Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,560

All time

Critical · Active

12,143

CVSS ≥ 9.0

New · 14 days

2,959

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 4501–4530 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-39527	high	8.8/10	WordPress Rating by BestWebSoft plugin <= 1.7 - PHP Object Injection Vulnerability	Apr 17, 2025 1y ago
CVE-2025-39550	critical	9.8/10	WordPress FluentCommunity plugin <= 1.2.15 - PHP Object Injection Vulnerability	Apr 17, 2025 1y ago
CVE-2025-39551	critical	9.8/10	WordPress FluentBoards plugin <= 1.47 - PHP Object Injection Vulnerability	Apr 17, 2025 1y ago
CVE-2025-31340	critical	9.9/10	Wisdom Master Pro - Improper Control of Filename for Include/Require Statement in PHP Program	Apr 17, 2025 1y ago
CVE-2025-3729	medium	6.9/10	SourceCodester Web-based Pharmacy Product Management System Database Backup backup.php os command injection	Apr 16, 2025 1y ago
CVE-2025-3697	medium	5.3/10	SourceCodester Web-based Pharmacy Product Management System edit-product.php sql injection	Apr 16, 2025 1y ago
CVE-2025-3696	medium	5.3/10	SourceCodester Web-based Pharmacy Product Management System search_stock. php sql injection	Apr 16, 2025 1y ago
CVE-2025-3692	medium	4.8/10	SourceCodester Online Eyewear Shop Master.php cross site scripting	Apr 16, 2025 1y ago
CVE-2025-3690	medium	6.9/10	PHPGurukul Men Salon Management System edit-services.php sql injection	Apr 16, 2025 1y ago
CVE-2025-39565	medium	6.6/10	WordPress MelaPress Login Security plugin <= 2.1.0 - PHP Object Injection Vulnerability	Apr 16, 2025 1y ago
CVE-2025-39601	critical	9.6/10	WordPress Custom CSS, JS & PHP plugin <= 2.4.1 - CSRF to RCE vulnerability	Apr 16, 2025 1y ago
CVE-2025-3689	medium	6.9/10	PHPGurukul Men Salon Management System edit-customer-detailed.php sql injection	Apr 16, 2025 1y ago
CVE-2025-3685	medium	5.3/10	code-projects Patient Record Management System edit_fpatient.php sql injection	Apr 16, 2025 1y ago
CVE-2025-3684	medium	5.3/10	Xianqi Kindergarten Management System Child Management stu_list.php sql injection	Apr 16, 2025 1y ago
CVE-2025-30985	critical	9.8/10	WordPress GNUCommerce plugin <= 1.5.4 - PHP Object Injection vulnerability	Apr 15, 2025 1y ago
CVE-2025-3589	medium	5.3/10	SourceCodester Music Class Enrollment System manage_class.php sql injection	Apr 14, 2025 1y ago
CVE-2025-3571	medium	5.3/10	Fannuo Enterprise Content Management System 凡诺企业网站管理系统 cms_chip.php sql injection	Apr 14, 2025 1y ago
CVE-2025-3563	medium	5.1/10	WuzhiCMS Setting index.php set code injection	Apr 14, 2025 1y ago
CVE-2025-3557	medium	5.3/10	ScriptAndTools eCommerce-website-in-PHP cross-site request forgery	Apr 14, 2025 1y ago
CVE-2025-3556	medium	6.3/10	ScriptAndTools eCommerce-website-in-PHP login.php excessive authentication	Apr 14, 2025 1y ago
CVE-2025-3555	medium	6.3/10	ScriptAndTools eCommerce-website-in-PHP login.php excessive authentication	Apr 14, 2025 1y ago
CVE-2025-3554	medium	5.3/10	phpshe api.php cross site scripting	Apr 14, 2025 1y ago
CVE-2025-3553	medium	5.3/10	phpshe admin.php pe_delete sql injection	Apr 14, 2025 1y ago
CVE-2025-3537	medium	6.9/10	Tutorials-Website Employee Management System update-user.php improper authorization	Apr 13, 2025 1y ago
CVE-2025-3536	medium	6.9/10	Tutorials-Website Employee Management System delete-user.php improper authorization	Apr 13, 2025 1y ago
CVE-2025-3439	critical	9.8/10	Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.1.1 - Unauthenticated PHP Object Injection	Apr 11, 2025 1y ago
CVE-2025-32607	critical	9.8/10	WordPress WpBookingly plugin <= 1.3.0 - PHP Object Injection vulnerability	Apr 11, 2025 1y ago
CVE-2025-32569	critical	9.8/10	WordPress TableOn plugin <= 1.0.4.3 - PHP Object Injection vulnerability	Apr 11, 2025 1y ago
CVE-2025-32568	critical	9.8/10	WordPress EmpikPlace for Woocommerce Plugin <= 1.4.3 - PHP Object Injection vulnerability	Apr 11, 2025 1y ago
CVE-2025-32144	high	8.8/10	WordPress Job Board Manager Plugin <= 2.1.61 - PHP Object Injection vulnerability	Apr 11, 2025 1y ago