Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,368

All time

Critical · Active

12,132

CVSS ≥ 9.0

New · 14 days

2,788

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 4141–4170 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-47532	critical	9.8/10	WordPress CoinPayments.net Payment Gateway for WooCommerce plugin <= 1.0.17 - PHP Object Injection Vulnerability	May 23, 2025 1y ago
CVE-2025-47530	critical	9.8/10	WordPress WPFunnels plugin <= 3.5.18 - PHP Object Injection Vulnerability	May 23, 2025 1y ago
CVE-2025-47568	critical	9.8/10	WordPress ZoomSounds plugin <= 6.91 - PHP Object Injection vulnerability	May 23, 2025 1y ago
CVE-2025-47660	high	8.8/10	WordPress WC Affiliate plugin <= 2.16 - PHP Object Injection vulnerability	May 23, 2025 1y ago
CVE-2025-48289	critical	9.8/10	WordPress Kids Planet theme <= 2.2.14 - PHP Object Injection Vulnerability	May 23, 2025 1y ago
CVE-2025-48287	critical	9.8/10	WordPress Pix 4x sem juros - Pagaleve plugin <= 1.6.9 - PHP Object Injection Vulnerability	May 23, 2025 1y ago
CVE-2025-5108	medium	5.3/10	zongzhige ShopXO ZIP File Payment.php Upload unrestricted upload	May 23, 2025 1y ago
CVE-2025-5107	medium	5.3/10	Fujian Kelixun xml_cdr_details.php sql injection	May 23, 2025 1y ago
CVE-2025-5106	medium	6.9/10	Fujian Kelixun Filename fax_view.php os command injection	May 23, 2025 1y ago
CVE-2025-30169	medium	6.0/10	Admin Authorized File Upload and Execute PHP	May 22, 2025 1y ago
CVE-2025-5081	medium	6.9/10	Campcodes Cybercafe Management System adminprofile.php sql injection	May 22, 2025 1y ago
CVE-2025-5079	medium	6.9/10	PHPGurukul/Campcodes Online Shopping Portal updateorder.php sql injection	May 22, 2025 1y ago
CVE-2025-5078	medium	6.9/10	PHPGurukul/Campcodes Online Shopping Portal subcategory.php sql injection	May 22, 2025 1y ago
CVE-2025-5077	medium	6.9/10	Campcodes Online Shopping Portal edit-subcategory.php sql injection	May 22, 2025 1y ago
CVE-2025-3883	high	8.8/10	eCharge Hardy Barth cPH2 index.php Command Injection Remote Code Execution Vulnerability	May 22, 2025 1y ago
CVE-2025-3882	high	8.8/10	eCharge Hardy Barth cPH2 nwcheckexec.php dest Command Injection Remote Code Execution Vulnerability	May 22, 2025 1y ago
CVE-2025-3881	high	8.8/10	eCharge Hardy Barth cPH2 check_req.php ntp Command Injection Remote Code Execution Vulnerability	May 22, 2025 1y ago
CVE-2025-5059	medium	5.1/10	Campcodes Online Shopping Portal edit-subcategory.php unrestricted upload	May 21, 2025 1y ago
CVE-2025-5057	medium	6.9/10	Campcodes Online Shopping Portal insert-product.php sql injection	May 21, 2025 1y ago
CVE-2025-5056	medium	6.9/10	Campcodes Online Shopping Portal edit-products.php sql injection	May 21, 2025 1y ago
CVE-2025-5032	medium	6.9/10	Campcodes Online Shopping Portal edit-category.php sql injection	May 21, 2025 1y ago
CVE-2025-4803	high	7.2/10	Glossary by WPPedia <= 1.3.0 - Authenticated (Administrator+) PHP Object Injection	May 21, 2025 1y ago
CVE-2025-5008	medium	6.9/10	projectworlds Online Time Table Generator add_teacher.php sql injection	May 20, 2025 1y ago
CVE-2025-5007	medium	5.1/10	Part-DB Profile Picture Feature AttachmentSubmitHandler.php handleUpload cross site scripting	May 20, 2025 1y ago
CVE-2025-5006	medium	6.9/10	Campcodes Online Shopping Portal category.php sql injection	May 20, 2025 1y ago
CVE-2025-5004	medium	6.9/10	projectworlds Online Time Table Generator add_course.php sql injection	May 20, 2025 1y ago
CVE-2025-5003	medium	6.9/10	projectworlds Online Time Table Generator semester_ajax.php sql injection	May 20, 2025 1y ago
CVE-2025-5002	medium	6.9/10	SourceCodester Client Database Management System user_proposal_update_order.php sql injection	May 20, 2025 1y ago
CVE-2025-32926	critical	9.8/10	WordPress Grand Restaurant WordPress theme <= 7.0 - Path Traversal to PHP Object Injection vulnerability	May 19, 2025 1y ago
CVE-2025-32927	critical	9.8/10	WordPress FoodBakery plugin <= 3.3 - PHP Object Injection vulnerability	May 19, 2025 1y ago