Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,738

All time

Critical · Active

12,169

CVSS ≥ 9.0

New · 14 days

3,056

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 4861–4890 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-1581	medium	5.3/10	PHPGurukul Online Nurse Hiring System book-nurse.php sql injection	Feb 23, 2025 1y ago
CVE-2025-1580	medium	5.3/10	PHPGurukul Nipah Virus Testing Management System search-report-result.php sql injection	Feb 23, 2025 1y ago
CVE-2025-1579	medium	4.8/10	code-projects Blood Bank System user.php cross site scripting	Feb 23, 2025 1y ago
CVE-2025-1578	medium	5.3/10	PHPGurukul/Campcodes Online Shopping Portal search-result.php sql injection	Feb 23, 2025 1y ago
CVE-2025-1577	medium	5.1/10	code-projects Blood Bank System prostatus.php cross site scripting	Feb 23, 2025 1y ago
CVE-2025-1576	medium	5.3/10	code-projects Real Estate Property Management System ajax_state.php sql injection	Feb 23, 2025 1y ago
CVE-2025-1575	medium	5.3/10	Harpia DiagSystem atualatendimento_jpeg.php resource injection	Feb 23, 2025 1y ago
CVE-2025-26763	critical	9.8/10	WordPress Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider Plugin <= 3.94.0 - PHP Object Injection vulnerability	Feb 22, 2025 1y ago
CVE-2024-13899	high	7.2/10	Mambo Importer <= 1.0 - Authenticated (Administrator+) PHP Object Injection	Feb 22, 2025 1y ago
CVE-2025-1544	medium	5.3/10	dingfanzu CMS loadShopInfo.php sql injection	Feb 21, 2025 1y ago
CVE-2025-1537	medium	5.3/10	Harpia DiagSystem atualatendimento_jpeg.php sql injection	Feb 21, 2025 1y ago
CVE-2025-1536	medium	6.9/10	Raisecom Multi-Service Intelligent Gateway Request Parameter vpn_template_style.php os command injection	Feb 21, 2025 1y ago
CVE-2025-1535	medium	6.9/10	Baiyi Cloud Asset Management System admin.ticket.close.php sql injection	Feb 21, 2025 1y ago
CVE-2024-13900	medium	4.1/10	Head, Footer and Post Injections <= 3.3.0 - Authenticated (Administrator+) PHP Code Injection in Multisite Environments	Feb 21, 2025 1y ago
CVE-2025-27096	critical	9.4/10	SQL Injection endpoint 'html/personalizacao_upload.php' parameter 'id_campo' in WeGIA	Feb 20, 2025 1y ago
CVE-2024-13789	critical	9.8/10	Ravpage <= 2.31 - PHP Object Injection	Feb 20, 2025 1y ago
CVE-2025-1465	low	2.1/10	lmxcms Maintenance db.inc.php code injection	Feb 19, 2025 1y ago
CVE-2025-1464	medium	6.9/10	Baiyi Cloud Asset Management System admin.house.collect.php sql injection	Feb 19, 2025 1y ago
CVE-2025-1135	critical	9.3/10	SQL Injection in ChurchCRM CurrentFundraiser Parameter via BatchWinnerEntry.php	Feb 19, 2025 1y ago
CVE-2025-1134	critical	9.3/10	SQL Injection in ChurchCRM CurrentFundraiser Parameter via DonatedItemEditor.php	Feb 19, 2025 1y ago
CVE-2025-1133	critical	9.3/10	SQL Injection in ChurchCRM EID Parameter via EditEventAttendees.php	Feb 19, 2025 1y ago
CVE-2025-1132	critical	9.3/10	SQL Injection in ChurchCRM EN_tyid Parameter via EditEventAttendees.php	Feb 19, 2025 1y ago
CVE-2025-1024	high	8.4/10	Session Hijacking via Reflected Cross-Site Scripting (XSS) in ChurchCRM EditEventAttendees.php EID Parameter	Feb 19, 2025 1y ago
CVE-2025-1448	medium	6.9/10	Synway SMG Gateway Management Software 9-12ping.php command injection	Feb 19, 2025 1y ago
CVE-2025-1447	medium	5.3/10	kasuganosoras Pigeon index.php server-side request forgery	Feb 19, 2025 1y ago
CVE-2025-26605	critical	9.4/10	SQL Injection endpoint 'deletar_cargo.php' parameter 'id_cargo' in WeGIA	Feb 18, 2025 1y ago
CVE-2025-26606	critical	10.0/10	SQL Injection endpoint 'informacao_adicional.php' parameter 'id_descricao' in WeGIA	Feb 18, 2025 1y ago
CVE-2025-26607	critical	10.0/10	SQL Injection endpoint 'documento_excluir.php' parameter 'id_funcionario' in WeGIA	Feb 18, 2025 1y ago
CVE-2025-26608	critical	10.0/10	SQL Injection endpoint 'dependente_docdependente.php' parameter 'id_dependente', 'id_doc' in WeGIA	Feb 18, 2025 1y ago
CVE-2025-26609	critical	10.0/10	SQL Injection endpoint 'familiar_docfamiliar.php' parameter 'id_dependente', 'id_doc' in WeGIA	Feb 18, 2025 1y ago