Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,738

All time

Critical · Active

12,169

CVSS ≥ 9.0

New · 14 days

3,054

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 5071–5100 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-13265	—	—	Opigno Learning path - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-029	Jan 9, 2025 1y ago
CVE-2024-13264	—	—	Opigno module - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-028	Jan 9, 2025 1y ago
CVE-2024-13263	—	—	Opigno group manager - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-027	Jan 9, 2025 1y ago
CVE-2025-22510	high	7.2/10	WordPress WC Price History for Omnibus plugin <= 2.1.4 - PHP Object Injection vulnerability	Jan 9, 2025 1y ago
CVE-2024-11642	critical	9.8/10	Post Grid Master <= 3.4.12 - Missing Authorization to Unauthenticated Local PHP File Inclusion	Jan 9, 2025 1y ago
CVE-2025-0348	medium	5.3/10	CampCodes DepEd Equipment Inventory System add_employee.php cross site scripting	Jan 9, 2025 1y ago
CVE-2025-0347	medium	6.9/10	code-projects Admission Management System Login index.php sql injection	Jan 9, 2025 1y ago
CVE-2025-0346	medium	5.1/10	code-projects Content Management System Publish News Page publishnews.php unrestricted upload	Jan 9, 2025 1y ago
CVE-2025-0340	medium	6.9/10	code-projects Cinema Seat Reservation System deleteBooking.php sql injection	Jan 9, 2025 1y ago
CVE-2025-0339	medium	5.3/10	code-projects Online Bike Rental HTTP GET Request vehical-details.php cross site scripting	Jan 9, 2025 1y ago
CVE-2025-0336	medium	5.3/10	Codezips Project Management System teacher.php sql injection	Jan 9, 2025 1y ago
CVE-2025-0331	medium	6.9/10	YunzMall HTTP POST Request ResetpwdController.php changePwd password recovery	Jan 9, 2025 1y ago
CVE-2025-0328	medium	6.9/10	KaiYuanTong ECT Platform HTTP POST Request runCode.php command injection	Jan 9, 2025 1y ago
CVE-2024-13209	medium	5.1/10	Redaxo CMS Structure Management Page index.php cross site scripting	Jan 9, 2025 1y ago
CVE-2024-13205	medium	5.1/10	kurniaramadhan E-Commerce-PHP Create Product Page create_product.php cross site scripting	Jan 9, 2025 1y ago
CVE-2024-13204	medium	5.3/10	kurniaramadhan E-Commerce-PHP blog-details.php sql injection	Jan 9, 2025 1y ago
CVE-2024-13203	medium	6.9/10	kurniaramadhan E-Commerce-PHP cross-site request forgery	Jan 9, 2025 1y ago
CVE-2024-13194	medium	5.3/10	Sucms admin_members.php sql injection	Jan 8, 2025 1y ago
CVE-2024-13193	medium	5.3/10	SEMCMS Image Library Management Page SEMCMS_Images.php sql injection	Jan 8, 2025 1y ago
CVE-2025-22143	medium	6.4/10	WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'listar_permissoes.php' parameter 'msg_e'	Jan 8, 2025 1y ago
CVE-2025-22141	critical	9.4/10	WeGIA SQL Injection (Blind Time-Based) endpoint 'verificar_recursos_cargo.php' parameter 'cargo'	Jan 8, 2025 1y ago
CVE-2025-22139	medium	6.4/10	WeGIA Cross-Site Scripting (XSS) Reflected endpoint `configuracao_geral.php` parameter `msg`	Jan 8, 2025 1y ago
CVE-2025-22140	critical	9.4/10	WeGIA SQL Injection (Blind Time-Based) endpoint 'dependente_listar_um.php' parameter 'id_dependente'	Jan 8, 2025 1y ago
CVE-2025-0301	medium	5.3/10	code-projects Online Book Shop subcat.php cross site scripting	Jan 7, 2025 1y ago
CVE-2025-0300	medium	5.3/10	code-projects Online Book Shop subcat.php sql injection	Jan 7, 2025 1y ago
CVE-2025-0299	medium	5.3/10	code-projects Online Book Shop search_result.php sql injection	Jan 7, 2025 1y ago
CVE-2025-0298	medium	5.3/10	code-projects Online Book Shop process_login.php sql injection	Jan 7, 2025 1y ago
CVE-2025-0297	medium	5.3/10	code-projects Online Book Shop detail.php sql injection	Jan 7, 2025 1y ago
CVE-2025-0296	medium	5.3/10	code-projects Online Book Shop booklist.php sql injection	Jan 7, 2025 1y ago
CVE-2025-0295	medium	5.3/10	code-projects Online Book Shop booklist.php cross site scripting	Jan 7, 2025 1y ago