Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,560

All time

Critical · Active

12,143

CVSS ≥ 9.0

New · 14 days

2,959

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 4351–4380 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-4457	medium	6.9/10	Project Worlds Car Rental Project approve.php sql injection	May 9, 2025 1y ago
CVE-2025-4456	medium	6.9/10	Project Worlds Car Rental Project signup.php sql injection	May 9, 2025 1y ago
CVE-2023-7303	medium	5.1/10	q2apro q2apro-on-site-notifications q2apro-onsitenotifications-page.php process_request cross site scripting	May 7, 2025 1y ago
CVE-2025-46828	critical	10.0/10	Unauthenticated SQL Injection on get_socios.php endpoint	May 7, 2025 1y ago
CVE-2025-47683	high	7.2/10	WordPress WP Maintenance plugin <= 6.1.9.7 - PHP Object Injection Vulnerability	May 7, 2025 1y ago
CVE-2025-47629	high	7.2/10	WordPress WP-CRM System plugin <= 3.4.5 - PHP Object Injection vulnerability	May 7, 2025 1y ago
CVE-2025-0667	high	8.7/10	BOINC Server Stored XSS Injection in pm.php	May 7, 2025 1y ago
CVE-2025-0666	high	7.0/10	BOINC Server Stored XSS Injection in host_venue_action.php	May 7, 2025 1y ago
CVE-2025-0855	critical	9.8/10	PGS Core <= 5.8.0 - Unauthenticated PHP Object Injection	May 6, 2025 1y ago
CVE-2025-46820	high	7.1/10	phpgt/Dom exposes the GITHUB_TOKEN in Dom workflow run artifact	May 6, 2025 1y ago
CVE-2025-4363	medium	6.9/10	itsourcecode Gym Management System ajax.php sql injection	May 6, 2025 1y ago
CVE-2025-4362	medium	6.9/10	itsourcecode Gym Management System ajax.php sql injection	May 6, 2025 1y ago
CVE-2025-4361	medium	6.9/10	PHPGurukul Company Visitor Management System department.php sql injection	May 6, 2025 1y ago
CVE-2025-4360	medium	6.9/10	itsourcecode Gym Management System view_member.php sql injection	May 6, 2025 1y ago
CVE-2025-4359	medium	6.9/10	itsourcecode Gym Management System ajax.php sql injection	May 6, 2025 1y ago
CVE-2025-4358	medium	6.9/10	PHPGurukul Company Visitor Management System admin-profile.php sql injection	May 6, 2025 1y ago
CVE-2025-4332	medium	6.9/10	PHPGurukul Company Visitor Management System visitor-detail.php sql injection	May 6, 2025 1y ago
CVE-2025-4331	medium	6.9/10	SourceCodester Online Student Clearance System login.php sql injection	May 6, 2025 1y ago
CVE-2025-4314	medium	6.9/10	SourceCodester Advanced Web Store index.php sql injection	May 6, 2025 1y ago
CVE-2025-4313	medium	6.9/10	SourceCodester Advanced Web Store admin_addnew_product.php sql injection	May 6, 2025 1y ago
CVE-2025-4312	medium	6.9/10	SourceCodester Advanced Web Store productdetail.php sql injection	May 6, 2025 1y ago
CVE-2025-4311	medium	6.9/10	itsourcecode Content Management System update_main_topic_img.php sql injection	May 6, 2025 1y ago
CVE-2025-4310	medium	5.1/10	itsourcecode Content Management System add_topic.php unrestricted upload	May 6, 2025 1y ago
CVE-2025-4309	medium	6.9/10	PHPGurukul Art Gallery Management System add-art-type.php sql injection	May 6, 2025 1y ago
CVE-2025-4308	medium	6.9/10	PHPGurukul Art Gallery Management System add-art-type.php sql injection	May 6, 2025 1y ago
CVE-2025-4307	medium	6.9/10	PHPGurukul Art Gallery Management System add-art-medium.php sql injection	May 6, 2025 1y ago
CVE-2025-4306	medium	6.9/10	PHPGurukul Nipah Virus Testing Management System edit-phlebotomist.php sql injection	May 6, 2025 1y ago
CVE-2025-4305	medium	5.3/10	kefaming mayi File.php upload unrestricted upload	May 6, 2025 1y ago
CVE-2025-4304	medium	6.9/10	PHPGurukul Cyber Cafe Management System adminprofile.php sql injection	May 6, 2025 1y ago
CVE-2025-4303	medium	6.9/10	PHPGurukul Human Metapneumovirus Testing Management System add-phlebotomist.php sql injection	May 6, 2025 1y ago