Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,172

All time

Critical · Active

11,976

CVSS ≥ 9.0

New · 14 days

2,679

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 481–510 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-10226	medium	6.9/10	raisulislamg4 student_management_system_by_php delete.php sql injection	Jun 1, 2026 2mo ago
CVE-2026-10225	medium	6.9/10	raisulislamg4 student_management_system_by_php Login login_check.php sql injection	Jun 1, 2026 2mo ago
CVE-2026-10215	medium	5.3/10	Dolibarr ERP CRM Leave Request REST API api_holidays.class.php checkUserAccessToObject improper authorization	Jun 1, 2026 2mo ago
CVE-2026-10209	medium	5.3/10	code-projects Online Hospital Management System Appointment appointmentdetail.php sql injection	Jun 1, 2026 2mo ago
CVE-2026-10208	medium	6.9/10	code-projects Online Hospital Management System login_1.php login_user sql injection	Jun 1, 2026 2mo ago
CVE-2026-10186	medium	6.9/10	code-projects Online Hospital Management System patient.php sql injection	May 31, 2026 2mo ago
CVE-2026-10185	medium	6.9/10	SourceCodester Hospitals Patient Records Management System Users.php save sql injection	May 31, 2026 2mo ago
CVE-2026-10184	medium	6.9/10	SourceCodester Hospitals Patient Records Management System Users.php delete sql injection	May 31, 2026 2mo ago
CVE-2026-10178	medium	6.9/10	code-projects Online Music Site AdminEditAlbum.php sql injection	May 31, 2026 2mo ago
CVE-2026-10172	medium	5.3/10	Bdtask Multi-Store Inventory Management System Component Module.php upload unrestricted upload	May 31, 2026 2mo ago
CVE-2026-10171	medium	5.1/10	code-projects Online Music Site AdminUpdateAlbum.php sql injection	May 31, 2026 2mo ago
CVE-2026-10170	medium	5.3/10	code-projects Visitor Management System phone_0.php sql injection	May 31, 2026 2mo ago
CVE-2026-10169	medium	6.3/10	OUSL-GROUP-BrinaryBrains School Student Management System Forgot Password Endpoint Login.php ajax_forgot_password password recovery	May 31, 2026 2mo ago
CVE-2026-10168	medium	5.3/10	OUSL-GROUP-BrinaryBrains School Student Management System Parents.php marks resource injection	May 31, 2026 2mo ago
CVE-2026-10167	medium	6.9/10	OUSL-GROUP-BrinaryBrains School Student Management System MY_Controller Login.php sign_auth_cookie improper authentication	May 31, 2026 2mo ago
CVE-2026-10155	medium	5.1/10	Bdtask Multi-Store Inventory Management System Accounts Report Accounts.php accounts_report_search sql injection	May 30, 2026 2mo ago
CVE-2026-10154	medium	5.3/10	Dolibarr ERP CRM messaging.php authorization	May 30, 2026 2mo ago
CVE-2018-25424	high	8.8/10	Gate Pass Management System 2.1 SQL Injection via login-exec.php	May 30, 2026 2mo ago
CVE-2018-25422	high	8.8/10	MOGG web simulator Script All Version SQL Injection via play.php	May 30, 2026 2mo ago
CVE-2018-25420	high	8.8/10	AiOPMSD Final 1.0.0 SQL Injection via watch.php	May 30, 2026 2mo ago
CVE-2018-25419	high	8.8/10	AiOPMSD Final 1.0.0 SQL Injection via genre.php	May 30, 2026 2mo ago
CVE-2018-25418	high	8.8/10	AiOPMSD Final 1.0.0 SQL Injection via year.php	May 30, 2026 2mo ago
CVE-2018-25417	high	8.8/10	AiOPMSD Final 1.0.0 SQL Injection via quality.php	May 30, 2026 2mo ago
CVE-2018-25416	high	8.8/10	AiOPMSD Final 1.0.0 SQL Injection via country.php	May 30, 2026 2mo ago
CVE-2018-25414	high	8.8/10	AiOPMSD Final 1.0.0 SQL Injection via actor.php	May 30, 2026 2mo ago
CVE-2018-25413	high	8.8/10	AiOPMSD Final 1.0.0 SQL Injection via search.php	May 30, 2026 2mo ago
CVE-2018-25412	critical	9.3/10	Delta Sql 1.8.2 Arbitrary File Upload via docs_upload.php	May 30, 2026 2mo ago
CVE-2018-25411	high	8.8/10	MGB OpenSource Guestbook 0.7.0.2 SQL Injection via email.php	May 30, 2026 2mo ago
CVE-2018-25410	high	7.1/10	SIM-PKH 2.4.1 SQL Injection via media.php id Parameter	May 30, 2026 2mo ago
CVE-2018-25409	high	8.7/10	SIM-PKH 2.4.1 Arbitrary File Upload via aksi_pengurus.php	May 30, 2026 2mo ago