Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,172

All time

Critical · Active

11,976

CVSS ≥ 9.0

New · 14 days

2,680

Newly disclosed

Feed last synced

42 mins ago

Data freshness

Showing 391–420 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-11483	medium	6.9/10	SourceCodester Class and Exam Timetabling System archive4.php sql injection	Jun 8, 2026 2mo ago
CVE-2026-11482	medium	6.9/10	SourceCodester Class and Exam Timetabling System archive5.php sql injection	Jun 8, 2026 2mo ago
CVE-2026-11480	medium	5.3/10	Chengdu Everbrite Network Technology BeikeShop Admin Design Builder Endpoint admin.php sql injection	Jun 8, 2026 2mo ago
CVE-2026-11476	medium	5.3/10	Kushan2k student-management-system Profile Update Endpoint AdminController.php edit-admin improper authorization	Jun 8, 2026 2mo ago
CVE-2026-11475	medium	5.3/10	Kushan2k student-management-system Certificate Verification Endpoint GradeController.php getStatus sql injection	Jun 8, 2026 2mo ago
CVE-2026-11474	medium	6.9/10	Kushan2k student-management-system Registration Endpoint RegisterService.php unrestricted upload	Jun 8, 2026 2mo ago
CVE-2026-11472	medium	6.9/10	SourceCodester Class and Exam Timetabling System index1.php sql injection	Jun 8, 2026 2mo ago
CVE-2026-11471	medium	6.9/10	SourceCodester Class and Exam Timetabling System index2.php sql injection	Jun 8, 2026 2mo ago
CVE-2026-11462	medium	6.9/10	Chengdu Everbrite Network Technology BeikeShop Stripe Plugin StripeController.php callback improper authorization	Jun 7, 2026 2mo ago
CVE-2026-11456	medium	6.9/10	Chanjet CRM HTTP GET Request jxf_dump_systable.php sql injection	Jun 7, 2026 2mo ago
CVE-2026-7566	medium	6.6/10	LearnPress – Backup & Migration Tool <= 4.1.4 - Authenticated (Administrator+) PHP Object Injection via WXR XML File Upload	Jun 6, 2026 2mo ago
CVE-2026-7654	high	8.8/10	Admin Columns <= 7.0.18 - Authenticated (Contributor+) PHP Object Injection to Remote Code Execution via Custom Field Meta Value	Jun 5, 2026 2mo ago
CVE-2026-46493	high	7.5/10	haxtheweb/haxcms-php uses insecure method for generating salt	Jun 5, 2026 2mo ago
CVE-2026-46401	medium	5.3/10	HAX CMS PHP has Insufficient Session Expiration	Jun 5, 2026 2mo ago
CVE-2026-46400	high	8.7/10	HAXCMS PHP has a File Upload Validation Bypass	Jun 5, 2026 2mo ago
CVE-2026-46397	medium	6.5/10	haxcms-php Local File Inclusion via saveOutline API Location Parameter v2.0	Jun 5, 2026 2mo ago
CVE-2026-46394	high	7.7/10	HAX CMS Vulnerable to Command Injection using Git.php	Jun 5, 2026 2mo ago
CVE-2026-46392	high	8.7/10	HAX CMS PHP Has a Stored XSS via Case-Sensitivity Mismatch in HTML Upload Validation	Jun 5, 2026 2mo ago
CVE-2026-11344	medium	6.9/10	code-projects Vehicle Management System New Driver Registration Form newdriver.php unrestricted upload	Jun 5, 2026 2mo ago
CVE-2026-11342	medium	6.9/10	code-projects Hotel and Tourism Reservation System details.php sql injection	Jun 5, 2026 2mo ago
CVE-2026-11337	medium	5.3/10	tittuvarghese CollegeManagementSystem fetch.php cross site scripting	Jun 5, 2026 2mo ago
CVE-2026-11336	medium	5.3/10	tittuvarghese CollegeManagementSystem Admin admin_page.php improper authorization	Jun 5, 2026 2mo ago
CVE-2026-11335	medium	5.3/10	tittuvarghese CollegeManagementSystem login-form.php session_start session fixiation	Jun 5, 2026 2mo ago
CVE-2026-11334	medium	6.9/10	tittuvarghese CollegeManagementSystem fetch.php sql injection	Jun 5, 2026 2mo ago
CVE-2026-11333	medium	5.3/10	tittuvarghese CollegeManagementSystem Student Data Upload Endpoint upload_student_data.php unrestricted upload	Jun 5, 2026 2mo ago
CVE-2026-10877	medium	6.9/10	SourceCodester Ship Ferry Ticket Reservation System Admin Login login.php sql injection	Jun 4, 2026 2mo ago
CVE-2026-10874	medium	5.3/10	projectworlds Online Art Gallery Shop Project adminHome.php sql injection	Jun 4, 2026 2mo ago
CVE-2026-10815	medium	5.3/10	LakshayD02 Hostel-Management-System-PHP Admin Dashboard index.php authorization	Jun 4, 2026 2mo ago
CVE-2026-10811	medium	5.3/10	itsourcecode Fees Management System receipt.php sql injection	Jun 4, 2026 2mo ago
CVE-2019-25732	high	8.8/10	PHP EI-Tube Script 3 SQL Injection via search parameter	Jun 4, 2026 2mo ago