Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,738

All time

Critical · Active

12,169

CVSS ≥ 9.0

New · 14 days

3,056

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 4891–4920 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-26610	critical	9.4/10	SQL Injection endpoint 'restaurar_produto_desocultar.php' parameter 'id_produto' in WeGIA	Feb 18, 2025 1y ago
CVE-2025-26611	critical	10.0/10	SQL Injection endpoint 'remover_produto.php' parameter 'id_produto' in WeGIA	Feb 18, 2025 1y ago
CVE-2025-26612	critical	10.0/10	SQL Injection endpoint 'adicionar_almoxarife.php' parameter 'id_almoxarifado', 'id_funcionario' in WeGIA	Feb 18, 2025 1y ago
CVE-2025-26613	critical	10.0/10	OS Command Injection endpoint 'gerenciar_backup.php' parameter 'file' (RCE) in WeGIA	Feb 18, 2025 1y ago
CVE-2025-26614	critical	9.4/10	SQL Injection endpoint 'deletar_documento.php' parameter 'id_cargo' in WeGIA	Feb 18, 2025 1y ago
CVE-2025-26615	critical	10.0/10	Path Traversal endpoint 'examples.php' parameter 'src' in WeGIA	Feb 18, 2025 1y ago
CVE-2025-26616	critical	10.0/10	Path Traversal endpoint 'exportar_dump.php' parameter 'file' in WeGIA	Feb 18, 2025 1y ago
CVE-2025-26617	critical	10.0/10	SQL Injection endpoint 'historico_paciente.php' parameter 'id_fichamedica' in WeGIA	Feb 18, 2025 1y ago
CVE-2024-13783	medium	4.3/10	FormCraft <= 3.9.11 - Missing Authorization to Plugin Data Export in formcraft-main.php	Feb 18, 2025 1y ago
CVE-2025-1023	critical	9.3/10	SQL Injection in ChurchCRM newCountName Parameter via EditEventTypes.php	Feb 18, 2025 1y ago
CVE-2025-0981	high	8.4/10	Session Hijacking via Stored Cross-Site Scripting (XSS) in ChurchCRM GroupEditor.php Description Field	Feb 18, 2025 1y ago
CVE-2024-13556	high	8.1/10	Affiliate Links: WordPress Plugin for Link Cloaking and Link Management <= 3.0.1 - Missing Authorization to Unauthenticated Import/Export and PHP Object Injection	Feb 18, 2025 1y ago
CVE-2024-13609	medium	5.9/10	1 Click WordPress Migration Plugin – 100% FREE for a limited time <= 2.2 - Unauthenticated Sensitive Information Exposure via Database Backup in class-ocm-backup.php	Feb 18, 2025 1y ago
CVE-2025-1381	medium	5.3/10	code-projects Real Estate Property Management System ajax_city.php sql injection	Feb 17, 2025 1y ago
CVE-2025-1380	medium	5.3/10	Codezips Gym Management System del_plan.php sql injection	Feb 17, 2025 1y ago
CVE-2025-1379	medium	5.3/10	code-projects Real Estate Property Management System CustomerReport.php sql injection	Feb 17, 2025 1y ago
CVE-2025-1374	medium	5.3/10	code-projects Real Estate Property Management System search.php sql injection	Feb 17, 2025 1y ago
CVE-2025-1360	medium	5.1/10	Internet Web Solutions Sublime CRM HTTP POST Request inicio.php cross site scripting	Feb 16, 2025 1y ago
CVE-2025-1356	medium	5.3/10	needyamin Library Card System card.php sql injection	Feb 16, 2025 1y ago
CVE-2025-1355	medium	6.9/10	needyamin Library Card System Add Picture signup.php unrestricted upload	Feb 16, 2025 1y ago
CVE-2025-1338	medium	6.9/10	NUUO Camera handle_config.php print_file command injection	Feb 16, 2025 1y ago
CVE-2025-1336	medium	5.3/10	CmsEasy image_admin.php deleteimg_action path traversal	Feb 16, 2025 1y ago
CVE-2025-1335	medium	5.3/10	CmsEasy file_admin.php deleteimg_action path traversal	Feb 16, 2025 1y ago
CVE-2024-12562	critical	9.8/10	s2Member Pro <= 241216 - Unauthenticated PHP Object Injection	Feb 15, 2025 1y ago
CVE-2025-26572	high	7.1/10	WordPress WP PHPList Plugin <= 1.7 - CSRF to Stored XSS vulnerability	Feb 13, 2025 1y ago
CVE-2024-13770	high	8.1/10	Puzzles \| WP Magazine / Review with Store WordPress Theme + RTL <= 4.2.4 - Unauthenticated PHP Object Injection	Feb 13, 2025 1y ago
CVE-2025-1214	medium	5.3/10	pihome-shc PiHome Role-Based Access Control user_accounts.php authorization	Feb 12, 2025 1y ago
CVE-2025-1213	medium	5.1/10	pihome-shc PiHome index.php cross site scripting	Feb 12, 2025 1y ago
CVE-2025-1210	medium	5.3/10	code-projects Wazifa System control.php sql injection	Feb 12, 2025 1y ago
CVE-2025-1209	medium	5.1/10	code-projects Wazifa System search_resualts.php searchuser cross site scripting	Feb 12, 2025 1y ago