Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,738

All time

Critical · Active

12,169

CVSS ≥ 9.0

New · 14 days

3,057

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 4771–4800 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-2383	medium	6.9/10	PHPGurukul Doctor Appointment Management System search.php sql injection	Mar 17, 2025 1y ago
CVE-2025-2382	medium	6.9/10	PHPGurukul Online Banquet Booking System booking-search.php sql injection	Mar 17, 2025 1y ago
CVE-2025-2381	medium	6.9/10	PHPGurukul Curfew e-Pass Management System search-pass.php sql injection	Mar 17, 2025 1y ago
CVE-2025-2380	medium	6.9/10	PHPGurukul Apartment Visitors Management System admin-profile.php sql injection	Mar 17, 2025 1y ago
CVE-2025-2379	medium	6.9/10	PHPGurukul Apartment Visitors Management System create-pass.php sql injection	Mar 17, 2025 1y ago
CVE-2025-2378	medium	6.9/10	PHPGurukul Medical Card Generation System download-medical-cards.php sql injection	Mar 17, 2025 1y ago
CVE-2025-2377	medium	5.1/10	SourceCodester Vehicle Management System confirmbooking.php cross site scripting	Mar 17, 2025 1y ago
CVE-2025-2376	medium	6.9/10	viames Pair Framework PHP Object UserRemember.php getCookieContent deserialization	Mar 17, 2025 1y ago
CVE-2025-2375	medium	5.1/10	PHPGurukul Human Metapneumovirus Testing Management System Admin Profile Page profile.php cross site scripting	Mar 17, 2025 1y ago
CVE-2025-2374	medium	5.3/10	PHPGurukul Human Metapneumovirus Testing Management System profile.php sql injection	Mar 17, 2025 1y ago
CVE-2025-2373	medium	5.3/10	PHPGurukul Human Metapneumovirus Testing Management System check_availability.php sql injection	Mar 17, 2025 1y ago
CVE-2025-2202	medium	6.9/10	Broken access control vulnerability in the Innovación y Cualificación local administration plugin ajax.php	Mar 17, 2025 1y ago
CVE-2025-2199	critical	9.3/10	SQL injection vulnerability in the Innovación y Cualificación local administration plugin ajax.php	Mar 17, 2025 1y ago
CVE-2025-2372	medium	6.9/10	PHPGurukul Human Metapneumovirus Testing Management System Password Recovery Page password-recovery.php sql injection	Mar 17, 2025 1y ago
CVE-2025-2371	medium	5.1/10	PHPGurukul Human Metapneumovirus Testing Management System Registered Mobile Number Search registered-user-testing.php cross site scripting	Mar 17, 2025 1y ago
CVE-2025-2362	medium	6.9/10	PHPGurukul Pre-School Enrollment System contact-us.php sql injection	Mar 17, 2025 1y ago
CVE-2025-2354	medium	5.3/10	VAM Virtual Airlines Manager index.php cross site scripting	Mar 17, 2025 1y ago
CVE-2025-2353	medium	6.9/10	VAM Virtual Airlines Manager HTTP GET Parameter index.php sql injection	Mar 16, 2025 1y ago
CVE-2025-26921	high	8.8/10	WordPress Booking and Rental Manager Plugin <= 2.2.6 - PHP Object Injection vulnerability	Mar 15, 2025 1y ago
CVE-2025-1657	high	8.8/10	Directory Listings WordPress plugin – uListing <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update and PHP Object Injection	Mar 15, 2025 1y ago
CVE-2025-29782	medium	6.4/10	WeGIA Cross-Site Scripting (XSS) Stored in endpoint `adicionar_tipo_docs_atendido.php` parameter `tipo`	Mar 14, 2025 1y ago
CVE-2024-13824	critical	9.8/10	CiyaShop - Multipurpose WooCommerce Theme <= 4.19.0 - Unauthenticated PHP Object Injection	Mar 14, 2025 1y ago
CVE-2024-10942	high	7.5/10	All in One WP Migration <= 7.89 - Unauthenticated PHP Object Injection	Mar 13, 2025 1y ago
CVE-2025-2220	medium	4.8/10	Odyssey CMS reCAPTCHA odyssey_contact_form.php key management	Mar 12, 2025 1y ago
CVE-2025-2214	medium	5.1/10	Microweber Settings index.php cross site scripting	Mar 11, 2025 1y ago
CVE-2025-27773	high	8.6/10	SimpleSAMLphp SAML2 library has incorrect signature verification for HTTP-Redirect binding	Mar 11, 2025 1y ago
CVE-2025-2123	medium	5.1/10	GeSHi CSS cssgen.php get_var cross site scripting	Mar 9, 2025 1y ago
CVE-2025-2118	medium	6.9/10	Quantico Tecnologia PRMV Login Endpoint login.php sql injection	Mar 9, 2025 1y ago
CVE-2024-13890	high	7.2/10	Allow PHP Execute <= 1.0 - Authenticated (Editor+) PHP Code Injection	Mar 8, 2025 1y ago
CVE-2025-2093	low	2.3/10	PHPGurukul Online Library Management System change-password.php password recovery	Mar 7, 2025 1y ago