Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,560

All time

Critical · Active

12,143

CVSS ≥ 9.0

New · 14 days

2,959

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 4471–4500 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-3955	medium	5.3/10	codeprojects Patient Record Management System edit_rpatient.php.php sql injection	Apr 27, 2025 1y ago
CVE-2025-3491	high	7.2/10	Add custom page template <= 2.0.1 - Authenticated (Administrator+) PHP Code Injection to Remote Code Execution	Apr 26, 2025 1y ago
CVE-2025-2105	high	8.1/10	Jupiter X Core <= 4.8.11 - Unauthenticated PHP Object Injection via PHAR	Apr 26, 2025 1y ago
CVE-2025-46473	high	7.2/10	WordPress Social Counter plugin <= 2.0.5 - PHP Object Injection Vulnerability	Apr 24, 2025 1y ago
CVE-2025-46481	high	7.2/10	WordPress Flickr Shortcode Importer plugin <= 2.2.3 - PHP Object Injection Vulnerability	Apr 24, 2025 1y ago
CVE-2025-3829	medium	6.9/10	PHPGurukul Men Salon Management System sales-reports-detail.php sql injection	Apr 20, 2025 1y ago
CVE-2025-3828	medium	6.9/10	PHPGurukul Men Salon Management System view-appointment.php sql injection	Apr 20, 2025 1y ago
CVE-2025-3827	medium	6.9/10	PHPGurukul Men Salon Management System forgot-password.php sql injection	Apr 20, 2025 1y ago
CVE-2025-3826	medium	4.8/10	SourceCodester Web-based Pharmacy Product Management System add-supplier.php cross site scripting	Apr 20, 2025 1y ago
CVE-2025-3825	medium	4.8/10	SourceCodester Web-based Pharmacy Product Management System add-category.php cross site scripting	Apr 20, 2025 1y ago
CVE-2025-3824	medium	4.8/10	SourceCodester Web-based Pharmacy Product Management System add-product.php cross site scripting	Apr 20, 2025 1y ago
CVE-2025-3823	medium	4.8/10	SourceCodester Web-based Pharmacy Product Management System add-stock.php cross site scripting	Apr 20, 2025 1y ago
CVE-2025-3822	medium	4.8/10	SourceCodester Web-based Pharmacy Product Management System changepassword.php cross site scripting	Apr 20, 2025 1y ago
CVE-2025-3821	medium	4.8/10	SourceCodester Web-based Pharmacy Product Management System add-admin.php cross site scripting	Apr 20, 2025 1y ago
CVE-2025-3819	medium	6.9/10	PHPGurukul Men Salon Management System search-appointment.php sql injection	Apr 19, 2025 1y ago
CVE-2025-3817	medium	5.3/10	SourceCodester Online Eyewear Shop Master.php sql injection	Apr 19, 2025 1y ago
CVE-2025-3800	medium	6.9/10	WCMS AnonymousController.php sql injection	Apr 19, 2025 1y ago
CVE-2025-3799	medium	6.9/10	WCMS AnonymousController.php sql injection	Apr 19, 2025 1y ago
CVE-2025-3798	medium	5.1/10	WCMS Advertisement Image AdvadminController.php sub unrestricted upload	Apr 19, 2025 1y ago
CVE-2025-3797	medium	5.1/10	SeaCMS admin_topic.php sql injection	Apr 19, 2025 1y ago
CVE-2025-3796	medium	5.3/10	PHPGurukul Men Salon Management System contact-us.php sql injection	Apr 18, 2025 1y ago
CVE-2025-3792	medium	5.1/10	SeaCMS admin_link.php sql injection	Apr 18, 2025 1y ago
CVE-2025-3783	medium	5.3/10	SourceCodester Web-based Pharmacy Product Management System add-product.php unrestricted upload	Apr 18, 2025 1y ago
CVE-2025-3765	medium	5.3/10	SourceCodester Web-based Pharmacy Product Management System edit-photo.php unrestricted upload	Apr 17, 2025 1y ago
CVE-2025-3764	medium	5.3/10	SourceCodester Web-based Pharmacy Product Management System edit-product.php unrestricted upload	Apr 17, 2025 1y ago
CVE-2025-32571	high	8.8/10	WordPress TuriTop Booking System Plugin <= 1.0.10 - PHP Object Injection vulnerability	Apr 17, 2025 1y ago
CVE-2025-32572	critical	9.8/10	WordPress Kata Plus Plugin <= 1.5.3 - PHP Object Injection vulnerability	Apr 17, 2025 1y ago
CVE-2025-32647	high	8.8/10	WordPress Question Answer plugin <= 1.2.73 - PHP Object Injection vulnerability	Apr 17, 2025 1y ago
CVE-2025-32658	critical	9.8/10	WordPress HelpGent plugin <= 2.2.5 - PHP Object Injection vulnerability	Apr 17, 2025 1y ago
CVE-2025-32686	high	8.8/10	WordPress Team Members plugin <= 3.4.4 - PHP Object Injection Vulnerability	Apr 17, 2025 1y ago