Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,368

All time

Critical · Active

12,132

CVSS ≥ 9.0

New · 14 days

2,788

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 4111–4140 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-5205	medium	6.9/10	1000 Projects Daily College Class Work Report Book dcwr_entry.php sql injection	May 26, 2025 1y ago
CVE-2025-5179	medium	4.8/10	Realce Tecnologia Queue Ticket Kiosk Cadastro de Administrador Page index.php cross site scripting	May 26, 2025 1y ago
CVE-2025-5178	medium	5.3/10	Realce Tecnologia Queue Ticket Kiosk Image File ajax.php unrestricted upload	May 26, 2025 1y ago
CVE-2025-5177	medium	5.3/10	Realce Tecnologia Queue Ticket Kiosk Admin Login Page index.php cross site scripting	May 26, 2025 1y ago
CVE-2025-5176	medium	6.9/10	Realce Tecnologia Queue Ticket Kiosk Admin Login Page index.php sql injection	May 26, 2025 1y ago
CVE-2025-5155	medium	5.3/10	qianfox FoxCMS Article.php batchCope sql injection	May 25, 2025 1y ago
CVE-2025-5152	medium	5.3/10	Chanjet CRM newActivityedit.php sql injection	May 25, 2025 1y ago
CVE-2025-5139	medium	6.3/10	Qualitor Office 365-type Connection testaConexaoOffice365.php command injection	May 25, 2025 1y ago
CVE-2025-5137	medium	5.1/10	DedeCMS Incomplete Fix CVE-2018-9175 sys_verifies.php code injection	May 25, 2025 1y ago
CVE-2025-5128	medium	6.9/10	ScriptAndTools Real-Estate-website-in-PHP Admin Login Panel admin sql injection	May 24, 2025 1y ago
CVE-2025-5127	medium	5.1/10	Teledyne FLIR AX8 prod.php cross site scripting	May 24, 2025 1y ago
CVE-2025-5126	high	8.7/10	Teledyne FLIR AX8 settingsregional.php setDataTime command injection	May 24, 2025 1y ago
CVE-2025-5119	medium	6.9/10	Emlog Pro api_controller.php sql injection	May 23, 2025 1y ago
CVE-2025-5114	medium	5.3/10	easysoft zentaopms Editor index.php edit deserialization	May 23, 2025 1y ago
CVE-2025-31049	critical	9.8/10	WordPress Dash <= 1.3 - PHP Object Injection Vulnerability	May 23, 2025 1y ago
CVE-2025-31069	critical	9.8/10	WordPress HotStar – Multi-Purpose Business Theme <= 1.4 - PHP Object Injection Vulnerability	May 23, 2025 1y ago
CVE-2025-31430	critical	9.8/10	WordPress The Business <= 1.6.1 - PHP Object Injection Vulnerability	May 23, 2025 1y ago
CVE-2025-31423	critical	9.8/10	WordPress Umberto theme <= 1.2.8 - PHP Object Injection Vulnerability	May 23, 2025 1y ago
CVE-2025-31631	critical	9.8/10	WordPress Fish House theme <= 1.2.7 - PHP Object Injection Vulnerability	May 23, 2025 1y ago
CVE-2025-31924	high	8.8/10	WordPress Crafts & Arts theme <= 2.5 - PHP Object Injection Vulnerability	May 23, 2025 1y ago
CVE-2025-32284	high	8.8/10	WordPress Pet World theme <= 2.8 - PHP Object Injection Vulnerability	May 23, 2025 1y ago
CVE-2025-31927	critical	9.8/10	WordPress Acerola <= 1.6.5 - PHP Object Injection Vulnerability	May 23, 2025 1y ago
CVE-2025-32292	critical	9.8/10	WordPress Jarvis – Night Club, Concert, Festival WordPress theme <= 1.8.11 - PHP Object Injection Vulnerability	May 23, 2025 1y ago
CVE-2025-32293	high	8.8/10	WordPress Finance Consultant theme <= 2.8 - PHP Object Injection Vulnerability	May 23, 2025 1y ago
CVE-2025-39485	critical	9.8/10	WordPress GrandTour theme <= 5.6 - PHP Object Injection vulnerability	May 23, 2025 1y ago
CVE-2025-39480	critical	9.8/10	WordPress Car Dealer theme < 1.6.8 - PHP Object Injection vulnerability	May 23, 2025 1y ago
CVE-2025-39499	critical	9.8/10	WordPress Medicare Theme <= 2.1.0 - PHP Object Injection vulnerability	May 23, 2025 1y ago
CVE-2025-39495	critical	9.8/10	WordPress Avantage Theme <= 2.4.9 - PHP Object Injection vulnerability	May 23, 2025 1y ago
CVE-2025-39500	critical	9.8/10	WordPress Goodlayers Hostel Plugin <= 3.1.2 - PHP Object Injection vulnerability	May 23, 2025 1y ago
CVE-2025-39503	critical	9.8/10	WordPress Goodlayers Hotel plugin <= 3.1.4 - PHP Object Injection vulnerability	May 23, 2025 1y ago