Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,738

All time

Critical · Active

12,169

CVSS ≥ 9.0

New · 14 days

3,054

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 5131–5160 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-0199	medium	5.3/10	code-projects Point of Sales and Inventory Management System minus_cart.php sql injection	Jan 3, 2025 1y ago
CVE-2025-0198	medium	5.3/10	code-projects Point of Sales and Inventory Management System search_result.php sql injection	Jan 3, 2025 1y ago
CVE-2025-0197	medium	5.3/10	code-projects Point of Sales and Inventory Management System search.php sql injection	Jan 3, 2025 1y ago
CVE-2025-0196	medium	5.3/10	code-projects Point of Sales and Inventory Management System plist.php sql injection	Jan 3, 2025 1y ago
CVE-2025-0195	medium	5.3/10	code-projects Point of Sales and Inventory Management System del_product.php sql injection	Jan 3, 2025 1y ago
CVE-2024-56412	medium	4.8/10	PhpSpreadsheet vulnerable to bypass of the XSS sanitizer using the javascript protocol and special characters	Jan 3, 2025 1y ago
CVE-2024-56411	medium	4.8/10	PhpSpreadsheet has Cross-Site Scripting (XSS) vulnerability of the hyperlink base in the HTML page header	Jan 3, 2025 1y ago
CVE-2024-56410	medium	4.8/10	PhpSpreadsheet has Cross-Site Scripting (XSS) vulnerability in custom properties	Jan 3, 2025 1y ago
CVE-2024-56409	high	8.3/10	PhpSpreadsheet vulnerable to unauthorized reflected XSS in Currency.php file	Jan 3, 2025 1y ago
CVE-2024-56366	high	8.3/10	PhpSpreadsheet vulnerable to unauthorized reflected XSS in the Accounting.php file	Jan 3, 2025 1y ago
CVE-2024-56365	high	8.3/10	PhpSpreadsheet vulnerable to unauthorized reflected XSS in the constructor of the Downloader class	Jan 3, 2025 1y ago
CVE-2024-56408	high	8.3/10	PhpSpreadsheet allows unauthorized reflected XSS in `Convert-Online.php` file	Jan 3, 2025 1y ago
CVE-2025-0176	medium	5.3/10	code-projects Point of Sales and Inventory Management System add_cart.php sql injection	Jan 3, 2025 1y ago
CVE-2025-0175	medium	5.3/10	code-projects Online Shop view.php cross site scripting	Jan 3, 2025 1y ago
CVE-2025-0174	medium	5.3/10	code-projects Point of Sales and Inventory Management System Parameter search_result2.php sql injection	Jan 3, 2025 1y ago
CVE-2025-0173	medium	5.3/10	SourceCodester Online Eyewear Shop view_order.php sql injection	Jan 2, 2025 1y ago
CVE-2024-56199	medium	5.2/10	phpMyFAQ Vulnerable to Stored HTML Injection at FAQ	Jan 2, 2025 1y ago
CVE-2025-0172	medium	5.3/10	code-projects Chat System deleteroom.php sql injection	Jan 2, 2025 1y ago
CVE-2025-0171	medium	5.3/10	code-projects Chat System deleteuser.php sql injection	Jan 2, 2025 1y ago
CVE-2024-13093	medium	5.3/10	code-projects Job Recruitment Seeker Profile _call_main_search_ajax.php sql injection	Jan 2, 2025 1y ago
CVE-2024-13092	medium	5.3/10	code-projects Job Recruitment Job Post search_ajax.php sql injection	Jan 2, 2025 1y ago
CVE-2025-0168	medium	5.3/10	code-projects Job Recruitment _feedback_system.php sql injection	Jan 1, 2025 1y ago
CVE-2024-13085	medium	6.9/10	PHPGurukul Land Record System login.php sql injection	Dec 31, 2024 1y ago
CVE-2024-13084	medium	5.3/10	PHPGurukul Land Record System search-property.php sql injection	Dec 31, 2024 1y ago
CVE-2024-13083	medium	5.3/10	PHPGurukul Land Record System admin-profile.php cross site scripting	Dec 31, 2024 1y ago
CVE-2024-13082	medium	5.3/10	PHPGurukul Land Record System search-property.php cross site scripting	Dec 31, 2024 1y ago
CVE-2024-13081	medium	5.3/10	PHPGurukul Land Record System contactus.php cross site scripting	Dec 31, 2024 1y ago
CVE-2024-13080	medium	5.1/10	PHPGurukul Land Record System aboutus.php cross site scripting	Dec 31, 2024 1y ago
CVE-2024-13079	medium	5.3/10	PHPGurukul Land Record System property-details.php sql injection	Dec 31, 2024 1y ago
CVE-2024-13078	medium	5.3/10	PHPGurukul Land Record System index.php sql injection	Dec 31, 2024 1y ago