Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,738

All time

Critical · Active

12,169

CVSS ≥ 9.0

New · 14 days

3,057

Newly disclosed

Feed last synced

57 mins ago

Data freshness

Showing 4621–4650 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-3176	medium	6.9/10	Project Worlds Online Lawyer Management System single_lawyer.php sql injection	Apr 3, 2025 1y ago
CVE-2025-3175	medium	6.9/10	Project Worlds Online Lawyer Management System save_user_edit_profile.php sql injection	Apr 3, 2025 1y ago
CVE-2025-3174	medium	6.9/10	Project Worlds Online Lawyer Management System searchLawyer.php sql injection	Apr 3, 2025 1y ago
CVE-2025-3173	medium	6.9/10	Project Worlds Online Lawyer Management System save_booking.php sql injection	Apr 3, 2025 1y ago
CVE-2025-3172	medium	6.9/10	Project Worlds Online Lawyer Management System lawyer_booking.php sql injection	Apr 3, 2025 1y ago
CVE-2025-3171	medium	6.9/10	Project Worlds Online Lawyer Management System approve_lawyer.php sql injection	Apr 3, 2025 1y ago
CVE-2025-3170	medium	6.9/10	Project Worlds Online Lawyer Management System admin_user.php sql injection	Apr 3, 2025 1y ago
CVE-2025-3169	low	2.3/10	Projeqtor saveAttachment.php unrestricted upload	Apr 3, 2025 1y ago
CVE-2025-3168	medium	6.9/10	PHPGurukul Time Table Generator System edit-class.php sql injection	Apr 3, 2025 1y ago
CVE-2025-30889	high	8.8/10	WordPress Testimonial Slider plugin <= 2.0.13 - PHP Object Injection vulnerability	Apr 3, 2025 1y ago
CVE-2025-3151	medium	6.9/10	SourceCodester Gym Management System signup.php sql injection	Apr 3, 2025 1y ago
CVE-2025-3147	medium	6.9/10	PHPGurukul Boat Booking System add-subadmin.php sql injection	Apr 3, 2025 1y ago
CVE-2025-3146	medium	6.9/10	PHPGurukul Bus Pass Management System view-pass-detail.php sql injection	Apr 3, 2025 1y ago
CVE-2025-3143	medium	5.3/10	SourceCodester Apartment Visitor Management System visitor-entry.php sql injection	Apr 3, 2025 1y ago
CVE-2025-3142	medium	5.3/10	SourceCodester Apartment Visitor Management System add-apartment.php sql injection	Apr 3, 2025 1y ago
CVE-2025-3141	medium	5.3/10	SourceCodester Online Medicine Ordering System manage_category.php sql injection	Apr 3, 2025 1y ago
CVE-2025-3140	medium	5.3/10	SourceCodester Online Medicine Ordering System view_category.php sql injection	Apr 3, 2025 1y ago
CVE-2025-3138	medium	6.9/10	PHPGurukul Online Security Guards Hiring System edit-guard-detail.php sql injection	Apr 3, 2025 1y ago
CVE-2025-3137	medium	6.9/10	PHPGurukul Online Security Guards Hiring System changeimage.php sql injection	Apr 3, 2025 1y ago
CVE-2025-3134	medium	5.3/10	code-projects Payroll Management System add_overtime.php sql injection	Apr 3, 2025 1y ago
CVE-2025-3120	medium	5.3/10	SourceCodester Apartment Visitors Management System add-apartment.php sql injection	Apr 2, 2025 1y ago
CVE-2025-3119	medium	5.3/10	SourceCodester Online Tutor Portal manage_course.php sql injection	Apr 2, 2025 1y ago
CVE-2025-3118	medium	5.3/10	SourceCodester Online Tutor Portal view_course.php sql injection	Apr 2, 2025 1y ago
CVE-2024-45699	high	7.5/10	Reflected XSS vulnerability in /zabbix.php?action=export.valuemaps	Apr 2, 2025 1y ago
CVE-2025-31612	critical	9.8/10	WordPress CBX Poll plugin <= 2.0.4 - PHP Object Injection vulnerability	Apr 1, 2025 1y ago
CVE-2025-30892	high	8.8/10	WordPress WpTravelly Plugin <= 1.8.7 - PHP Object Injection vulnerability	Apr 1, 2025 1y ago
CVE-2025-31087	critical	9.8/10	WordPress Multiple Shipping And Billing Address For Woocommerce plugin <= 1.5 - PHP Object Injection Vulnerability	Apr 1, 2025 1y ago
CVE-2025-31084	critical	9.8/10	WordPress Sunshine Photo Cart plugin <= 3.4.10 - PHP Object Injection Vulnerability	Apr 1, 2025 1y ago
CVE-2025-31074	high	8.8/10	WordPress MDJM Event Management plugin <= 1.7.5.2 - PHP Object Injection vulnerability	Apr 1, 2025 1y ago
CVE-2025-3045	medium	5.3/10	oretnom23/SourceCodester Apartment Visitor Management System remove-apartment.php sql injection	Apr 1, 2025 1y ago