Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

337,496

All time

Critical · Active

10,683

CVSS ≥ 9.0

New · 14 days

2,054

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 4021–4050 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-4815	medium	6.9/10	Campcodes Sales and Inventory System supplier_update.php sql injection	May 17, 2025 1y ago
CVE-2025-4814	medium	6.9/10	Campcodes Sales and Inventory System supplier_add.php sql injection	May 17, 2025 1y ago
CVE-2025-4813	medium	6.9/10	PHPGurukul Human Metapneumovirus Testing Management System edit-phlebotomist.php sql injection	May 16, 2025 1y ago
CVE-2025-4812	medium	6.9/10	PHPGurukul Human Metapneumovirus Testing Management System profile.php sql injection	May 16, 2025 1y ago
CVE-2025-4811	medium	6.9/10	CodeAstro Pharmacy Management System Login index.php sql injection	May 16, 2025 1y ago
CVE-2025-4808	medium	5.3/10	PHPGurukul Park Ticketing Management System add-normal-ticket.php sql injection	May 16, 2025 1y ago
CVE-2025-4795	medium	5.1/10	gongfuxiang schoolcms index.php SaveInfo sql injection	May 16, 2025 1y ago
CVE-2025-4794	medium	6.9/10	PHPGurukul Online Course Registration news.php sql injection	May 16, 2025 1y ago
CVE-2025-4793	medium	6.9/10	PHPGurukul Online Course Registration edit-student-profile.php sql injection	May 16, 2025 1y ago
CVE-2025-48134	high	7.2/10	WordPress WP Tabs plugin <= 2.2.12 - PHP Object Injection Vulnerability	May 16, 2025 1y ago
CVE-2025-48112	high	7.1/10	WordPress Dot html,php,xml etc pages plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability	May 16, 2025 1y ago
CVE-2025-4785	medium	6.9/10	PHPGurukul Daily Expense Tracker System user-profile.php sql injection	May 16, 2025 1y ago
CVE-2025-4781	medium	5.3/10	PHPGurukul Park Ticketing Management System forgot-password.php sql injection	May 16, 2025 1y ago
CVE-2025-4780	medium	5.3/10	PHPGurukul Park Ticketing Management System foreigner-search.php sql injection	May 16, 2025 1y ago
CVE-2025-4778	medium	5.3/10	PHPGurukul Park Ticketing Management System normal-search.php sql injection	May 16, 2025 1y ago
CVE-2025-4777	medium	5.3/10	PHPGurukul Park Ticketing Management System view-foreigner-ticket.php sql injection	May 16, 2025 1y ago
CVE-2025-4773	medium	6.9/10	PHPGurukul Online Course Registration level.php sql injection	May 16, 2025 1y ago
CVE-2025-4772	medium	6.9/10	PHPGurukul Online Course Registration department.php sql injection	May 16, 2025 1y ago
CVE-2025-4771	medium	6.9/10	PHPGurukul Online Course Registration course.php sql injection	May 16, 2025 1y ago
CVE-2025-4770	medium	5.3/10	PHPGurukul Park Ticketing Management System view-normal-ticket.php sql injection	May 16, 2025 1y ago
CVE-2025-4766	medium	6.9/10	PHPGurukul Zoo Management System profile.php sql injection	May 16, 2025 1y ago
CVE-2025-4765	medium	6.9/10	PHPGurukul Zoo Management System contactus.php sql injection	May 16, 2025 1y ago
CVE-2025-4761	medium	6.9/10	PHPGurukul Complaint Management System admin-profile.php sql injection	May 16, 2025 1y ago
CVE-2025-4758	medium	6.9/10	PHPGurukul Beauty Parlour Management System contact.php sql injection	May 16, 2025 1y ago
CVE-2025-4757	medium	6.9/10	PHPGurukul Beauty Parlour Management System forgot-password.php sql injection	May 16, 2025 1y ago
CVE-2025-4747	medium	5.3/10	Bohua NetDragon Firewall ip_status.php command injection	May 16, 2025 1y ago
CVE-2025-4746	medium	6.9/10	Campcodes Sales and Inventory System purchase_delete.php sql injection	May 16, 2025 1y ago
CVE-2025-4745	medium	5.1/10	code-projects Employee Record System current_employees.php cross site scripting	May 16, 2025 1y ago
CVE-2025-4744	medium	5.1/10	code-projects Employee Record System edit_employee.php cross site scripting	May 16, 2025 1y ago
CVE-2025-4743	medium	5.3/10	code-projects Employee Record System getData.php sql injection	May 16, 2025 1y ago