Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,738

All time

Critical · Active

12,169

CVSS ≥ 9.0

New · 14 days

3,056

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 4921–4950 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-1208	medium	5.1/10	code-projects Wazifa System Profile.php cross site scripting	Feb 12, 2025 1y ago
CVE-2025-1206	medium	5.3/10	Codezips Gym Management System viewdetailroutine.php sql injection	Feb 12, 2025 1y ago
CVE-2025-1202	medium	5.3/10	SourceCodester Best Church Management Software edit_slider.php sql injection	Feb 12, 2025 1y ago
CVE-2025-1201	medium	5.3/10	SourceCodester Best Church Management Software profile_crud.php sql injection	Feb 12, 2025 1y ago
CVE-2025-1200	medium	5.3/10	SourceCodester Best Church Management Software slider_crud.php sql injection	Feb 12, 2025 1y ago
CVE-2025-1199	medium	5.3/10	SourceCodester Best Church Management Software role_crud.php sql injection	Feb 12, 2025 1y ago
CVE-2025-1197	medium	5.3/10	code-projects Real Estate Property Management System load_user-profile.php sql injection	Feb 12, 2025 1y ago
CVE-2025-1196	medium	5.1/10	code-projects Real Estate Property Management System search.php cross site scripting	Feb 12, 2025 1y ago
CVE-2025-1192	medium	5.3/10	SourceCodester Multi Restaurant Table Reservation System select-menu.php sql injection	Feb 12, 2025 1y ago
CVE-2025-1191	medium	5.3/10	SourceCodester Multi Restaurant Table Reservation System approve-reject.php sql injection	Feb 12, 2025 1y ago
CVE-2025-1190	medium	5.1/10	code-projects Job Recruitment load_user-profile.php cross site scripting	Feb 12, 2025 1y ago
CVE-2025-1189	medium	5.3/10	1000 Projects Attendance Tracking Management System chart1.php sql injection	Feb 12, 2025 1y ago
CVE-2025-1188	medium	5.3/10	Codezips Gym Management System updateroutine.php sql injection	Feb 12, 2025 1y ago
CVE-2025-1186	medium	5.3/10	dayrui XunRuiCMS Api.php deserialization	Feb 12, 2025 1y ago
CVE-2025-1185	medium	5.3/10	pihome-shc PiHome ajax.php sql injection	Feb 12, 2025 1y ago
CVE-2025-1184	medium	5.3/10	pihome-shc PiHome ajax.php sql injection	Feb 12, 2025 1y ago
CVE-2025-1183	medium	5.3/10	CodeZips Gym Management System more-userprofile.php sql injection	Feb 12, 2025 1y ago
CVE-2025-1177	medium	5.3/10	dayrui XunRuiCMS Linkage.php import_add deserialization	Feb 11, 2025 1y ago
CVE-2025-1174	medium	4.8/10	1000 Projects Bookstore Management System Add Book Page process_book_add.php cross site scripting	Feb 11, 2025 1y ago
CVE-2025-1173	medium	5.1/10	1000 Projects Bookstore Management System process_users_del.php sql injection	Feb 11, 2025 1y ago
CVE-2025-1172	medium	5.3/10	1000 Projects Bookstore Management System addtocart.php sql injection	Feb 11, 2025 1y ago
CVE-2025-1171	medium	5.1/10	code-projects Real Estate Property Management System CustomerReport.php cross site scripting	Feb 11, 2025 1y ago
CVE-2025-1170	medium	5.1/10	code-projects Real Estate Property Management System Category.php cross site scripting	Feb 11, 2025 1y ago
CVE-2025-1169	medium	5.1/10	SourceCodester Image Compressor Tool compressor.php cross site scripting	Feb 11, 2025 1y ago
CVE-2025-1168	medium	5.3/10	SourceCodester Contact Manager with Export to VCF delete-contact.php sql injection	Feb 11, 2025 1y ago
CVE-2025-1167	medium	5.3/10	Mayuri K Employee Management System Update_User.php sql injection	Feb 11, 2025 1y ago
CVE-2025-1166	medium	5.3/10	SourceCodester Food Menu Manager update.php unrestricted upload	Feb 11, 2025 1y ago
CVE-2025-1162	medium	5.3/10	code-projects Job Recruitment load\_user-profile.php sql injection	Feb 10, 2025 1y ago
CVE-2025-1160	medium	6.9/10	SourceCodester Employee Management System index.php default credentials	Feb 10, 2025 1y ago
CVE-2025-1157	medium	5.3/10	Allims lab.online model_recuperar_senha.php sql injection	Feb 10, 2025 1y ago