Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,738

All time

Critical · Active

12,169

CVSS ≥ 9.0

New · 14 days

3,057

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 4651–4680 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-3042	medium	5.3/10	Project Worlds Online Time Table Generator updateprofile.php unrestricted upload	Apr 1, 2025 1y ago
CVE-2025-3041	medium	5.3/10	Project Worlds Online Time Table Generator updatestudent.php unrestricted upload	Mar 31, 2025 1y ago
CVE-2025-3040	medium	5.3/10	Project Worlds Online Time Table Generator add_student.php unrestricted upload	Mar 31, 2025 1y ago
CVE-2025-3039	medium	5.3/10	code-projects Payroll Management System add_employee.php sql injection	Mar 31, 2025 1y ago
CVE-2025-3038	medium	5.3/10	code-projects Payroll Management System view_account.php sql injection	Mar 31, 2025 1y ago
CVE-2025-3018	medium	5.3/10	SourceCodester Online Eyewear Shop Users.php sql injection	Mar 31, 2025 1y ago
CVE-2025-3006	medium	6.9/10	PHPGurukul e-Diary Management System edit-category.php sql injection	Mar 31, 2025 1y ago
CVE-2025-29772	high	7.2/10	OpenEMR allows Reflected XSS in CAMOS new.php	Mar 31, 2025 1y ago
CVE-2025-3002	medium	6.9/10	Digital China DCME-520 mon_merge_stat_hist.php os command injection	Mar 31, 2025 1y ago
CVE-2025-2985	medium	5.3/10	code-projects Payroll Management System update_account.php sql injection	Mar 31, 2025 1y ago
CVE-2025-2984	medium	5.3/10	code-projects Payroll Management System delete.php sql injection	Mar 31, 2025 1y ago
CVE-2025-2973	medium	5.3/10	code-projects College Management System student.php unrestricted upload	Mar 31, 2025 1y ago
CVE-2025-2952	medium	5.3/10	Bluestar Micro Mall api.php unrestricted upload	Mar 30, 2025 1y ago
CVE-2025-2951	medium	5.3/10	Bluestar Micro Mall data.php sql injection	Mar 30, 2025 1y ago
CVE-2025-22526	critical	9.8/10	WordPress PHP/MySQL CPU performance statistics Plugin <= 1.2.1 - PHP Object Injection vulnerability	Mar 28, 2025 1y ago
CVE-2025-2485	high	7.5/10	Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.7 - Unauthenticated PHP Object Injection via PHAR to Arbitrary File Deletion	Mar 28, 2025 1y ago
CVE-2025-26873	critical	9.0/10	WordPress Traveler theme <= 3.1.8 - PHP Object Injection vulnerability	Mar 27, 2025 1y ago
CVE-2025-30367	critical	10.0/10	WeGIA SQL Injection Vulnerability in nextPage Parameter on control.php Endpoint	Mar 27, 2025 1y ago
CVE-2025-30366	medium	6.2/10	WeGIA vulnerable to Stored XSS in personalizacao.php	Mar 27, 2025 1y ago
CVE-2025-30365	critical	9.4/10	SQL Injection in query_geracao_auto.php	Mar 27, 2025 1y ago
CVE-2025-30364	critical	10.0/10	WeGIA vulnerable to SQL Injection (Blind Time-Based) in remuneracao.php parameter id_funcionario	Mar 27, 2025 1y ago
CVE-2025-30363	medium	6.4/10	WeGIA vulnerable to Stored XSS in documentos_funcionario.php parameter dados_addInfo	Mar 27, 2025 1y ago
CVE-2025-30362	medium	6.4/10	WeGIA vulnerable to Stored XSS in documentos_funcionario.php parameter id	Mar 27, 2025 1y ago
CVE-2025-2854	medium	5.3/10	code-projects Payroll Management System update_employee.php sql injection	Mar 27, 2025 1y ago
CVE-2025-2852	medium	5.1/10	SourceCodester Food Ordering Management System view_menu.php sql injection	Mar 27, 2025 1y ago
CVE-2025-2847	medium	5.3/10	Codezips Gym Management System over_month.php sql injection	Mar 27, 2025 1y ago
CVE-2025-2846	medium	6.9/10	SourceCodester Online Eyewear Shop Registration Users.php registration sql injection	Mar 27, 2025 1y ago
CVE-2025-30895	high	7.5/10	WordPress WpEvently Plugin <= 4.2.9 - PHP Object Injection vulnerability	Mar 27, 2025 1y ago
CVE-2025-30773	high	7.2/10	WordPress TranslatePress plugin <= 2.9.6 - PHP Object Injection Vulnerability	Mar 27, 2025 1y ago
CVE-2025-2332	critical	9.8/10	Export All Posts, Products, Orders, Refunds & Users <= 2.13 - Unauthenticated PHP Object Injection	Mar 27, 2025 1y ago