Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,560

All time

Critical · Active

12,143

CVSS ≥ 9.0

New · 14 days

2,959

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 4261–4290 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-4758	medium	6.9/10	PHPGurukul Beauty Parlour Management System contact.php sql injection	May 16, 2025 1y ago
CVE-2025-4757	medium	6.9/10	PHPGurukul Beauty Parlour Management System forgot-password.php sql injection	May 16, 2025 1y ago
CVE-2025-4747	medium	5.3/10	Bohua NetDragon Firewall ip_status.php command injection	May 16, 2025 1y ago
CVE-2025-4746	medium	6.9/10	Campcodes Sales and Inventory System purchase_delete.php sql injection	May 16, 2025 1y ago
CVE-2025-4745	medium	5.1/10	code-projects Employee Record System current_employees.php cross site scripting	May 16, 2025 1y ago
CVE-2025-4744	medium	5.1/10	code-projects Employee Record System edit_employee.php cross site scripting	May 16, 2025 1y ago
CVE-2025-4743	medium	5.3/10	code-projects Employee Record System getData.php sql injection	May 16, 2025 1y ago
CVE-2025-4741	medium	6.9/10	Campcodes Sales and Inventory System purchase_add.php sql injection	May 16, 2025 1y ago
CVE-2025-4739	medium	6.9/10	projectworlds Hospital Database Management System medicines_info.php sql injection	May 16, 2025 1y ago
CVE-2025-4736	medium	6.9/10	PHPGurukul Daily Expense Tracker register.php sql injection	May 16, 2025 1y ago
CVE-2025-4735	medium	5.3/10	Campcodes Sales and Inventory System product.php unrestricted upload	May 16, 2025 1y ago
CVE-2025-4734	medium	6.9/10	Campcodes Sales and Inventory System ci_update.php sql injection	May 16, 2025 1y ago
CVE-2025-4728	medium	6.9/10	SourceCodester Best Online News Portal search.php sql injection	May 15, 2025 1y ago
CVE-2025-4726	medium	6.9/10	itsourcecode Placement Management System view_student.php sql injection	May 15, 2025 1y ago
CVE-2025-4725	medium	6.9/10	itsourcecode Placement Management System view_drive.php sql injection	May 15, 2025 1y ago
CVE-2025-4724	medium	6.9/10	itsourcecode Placement Management System student_profile.php sql injection	May 15, 2025 1y ago
CVE-2025-4723	medium	6.9/10	itsourcecode Placement Management System all_student.php sql injection	May 15, 2025 1y ago
CVE-2025-4722	medium	6.9/10	itsourcecode Placement Management System edit_profile.php sql injection	May 15, 2025 1y ago
CVE-2025-47275	critical	9.1/10	Brute Force Authentication Tags of CookieStore Sessions in Auth0-PHP SDK	May 15, 2025 1y ago
CVE-2025-4721	medium	6.9/10	itsourcecode Placement Management System drive.php sql injection	May 15, 2025 1y ago
CVE-2025-4720	medium	5.3/10	SourceCodester Student Result Management System drop_student.php path traversal	May 15, 2025 1y ago
CVE-2025-4719	medium	6.9/10	Campcodes Sales and Inventory System cash_transaction.php sql injection	May 15, 2025 1y ago
CVE-2025-4718	medium	6.9/10	Campcodes Sales and Inventory System customer_add.php sql injection	May 15, 2025 1y ago
CVE-2025-4717	medium	6.9/10	PHPGurukul Company Visitor Management System visitors-form.php sql injection	May 15, 2025 1y ago
CVE-2025-47788	critical	9.4/10	Missing Path Validation Enables Path Traversal in Controller.php	May 15, 2025 1y ago
CVE-2025-4716	medium	6.9/10	Campcodes Sales and Inventory System credit_transaction_add.php sql injection	May 15, 2025 1y ago
CVE-2025-4715	medium	6.9/10	Campcodes Sales and Inventory System view_application.php sql injection	May 15, 2025 1y ago
CVE-2025-4714	medium	6.9/10	Campcodes Sales and Inventory System reprint.php sql injection	May 15, 2025 1y ago
CVE-2025-4713	medium	6.9/10	Campcodes Sales and Inventory System print.php sql injection	May 15, 2025 1y ago
CVE-2025-4712	medium	6.9/10	Campcodes Sales and Inventory System account_summary.php sql injection	May 15, 2025 1y ago