Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,172

All time

Critical · Active

11,976

CVSS ≥ 9.0

New · 14 days

2,680

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 421–450 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2019-25730	high	8.8/10	Listing Hub CMS 1.0 SQL Injection via pages.php id	Jun 4, 2026 2mo ago
CVE-2026-10810	medium	5.3/10	itsourcecode Fees Management System navbar.php cross site scripting	Jun 4, 2026 2mo ago
CVE-2026-10809	medium	5.3/10	itsourcecode Fees Management System manage_user.php sql injection	Jun 4, 2026 2mo ago
CVE-2026-10808	medium	5.3/10	itsourcecode Fees Management System manage_student.php sql injection	Jun 4, 2026 2mo ago
CVE-2026-10807	medium	5.3/10	mjperpinosa stumasy change_profile_image.php unrestricted upload	Jun 4, 2026 2mo ago
CVE-2026-10806	medium	5.3/10	mjperpinosa stumasy add_post.php unrestricted upload	Jun 4, 2026 2mo ago
CVE-2026-10777	medium	6.9/10	ealpha072 Student-Management-System Administrative Backend config.php improper authentication	Jun 3, 2026 2mo ago
CVE-2026-7888	high	8.4/10	Concrete CMS below 9.5.2 is vulnerable to PHP Object Injection via unserialize() calls in the Workflow, Form block, and File/Set components that lack the allowed_classes restriction.	Jun 3, 2026 2mo ago
CVE-2026-10704	medium	6.9/10	SourceCodester Pizzafy E-Commerce System Administrative Control Panel admin_class_novo.php login sql injection	Jun 3, 2026 2mo ago
CVE-2026-10694	medium	6.9/10	SourceCodester Online Food Ordering System index.php include file inclusion	Jun 3, 2026 2mo ago
CVE-2026-25861	high	8.2/10	QloApps 1.7.0 Weak Password Hashing via MD5 in Tools.php	Jun 2, 2026 2mo ago
CVE-2026-10624	medium	5.3/10	SourceCodester Human Resource Management Employee View detailview.php resource injection	Jun 2, 2026 2mo ago
CVE-2026-10620	medium	6.9/10	code-projects Student Admission System index.php sql injection	Jun 2, 2026 2mo ago
CVE-2026-10608	medium	6.9/10	DedeCMS carbuyaction.php RemoveXSS sql injection	Jun 2, 2026 2mo ago
CVE-2026-10607	medium	6.9/10	DedeCMS flink.php dede_htmlspecialchars sql injection	Jun 2, 2026 2mo ago
CVE-2026-10606	medium	6.9/10	DedeCMS Feedback feedback.php TrimMsg sql injection	Jun 2, 2026 2mo ago
CVE-2026-32250	medium	4.3/10	NamelessMC has Reflected Cross-Site Scripting (XSS) in id parameter of /index.php?route=/queries/user/	Jun 2, 2026 2mo ago
CVE-2026-39555	high	8.1/10	WordPress Askka theme <= 1.3.1 - PHP Object Injection vulnerability	Jun 2, 2026 2mo ago
CVE-2026-39551	high	8.1/10	WordPress Töbel theme <= 1.8.1 - PHP Object Injection vulnerability	Jun 2, 2026 2mo ago
CVE-2026-39550	high	8.1/10	WordPress Aperitif theme <= 1.6 - PHP Object Injection vulnerability	Jun 2, 2026 2mo ago
CVE-2026-10581	medium	5.3/10	DedeCMS download.php base64_decode server-side request forgery	Jun 2, 2026 2mo ago
CVE-2026-10568	medium	5.3/10	itsourcecode Fees Management System manage_payment.php sql injection	Jun 2, 2026 2mo ago
CVE-2026-10559	medium	5.3/10	SourceCodester Pizzafy Ecommerce System index.php file inclusion	Jun 2, 2026 2mo ago
CVE-2026-10558	medium	5.3/10	SourceCodester Pizzafy Ecommerce System index.php file inclusion	Jun 2, 2026 2mo ago
CVE-2026-10302	medium	5.3/10	itsourcecode Fees Management System manage_fee.php sql injection	Jun 1, 2026 2mo ago
CVE-2026-10301	medium	5.3/10	itsourcecode Fees Management System index.php cross site scripting	Jun 1, 2026 2mo ago
CVE-2026-10299	medium	5.1/10	code-projects Online Hospital Management System viewdoctortimings.php resource injection	Jun 1, 2026 2mo ago
CVE-2026-10297	medium	5.3/10	itsourcecode Fees Management System manage_course.php sql injection	Jun 1, 2026 2mo ago
CVE-2026-10296	medium	5.3/10	itsourcecode Fees Management System ajax.php sql injection	Jun 1, 2026 2mo ago
CVE-2026-49491	high	8.8/10	Pixa Bank 2.0 SQL Injection via agence-ajax.php API	Jun 1, 2026 2mo ago