Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

699

Newly disclosed

Feed last synced

21 hrs ago

Data freshness

Showing 451–480 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-7612	medium	5.1/10	itsourcecode Courier Management System edit_user.php sql injection	May 2, 2026 1mo ago
CVE-2026-7647	high	8.1/10	Profile Builder Pro <= 3.14.5 - Unauthenticated PHP Object Injection	May 2, 2026 1mo ago
CVE-2026-7592	medium	6.9/10	itsourcecode Courier Management System edit_staff.php sql injection	May 1, 2026 1mo ago
CVE-2026-7555	medium	6.9/10	itsourcecode Electronic Judging System login.php sql injection	May 1, 2026 1mo ago
CVE-2026-7553	medium	5.1/10	code-projects Gym Management System edit_exercises.php sql injection	May 1, 2026 1mo ago
CVE-2026-7550	medium	6.9/10	SourceCodester Pharmacy Sales and Inventory System ajax.php save_customer sql injection	May 1, 2026 1mo ago
CVE-2026-7549	medium	6.9/10	SourceCodester Pharmacy Sales and Inventory System ajax.php delete_customer sql injection	May 1, 2026 1mo ago
CVE-2026-7545	medium	6.9/10	SourceCodester Advanced School Management System checkEmail Endpoint commonController.php sql injection	May 1, 2026 1mo ago
CVE-2026-7508	medium	5.3/10	Bootstrap CMS Page Creation show.blade.php code injection	Apr 30, 2026 1mo ago
CVE-2026-7502	medium	5.3/10	LinkStackOrg LinkStack Management Endpoint UserController.php saveLink authorization	Apr 30, 2026 1mo ago
CVE-2026-7501	medium	5.1/10	LinkStackOrg LinkStack UserController.php editPage cross site scripting	Apr 30, 2026 1mo ago
CVE-2026-6498	medium	5.3/10	Five Star Restaurant Reservations <= 2.7.16 - Unauthenticated Payment Bypass via PHP Type Juggling in 'payment_id' Parameter	Apr 30, 2026 1mo ago
CVE-2026-7447	medium	5.3/10	SourceCodester Pet Grooming Management Software update_customer.php sql injection	Apr 30, 2026 1mo ago
CVE-2026-7410	medium	5.3/10	SourceCodester Pizzafy Ecommerce System ajax.php add_to_cart sql injection	Apr 29, 2026 1mo ago
CVE-2026-7409	medium	5.1/10	SourceCodester Pizzafy Ecommerce System ajax.php save_user sql injection	Apr 29, 2026 1mo ago
CVE-2026-7408	medium	5.1/10	SourceCodester Pizzafy Ecommerce System ajax.php save_menu sql injection	Apr 29, 2026 1mo ago
CVE-2026-7407	medium	5.1/10	SourceCodester Pizzafy Ecommerce System Setting ajax.php save_settings sql injection	Apr 29, 2026 1mo ago
CVE-2018-25300	high	8.8/10	XATABoost CMS 1.0.0 SQL Injection via news.php	Apr 29, 2026 1mo ago
CVE-2026-7401	medium	5.3/10	SourceCodester CET Automated Grading System with AI Predictive Analytics Registration index.php register cross site scripting	Apr 29, 2026 1mo ago
CVE-2026-7394	medium	5.1/10	SourceCodester Pizzafy Ecommerce System GET Parameter view_order.php sql injection	Apr 29, 2026 1mo ago
CVE-2026-7393	medium	5.1/10	SourceCodester Pizzafy Ecommerce System File Extension admin_class_novo.php save_menu unrestricted upload	Apr 29, 2026 1mo ago
CVE-2026-7392	medium	5.3/10	SourceCodester Pharmacy Sales and Inventory System ajax.php delete_supplier sql injection	Apr 29, 2026 1mo ago
CVE-2026-7391	medium	5.3/10	SourceCodester Pharmacy Sales and Inventory System ajax.php save_supplier sql injection	Apr 29, 2026 1mo ago
CVE-2026-7390	medium	5.1/10	SourceCodester Pharmacy Sales and Inventory System index.php customer cross site scripting	Apr 29, 2026 1mo ago
CVE-2026-7389	medium	6.9/10	EyouCMS common.php GetSortData sql injection	Apr 29, 2026 1mo ago
CVE-2026-7388	medium	5.1/10	EyouCMS Template File FilemanagerLogic.php editFile code injection	Apr 29, 2026 1mo ago
CVE-2026-7317	low	2.3/10	Grav CMS Cache Value FileCache.php doGet deserialization	Apr 28, 2026 2mo ago
CVE-2026-7297	medium	4.8/10	SourceCodester Pizzafy Ecommerce System ajax.php save_user cross site scripting	Apr 28, 2026 2mo ago
CVE-2026-7296	medium	4.8/10	SourceCodester Pizzafy Ecommerce System ajax.php save_order cross site scripting	Apr 28, 2026 2mo ago
CVE-2026-7295	medium	4.8/10	SourceCodester Pizzafy Ecommerce System ajax.php save_menu cross site scripting	Apr 28, 2026 2mo ago