.php sql injection	May 18, 2025 1y ago
CVE-2025-4874	medium	6.9/10	PHPGurukul News Portal Project contactus.php sql injection	May 18, 2025 1y ago
CVE-2025-4873	medium	6.9/10	PHPGurukul News Portal Login index.php sql injection	May 18, 2025 1y ago
CVE-2025-4870	medium	6.9/10	itsourcecode Restaurant Management System menu_save.php sql injection	May 18, 2025 1y ago
CVE-2025-4869	medium	6.9/10	itsourcecode Restaurant Management System member_update.php sql injection	May 18, 2025 1y ago
CVE-2025-4865	medium	6.9/10	itsourcecode Restaurant Management System member_save.php sql injection	May 18, 2025 1y ago
CVE-2025-4864	medium	6.9/10	itsourcecode Restaurant Management System finished.php sql injection	May 18, 2025 1y ago
CVE-2025-4862	medium	5.3/10	PHPGurukul Directory Management System searchdata.php cross site scripting	May 18, 2025 1y ago
CVE-2025-4861	medium	6.9/10	PHPGurukul Beauty Parlour Management System admin-profile.php sql injection	May 18, 2025 1y ago
CVE-2025-4860	medium	4.8/10	D-Link DAP-2695 Static Pool Settings Page adv_dhcps.php cross site scripting	May 18, 2025 1y ago
CVE-2025-4859	medium	4.8/10	D-Link DAP-2695 MAC Bypass Settings Page adv_macbypass.php cross site scripting	May 18, 2025 1y ago
CVE-2025-4858	medium	4.8/10	D-Link DAP-2695 ARP Spoofing Prevention Page adv_arpspoofing.php cross site scripting	May 18, 2025 1y ago
CVE-2025-4837	medium	6.9/10	projectworlds Student Project Allocation System make_group_sql.php sql injection	May 17, 2025 1y ago
CVE-2025-4836	medium	6.9/10	Projectworlds Life Insurance Management System deleteAgent.php sql injection	May 17, 2025 1y ago
CVE-2025-4818	medium	6.9/10	SourceCodester Doctor's Appointment System GET Parameter delete-doctor.php sql injection	May 17, 2025 1y ago
CVE-2025-4817	medium	6.9/10	Sourcecodester Doctor's Appointment System GET Parameter delete-appointment.php sql injection	May 17, 2025 1y ago
CVE-2025-4816	medium	6.9/10	SourceCodester Doctor's Appointment System GET Parameter appointment.php sql injection	May 17, 2025 1y ago