Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,738

All time

Critical · Active

12,169

CVSS ≥ 9.0

New · 14 days

3,054

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 5041–5070 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-23030	medium	6.4/10	Cross-Site Scripting (XSS) Reflected endpoint 'cadastro_funcionario.php' parameter 'cpf' in WeGIA	Jan 13, 2025 1y ago
CVE-2025-23031	medium	6.4/10	Cross-Site Scripting (XSS) Stored endpoint 'adicionar_alergia.php' parameter 'nome' in WeGIA	Jan 13, 2025 1y ago
CVE-2025-23032	medium	6.4/10	Cross-Site Scripting (XSS) Stored endpoint 'adicionar_escala.php' parameter 'escala' in WeGIA	Jan 13, 2025 1y ago
CVE-2025-23033	medium	6.4/10	Cross-Site Scripting (XSS) Stored endpoint 'adicionar_situacao.php' parameter 'situacao' in WeGIA	Jan 13, 2025 1y ago
CVE-2025-23034	medium	6.4/10	Cross-Site Scripting (XSS) Reflected endpoint 'tags.php' parameter 'msg_e' in WeGIA	Jan 13, 2025 1y ago
CVE-2025-23035	medium	6.4/10	Cross-Site Scripting (XSS) Stored endpoint 'adicionar_tipo_quadro_horario.php' parameter 'tipo' in WeGIA	Jan 13, 2025 1y ago
CVE-2025-23036	medium	6.4/10	Cross-Site Scripting (XSS) Reflected endpoint 'pre_cadastro_funcionario.php' parameter 'msg_e' in WeGIA	Jan 13, 2025 1y ago
CVE-2025-23037	medium	6.4/10	Cross-Site Scripting (XSS) Stored endpoint 'control.php' parameter 'cargo' in WeGIA	Jan 13, 2025 1y ago
CVE-2025-22613	medium	6.4/10	WeGIA Cross-Site Scripting (XSS) Stored endpoint 'informacao_adicional.php' parameter 'descricao'	Jan 13, 2025 1y ago
CVE-2025-22614	medium	6.4/10	WeGIA Cross-Site Scripting (XSS) Stored endpoint 'dependente_editarInfoPessoal.php ' parameters 'nome' 'SobrenomeForm'	Jan 13, 2025 1y ago
CVE-2025-22615	medium	6.4/10	WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'Cadastro_Atendido.php' parameter 'cpf'	Jan 13, 2025 1y ago
CVE-2025-22616	medium	6.4/10	WeGIA Cross-Site Scripting (XSS) Stored endpoint 'dependente_parentesco_adicionar.php' parameter 'descricao'	Jan 13, 2025 1y ago
CVE-2025-22617	medium	6.4/10	WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'editar_socio.php' parameter 'socio'	Jan 13, 2025 1y ago
CVE-2025-22618	medium	6.4/10	WeGIA Cross-Site Scripting (XSS) Stored endpoint 'adicionar_cargo.php' parameter 'cargo'	Jan 13, 2025 1y ago
CVE-2025-22619	medium	6.4/10	WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'editar_permissoes.php' parameter 'msg_c'	Jan 13, 2025 1y ago
CVE-2025-22777	critical	9.8/10	WordPress GiveWP Plugin <= 3.19.3 - PHP Object Injection vulnerability	Jan 13, 2025 1y ago
CVE-2024-12877	critical	9.8/10	GiveWP – Donation Plugin and Fundraising Platform <= 3.19.2 - Unauthenticated PHP Object Injection	Jan 11, 2025 1y ago
CVE-2024-12627	high	7.5/10	Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups <= 1.3.5 - Missing Authorization to Authenticated (Contributor+) PHP Object Injection	Jan 11, 2025 1y ago
CVE-2025-22600	medium	6.4/10	WeGIA has a Cross-Site Scripting (XSS) Reflected endpoint `configuracao_doacao.php` parameter `avulso`	Jan 10, 2025 1y ago
CVE-2025-22599	medium	6.4/10	WeGIA has a Cross-Site Scripting (XSS) Reflected endpoint `home.php` parameter `msg_c`	Jan 10, 2025 1y ago
CVE-2025-22598	high	8.3/10	WeGIA has a Cross-Site Scripting (XSS) Stored endpoint 'cadastrarSocio.php' parameter 'nome'	Jan 10, 2025 1y ago
CVE-2025-22597	high	8.3/10	WeGIA has a Cross-Site Scripting (XSS) Stored endpoint 'CobrancaController.php' parameter 'local_recepcao'	Jan 10, 2025 1y ago
CVE-2025-22596	medium	6.4/10	WeGIA has a Cross-Site Scripting (XSS) Reflected endpoint 'modulos_visiveis.php' parameter'msg_c'	Jan 10, 2025 1y ago
CVE-2024-13297	—	—	Eloqua - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-063	Jan 9, 2025 1y ago
CVE-2024-13296	—	—	Mailjet - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-062	Jan 9, 2025 1y ago
CVE-2024-13295	—	—	Node export - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-061	Jan 9, 2025 1y ago
CVE-2024-13294	—	—	POST File - Critical - Cross Site Scripting, Arbitrary PHP code execution - SA-CONTRIB-2024-060	Jan 9, 2025 1y ago
CVE-2024-13288	—	—	Monster Menus - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-052	Jan 9, 2025 1y ago
CVE-2024-13268	—	—	Opigno - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-032	Jan 9, 2025 1y ago
CVE-2024-13267	—	—	Opigno TinCan Question Type - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-031	Jan 9, 2025 1y ago