Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,738

All time

Critical · Active

12,169

CVSS ≥ 9.0

New · 14 days

3,056

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 4831–4860 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-2033	medium	5.3/10	code-projects Blood Bank Management System view_donor.php sql injection	Mar 6, 2025 1y ago
CVE-2024-13787	critical	9.8/10	VEDA - MultiPurpose WordPress Theme <= 4.2 - Authenticated (Subscriber+) PHP Object Injection	Mar 5, 2025 1y ago
CVE-2024-13777	high	8.1/10	ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated PHP Object Injection	Mar 5, 2025 1y ago
CVE-2025-0956	high	8.1/10	WooCommerce Recover Abandoned Cart <= 24.4.0 - Unauthenticated PHP Object Injection	Mar 5, 2025 1y ago
CVE-2025-0912	critical	9.8/10	GiveWP – Donation Plugin and Fundraising Platform <= 3.19.4 - Unauthenticated PHP Object Injection	Mar 4, 2025 1y ago
CVE-2025-26967	high	8.8/10	WordPress Events Calendar for GeoDirectory plugin <= 2.3.14 - PHP Object Injection vulnerability	Mar 3, 2025 1y ago
CVE-2025-26885	high	7.2/10	WordPress Assistant Plugin <= 1.5.1 - PHP Object Injection vulnerability	Mar 3, 2025 1y ago
CVE-2025-26999	high	8.8/10	WordPress ProfileGrid Plugin <= 5.9.4.3 - PHP Object Injection vulnerability	Mar 3, 2025 1y ago
CVE-2024-13833	high	7.2/10	Album Gallery – WordPress Gallery <= 1.6.3 - Authenticated (Editor+) PHP Object Injection via Gallery Meta	Mar 1, 2025 1y ago
CVE-2024-13831	high	7.2/10	Tabs for WooCommerce <= 1.0.0 - Authentiated (Shop Manager+) PHP Object Injection in product_has_custom_tabs	Feb 28, 2025 1y ago
CVE-2025-21626	medium	5.8/10	GLPI vulnerable to exposure of sensitive information in the `status.php` endpoint	Feb 25, 2025 1y ago
CVE-2024-11955	medium	5.3/10	GLPI index.php redirect	Feb 25, 2025 1y ago
CVE-2025-26900	critical	9.8/10	WordPress Flexmls® IDX Plugin Plugin <= 3.14.27 - PHP Object Injection vulnerability	Feb 25, 2025 1y ago
CVE-2024-13693	medium	5.3/10	Enfold <= 6.0.9 - Missing Authorization to Sensitive Information Disclosure in avia-export-class.php	Feb 25, 2025 1y ago
CVE-2025-1618	medium	5.3/10	vTiger CRM index.php cross site scripting	Feb 24, 2025 1y ago
CVE-2025-1611	medium	5.1/10	ShopXO Template ThemeAdminService.php injection	Feb 24, 2025 1y ago
CVE-2025-1607	medium	5.3/10	SourceCodester Best Employee Management System salary_slip.php authorization	Feb 24, 2025 1y ago
CVE-2025-1606	medium	5.3/10	SourceCodester Best Employee Management System backups.php information disclosure	Feb 24, 2025 1y ago
CVE-2025-1599	medium	5.3/10	SourceCodester Best Church Management Software profile_crud.php path traversal	Feb 24, 2025 1y ago
CVE-2025-1598	medium	5.3/10	SourceCodester Best Church Management Software asset_crud.php unrestricted upload	Feb 23, 2025 1y ago
CVE-2025-1597	medium	5.1/10	SourceCodester Best Church Management Software redirect.php cross site scripting	Feb 23, 2025 1y ago
CVE-2025-1596	medium	6.9/10	SourceCodester Best Church Management Software fpassword.php sql injection	Feb 23, 2025 1y ago
CVE-2025-1592	medium	4.8/10	SourceCodester Best Employee Management System Add Role Page Role.php cross site scripting	Feb 23, 2025 1y ago
CVE-2025-1591	medium	4.8/10	SourceCodester Employee Management System Department Page department.php cross site scripting	Feb 23, 2025 1y ago
CVE-2025-1590	medium	5.1/10	SourceCodester E-Learning System List of Lessons Page index.php unrestricted upload	Feb 23, 2025 1y ago
CVE-2025-1589	medium	5.3/10	SourceCodester E-Learning System User Registration register.php cross site scripting	Feb 23, 2025 1y ago
CVE-2025-1588	medium	6.9/10	PHPGurukul Online Nurse Hiring System manage-nurse.php path traversal	Feb 23, 2025 1y ago
CVE-2025-1586	medium	5.1/10	code-projects Blood Bank System A-.php cross site scripting	Feb 23, 2025 1y ago
CVE-2025-1583	medium	5.3/10	PHPGurukul Online Nurse Hiring System search-report-details.php sql injection	Feb 23, 2025 1y ago
CVE-2025-1582	medium	5.3/10	PHPGurukul Online Nurse Hiring System all-request.php sql injection	Feb 23, 2025 1y ago