Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,738

All time

Critical · Active

12,169

CVSS ≥ 9.0

New · 14 days

3,057

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 4741–4770 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-2601	medium	5.3/10	SourceCodester Kortex Lite Advocate Office Management System activate_reg.php sql injection	Mar 21, 2025 1y ago
CVE-2025-2583	medium	5.1/10	SimpleMachines SMF ManageNews.php cross site scripting	Mar 21, 2025 1y ago
CVE-2025-2582	medium	5.1/10	SimpleMachines SMF ManageAttachments.php cross site scripting	Mar 21, 2025 1y ago
CVE-2024-13921	high	7.2/10	Order Export & Order Import for WooCommerce <= 2.6.0 - Authenticated (Admin+) PHP Object Injection via form_data Parameter	Mar 20, 2025 1y ago
CVE-2024-10721	low	3.5/10	Store XSS in phpipam/phpipam	Mar 20, 2025 1y ago
CVE-2024-10727	low	3.5/10	Cross-Site Scripting (XSS) in phpipam/phpipam	Mar 20, 2025 1y ago
CVE-2024-10720	high	8.2/10	Stored Cross-site Scripting (XSS) in phpipam/phpipam	Mar 20, 2025 1y ago
CVE-2024-10722	low	3.5/10	Stored Cross-site Scripting (XSS) in phpipam/phpipam	Mar 20, 2025 1y ago
CVE-2024-10719	low	2.4/10	Stored Cross-site Scripting (XSS) in phpipam/phpipam	Mar 20, 2025 1y ago
CVE-2024-10718	medium	5.3/10	Cookie without Secure attribute in phpipam/phpipam	Mar 20, 2025 1y ago
CVE-2024-10724	low	3.5/10	Stored XSS in IPV6 Section in phpipam/phpipam	Mar 20, 2025 1y ago
CVE-2024-10723	low	3.5/10	Stored XSS in phpipam/phpipam	Mar 20, 2025 1y ago
CVE-2024-10725	low	3.5/10	Stored Cross-site Scripting (XSS) in phpipam/phpipam	Mar 20, 2025 1y ago
CVE-2025-2505	critical	9.8/10	Age Gate <= 3.5.3 - Unauthenticated Local PHP File Inclusion via 'lang'	Mar 20, 2025 1y ago
CVE-2024-13790	critical	9.8/10	MinimogWP – The High Converting eCommerce WordPress Theme <= 3.7.0 - Unauthenticated Local PHP File Inclusion	Mar 19, 2025 1y ago
CVE-2024-13410	critical	9.8/10	CozyStay <= 1.7.0 and TinySalt <= 3.9.0 - Unauthenticated PHP Object Injection in ajax_handler	Mar 19, 2025 1y ago
CVE-2025-29930	medium	6.9/10	imFAQ allows local file inclusion in seo.php	Mar 18, 2025 1y ago
CVE-2025-2473	medium	6.9/10	PHPGurukul Company Visitor Management System Sign In index.php sql injection	Mar 18, 2025 1y ago
CVE-2025-2472	medium	6.9/10	PHPGurukul Apartment Visitors Management System Sign In index.php sql injection	Mar 17, 2025 1y ago
CVE-2025-2471	medium	5.3/10	PHPGurukul Boat Booking System boat-details.php sql injection	Mar 17, 2025 1y ago
CVE-2025-2419	medium	5.3/10	code-projects Real Estate Property Management System InsertFeedback.php sql injection	Mar 17, 2025 1y ago
CVE-2025-2393	medium	5.1/10	code-projects Online Class and Exam Scheduling System salut_del.php sql injection	Mar 17, 2025 1y ago
CVE-2025-2392	medium	5.1/10	code-projects Online Class and Exam Scheduling System activate.php sql injection	Mar 17, 2025 1y ago
CVE-2025-2391	medium	6.9/10	code-projects Blood Bank Management System Admin Login Page admin_login.php sql injection	Mar 17, 2025 1y ago
CVE-2025-2390	medium	5.3/10	code-projects Blood Bank Management System add_donor.php sql injection	Mar 17, 2025 1y ago
CVE-2025-2389	medium	5.1/10	code-projects Blood Bank Management System add_city.php sql injection	Mar 17, 2025 1y ago
CVE-2025-2387	medium	6.9/10	SourceCodester Online Food Ordering System ajax.php sql injection	Mar 17, 2025 1y ago
CVE-2025-2386	medium	6.9/10	PHPGurukul Local Services Search Engine Management System serviceman-search.php sql injection	Mar 17, 2025 1y ago
CVE-2025-2385	medium	6.9/10	code-projects Modern Bag login.php sql injection	Mar 17, 2025 1y ago
CVE-2025-2384	medium	5.3/10	code-projects Real Estate Property Management System Parameter InsertCustomer.php sql injection	Mar 17, 2025 1y ago