Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

699

Newly disclosed

Feed last synced

23 hrs ago

Data freshness

Showing 481–510 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-7294	medium	4.8/10	SourceCodester Pizzafy Ecommerce System index.php save_settings cross site scripting	Apr 28, 2026 2mo ago
CVE-2026-7293	medium	5.1/10	SourceCodester Pizzafy Ecommerce System ajax.php delete_category sql injection	Apr 28, 2026 2mo ago
CVE-2026-7283	medium	5.1/10	SourceCodester Pharmacy Sales and Inventory System ajax.php save_expired sql injection	Apr 28, 2026 2mo ago
CVE-2026-27760	critical	9.2/10	OpenCATS PHP Code Injection via installer AJAX endpoint	Apr 28, 2026 2mo ago
CVE-2026-7282	medium	5.1/10	SourceCodester Pharmacy Sales and Inventory System ajax.php delete_expired sql injection	Apr 28, 2026 2mo ago
CVE-2026-7281	medium	4.8/10	SourceCodester Pharmacy Sales and Inventory System index.php supplier cross site scripting	Apr 28, 2026 2mo ago
CVE-2026-7269	medium	4.8/10	SourceCodester Pharmacy Sales and Inventory System index.php cross site scripting	Apr 28, 2026 2mo ago
CVE-2026-7268	medium	5.3/10	SourceCodester Pizzafy Ecommerce System ajax.php save_category sql injection	Apr 28, 2026 2mo ago
CVE-2026-7267	medium	5.3/10	SourceCodester Pizzafy Ecommerce System view_prod.php sql injection	Apr 28, 2026 2mo ago
CVE-2026-7266	medium	5.3/10	SourceCodester Pizzafy Ecommerce System ajax.php save_order sql injection	Apr 28, 2026 2mo ago
CVE-2026-7265	medium	5.3/10	SourceCodester Pizzafy Ecommerce System index.php category sql injection	Apr 28, 2026 2mo ago
CVE-2026-7264	medium	5.3/10	SourceCodester Pizzafy Ecommerce System ajax.php get_cart_items sql injection	Apr 28, 2026 2mo ago
CVE-2026-7238	medium	5.1/10	code-projects Online Music Site AdminUpdateAlbum.php unrestricted upload	Apr 28, 2026 2mo ago
CVE-2026-7229	medium	5.3/10	code-projects Coaching Management System POST reply.php sql injection	Apr 28, 2026 2mo ago
CVE-2026-7228	medium	6.9/10	SourceCodester Pizzafy Ecommerce System ajax.php get_cart_count sql injection	Apr 28, 2026 2mo ago
CVE-2026-7227	medium	6.9/10	SourceCodester Pizzafy Ecommerce System ajax.php login sql injection	Apr 28, 2026 2mo ago
CVE-2026-7226	medium	6.9/10	SourceCodester Pizzafy Ecommerce System ajax.php login2 sql injection	Apr 28, 2026 2mo ago
CVE-2026-7225	medium	6.9/10	SourceCodester Pizzafy Ecommerce System ajax.php delete_menu sql injection	Apr 28, 2026 2mo ago
CVE-2026-7224	medium	6.9/10	SourceCodester Pizzafy Ecommerce System ajax.php delete_cart sql injection	Apr 28, 2026 2mo ago
CVE-2026-7222	medium	5.1/10	code-projects Coaching Management System Complaint Form complaint.php cross site scripting	Apr 28, 2026 2mo ago
CVE-2026-7200	medium	5.3/10	SourceCodester Pharmacy Sales and Inventory System index.php cross site scripting	Apr 27, 2026 2mo ago
CVE-2026-7199	medium	6.9/10	SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection	Apr 27, 2026 2mo ago
CVE-2026-7194	medium	6.9/10	SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection	Apr 27, 2026 2mo ago
CVE-2026-7145	medium	5.3/10	mettle sendportal Invitation WorkspaceInvitationsController.php destroy authorization	Apr 27, 2026 2mo ago
CVE-2026-7144	medium	5.3/10	1000 Projects Portfolio Management System MCA update_passwd_process.php authorization	Apr 27, 2026 2mo ago
CVE-2026-7143	medium	5.3/10	1000 Projects Portfolio Management System MCA block_status.php sql injection	Apr 27, 2026 2mo ago
CVE-2026-41465	high	7.1/10	ProjeQtor < 12.4.4 Path Traversal via dynamicDialog.php	Apr 27, 2026 2mo ago
CVE-2026-41464	high	7.1/10	ProjeQtor < 12.4.4 Missing Authorization via objectDetail.php	Apr 27, 2026 2mo ago
CVE-2026-41463	high	8.7/10	ProjeQtor < 12.4.4 ZipSlip Path Traversal via uploadPlugin.php	Apr 27, 2026 2mo ago
CVE-2026-7134	medium	5.1/10	code-projects Online Lot Reservation System edithousepic.php unrestricted upload	Apr 27, 2026 2mo ago