Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,738

All time

Critical · Active

12,169

CVSS ≥ 9.0

New · 14 days

3,054

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 5101–5130 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-0294	medium	5.1/10	SourceCodester Home Clean Services Management System process.php sql injection	Jan 7, 2025 1y ago
CVE-2024-49222	critical	9.8/10	WordPress WPGuppy plugin <= 1.1.0 - PHP Object Injection vulnerability	Jan 7, 2025 1y ago
CVE-2024-56283	high	8.1/10	WordPress Locatoraid Store Locator Plugin <= 3.9.50 - PHP Object Injection vulnerability	Jan 7, 2025 1y ago
CVE-2024-56291	high	8.1/10	WordPress PlainInventory – Inventory Management Plugin Plugin <= 3.1.6 - PHP Object Injection vulnerability	Jan 7, 2025 1y ago
CVE-2024-12535	high	8.6/10	Host PHP Info <= 1.0.4 - Missing Authorization to Unauthenticated Sensitive Information Disclosure	Jan 7, 2025 1y ago
CVE-2024-12313	high	8.1/10	Compare Products for WooCommerce <= 3.2.1 - Unauthenticated PHP Object Injection	Jan 7, 2025 1y ago
CVE-2024-11465	high	7.2/10	Custom Product Tabs for WooCommerce <= 1.8.5 - Authenticated (Shop Manager+) PHP Object Injection	Jan 7, 2025 1y ago
CVE-2025-0233	medium	6.9/10	Codezips Project Management System course.php sql injection	Jan 5, 2025 1y ago
CVE-2025-0232	medium	5.3/10	Codezips Blood Bank Management System successadmin.php sql injection	Jan 5, 2025 1y ago
CVE-2025-0231	medium	5.3/10	Codezips Gym Management System submit_payments.php sql injection	Jan 5, 2025 1y ago
CVE-2025-0230	medium	5.3/10	code-projects Responsive Hotel Site print.php sql injection	Jan 5, 2025 1y ago
CVE-2025-0229	medium	5.3/10	code-projects Travel Management System enquiry.php sql injection	Jan 5, 2025 1y ago
CVE-2024-13140	medium	5.3/10	Emlog Pro Cover Upload article.php cross site scripting	Jan 5, 2025 1y ago
CVE-2024-13135	medium	5.3/10	Emlog Pro Subpage twitter.php cross site scripting	Jan 5, 2025 1y ago
CVE-2024-13132	medium	5.3/10	Emlog Pro Subpage article.php cross site scripting	Jan 5, 2025 1y ago
CVE-2025-0214	low	2.1/10	TMD Custom Header Menu index.php sql injection	Jan 4, 2025 1y ago
CVE-2025-0213	medium	5.3/10	Campcodes Project Management System update_forms.php unrestricted upload	Jan 4, 2025 1y ago
CVE-2025-0212	medium	5.3/10	Campcodes Student Grading System view_students.php sql injection	Jan 4, 2025 1y ago
CVE-2025-0211	medium	5.3/10	Campcodes School Faculty Scheduling System index.php file inclusion	Jan 4, 2025 1y ago
CVE-2025-0210	medium	6.9/10	Campcodes School Faculty Scheduling System ajax.php sql injection	Jan 4, 2025 1y ago
CVE-2024-10957	high	8.8/10	UpdraftPlus: WP Backup & Migration Plugin 1.23.8 - 1.24.11 - Unauthenticated PHP Object Injection	Jan 4, 2025 1y ago
CVE-2025-0208	medium	5.3/10	code-projects Online Shoe Store summary.php sql injection	Jan 4, 2025 1y ago
CVE-2025-0207	medium	6.9/10	code-projects Online Shoe Store login.php sql injection	Jan 4, 2025 1y ago
CVE-2025-0206	medium	6.9/10	code-projects Online Shoe Store index.php access control	Jan 4, 2025 1y ago
CVE-2025-0205	medium	5.3/10	code-projects Online Shoe Store details2.php sql injection	Jan 4, 2025 1y ago
CVE-2025-0204	medium	5.3/10	code-projects Online Shoe Store details.php sql injection	Jan 4, 2025 1y ago
CVE-2024-10932	high	8.8/10	Backup Migration <= 1.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialize_replace'	Jan 4, 2025 1y ago
CVE-2025-0203	medium	5.3/10	code-projects Student Management System DbFunction.php showSubject1 sql injection	Jan 4, 2025 1y ago
CVE-2025-0201	medium	5.3/10	code-projects Point of Sales and Inventory Management System update_account.php sql injection	Jan 4, 2025 1y ago
CVE-2025-0200	medium	5.3/10	code-projects Point of Sales and Inventory Management System search_num.php sql injection	Jan 4, 2025 1y ago