Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

700

Newly disclosed

Feed last synced

20 hrs ago

Data freshness

Showing 421–450 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-8131	medium	6.9/10	SourceCodester SUP Online Shopping replymsg.php sql injection	May 8, 2026 1mo ago
CVE-2026-8130	medium	6.9/10	SourceCodester SUP Online Shopping message.php sql injection	May 8, 2026 1mo ago
CVE-2026-8129	medium	6.9/10	SourceCodester SUP Online Shopping wishlist.php sql injection	May 8, 2026 1mo ago
CVE-2026-8128	medium	6.9/10	SourceCodester SUP Online Shopping viewmsg.php sql injection	May 8, 2026 1mo ago
CVE-2026-8126	medium	6.9/10	SourceCodester Comment System post_comment.php sql injection	May 8, 2026 1mo ago
CVE-2026-8125	medium	5.3/10	code-projects Simple Chat System sendMessage.php sql injection	May 8, 2026 1mo ago
CVE-2026-8117	medium	5.3/10	SourceCodester Pizzafy Ecommerce System index.php cross site scripting	May 7, 2026 1mo ago
CVE-2026-8098	medium	6.9/10	code-projects Feedback System checklogin.php sql injection	May 7, 2026 1mo ago
CVE-2026-8097	medium	5.3/10	CodeAstro Online Classroom askquery.php sql injection	May 7, 2026 1mo ago
CVE-2026-8083	medium	6.9/10	SourceCodester Pharmacy Sales and Inventory System ajax.php save_user sql injection	May 7, 2026 1mo ago
CVE-2026-41587	high	8.6/10	CI4MS: Unrestricted PHP File Upload via Theme Installation Leads to Authenticated Remote Code Execution	May 7, 2026 1mo ago
CVE-2026-41661	medium	6.1/10	Admidio: Reflected XSS in msg_window.php via Square Bracket to HTML Tag Conversion	May 7, 2026 1mo ago
CVE-2026-41657	medium	4.9/10	Admidio: Cross-Organization Member Data Exposure via Permission Check Mismatch in contacts_data.php	May 7, 2026 1mo ago
CVE-2026-40296	medium	5.4/10	PhpSpreadsheet vulnerable to XSS in HTML writer via custom number format codes	May 6, 2026 1mo ago
CVE-2026-41930	critical	9.2/10	Vvveb < 1.0.8.2 Hard-coded Credentials Information Disclosure via phpMyAdmin	May 6, 2026 1mo ago
CVE-2026-35453	medium	4.8/10	PhpSpreadsheet XSS via number format text substitution in HTML Writer	May 5, 2026 1mo ago
CVE-2026-34084	critical	9.2/10	PhpSpreadsheet SSRF and RCE via PHP stream wrappers in IOFactory::load	May 5, 2026 1mo ago
CVE-2026-7822	medium	5.3/10	itsourcecode Courier Management System print_pdets.php sql injection	May 5, 2026 1mo ago
CVE-2026-7783	medium	5.3/10	CodeCanyon Perfex CRM Admin Kanban Endpoint AbstractKanban.php applySortQuery sql injection	May 4, 2026 1mo ago
CVE-2026-7782	medium	5.3/10	CodeCanyon Perfex CRM Tenant Clients.php project authorization	May 4, 2026 1mo ago
CVE-2026-7746	medium	5.3/10	SourceCodester Web-based Pharmacy Product Management System edit-admin.php sql injection	May 4, 2026 1mo ago
CVE-2026-7733	medium	6.9/10	funadmin Frontend Chunked Upload Endpoint UploadService.php chunkUpload unrestricted upload	May 4, 2026 1mo ago
CVE-2026-7732	medium	5.3/10	code-projects BloodBank Managing System request_blood.php unrestricted upload	May 4, 2026 1mo ago
CVE-2026-7731	medium	5.3/10	code-projects BloodBank Managing System get_state.php sql injection	May 4, 2026 1mo ago
CVE-2026-7716	medium	5.3/10	code-projects Gym Management System In PHP/Windows NT index.php sql injection	May 4, 2026 1mo ago
CVE-2026-7697	medium	5.1/10	AMTT Hotel Broadband Operation System cardhand_submit.php sql injection	May 3, 2026 1mo ago
CVE-2026-7689	medium	6.3/10	Dolibarr ERP CRM Online Signature security.lib.php dol_verifyHash signature verification	May 3, 2026 1mo ago
CVE-2026-7688	low	2.3/10	Dolibarr ERP CRM Shipments API Endpoint expedition.class.php _checkValForAPI sql injection	May 3, 2026 1mo ago
CVE-2026-7632	medium	6.9/10	code-projects Online Hospital Management System viewappointment.php sql injection	May 2, 2026 1mo ago
CVE-2026-7630	medium	6.9/10	innocommerce InnoShop Installation Endpoint InstallServiceProvider.php boot improper authentication	May 2, 2026 1mo ago