Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,738

All time

Critical · Active

12,169

CVSS ≥ 9.0

New · 14 days

3,052

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 5251–5280 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-12926	medium	5.3/10	Codezips Project Management System advanced.php sql injection	Dec 25, 2024 1y ago
CVE-2018-25106	medium	5.3/10	webuidesigning NebulaX Theme Legacy.php nebula_send_to_hubspot sql injection	Dec 23, 2024 1y ago
CVE-2024-12901	medium	6.9/10	FoxCMS API Endpoint Site.php improper authorization	Dec 23, 2024 1y ago
CVE-2024-12900	medium	5.3/10	FoxCMS Configuration File installdb.php code injection	Dec 23, 2024 1y ago
CVE-2024-12899	medium	6.9/10	1000 Projects Attendance Tracking Management System course_action.php sql injection	Dec 23, 2024 1y ago
CVE-2024-12898	medium	5.3/10	1000 Projects Attendance Tracking Management System faculty_action.php sql injection	Dec 23, 2024 1y ago
CVE-2024-12895	medium	5.3/10	TreasureHuntGame TreasureHunt checkflag.php console_log sql injection	Dec 22, 2024 1y ago
CVE-2024-12894	medium	5.3/10	TreasureHuntGame TreasureHunt acesso.php sql injection	Dec 22, 2024 1y ago
CVE-2024-12892	medium	5.3/10	code-projects Online Exam Mastering System sign.php cross site scripting	Dec 22, 2024 1y ago
CVE-2024-12891	medium	5.3/10	code-projects Online Exam Mastering System account.php sql injection	Dec 22, 2024 1y ago
CVE-2024-12890	medium	5.3/10	code-projects Online Exam Mastering System update.php sql injection	Dec 22, 2024 1y ago
CVE-2024-12884	medium	6.9/10	Codezips E-Commerce Website login.php sql injection	Dec 21, 2024 1y ago
CVE-2024-12883	medium	6.9/10	code-projects Job Recruitment _email.php cross site scripting	Dec 21, 2024 1y ago
CVE-2024-12721	high	7.2/10	Custom Product Tabs For WooCommerce <= 1.2.4 - Authenticated (Shop Manager+) PHP Object Injection	Dec 21, 2024 1y ago
CVE-2024-12846	medium	6.9/10	Emlog Pro link.php cross site scripting	Dec 21, 2024 1y ago
CVE-2024-12845	medium	5.3/10	Emlog Pro common.php cross site scripting	Dec 20, 2024 1y ago
CVE-2024-12844	medium	6.9/10	Emlog Pro store.php cross site scripting	Dec 20, 2024 1y ago
CVE-2024-12843	medium	6.9/10	Emlog Pro plugin.php cross site scripting	Dec 20, 2024 1y ago
CVE-2024-12842	medium	6.9/10	Emlog Pro user.php cross site scripting	Dec 20, 2024 1y ago
CVE-2024-12841	medium	6.9/10	Emlog Pro tag.php cross site scripting	Dec 20, 2024 1y ago
CVE-2024-12794	medium	5.3/10	Codezips E-Commerce Site editorder.php sql injection	Dec 19, 2024 1y ago
CVE-2024-12793	medium	5.3/10	PbootCMS IndexController.php path traversal	Dec 19, 2024 1y ago
CVE-2024-12792	medium	6.9/10	Codezips E-Commerce Site newadmin.php sql injection	Dec 19, 2024 1y ago
CVE-2024-12791	medium	6.9/10	Codezips E-Commerce Site signin.php sql injection	Dec 19, 2024 1y ago
CVE-2024-12790	medium	5.3/10	code-projects Hostel Management Site room-details.php cross site scripting	Dec 19, 2024 1y ago
CVE-2024-12789	medium	5.3/10	PbootCMS IndexController.php code injection	Dec 19, 2024 1y ago
CVE-2024-12788	medium	6.9/10	Codezips Technical Discussion Forum signinpost.php sql injection	Dec 19, 2024 1y ago
CVE-2024-12787	medium	6.9/10	1000 Projects Attendance Tracking Management System check_student_login.php sql injection	Dec 19, 2024 1y ago
CVE-2024-12785	medium	5.3/10	itsourcecode Vehicle Management System sendmail.php sql injection	Dec 19, 2024 1y ago
CVE-2024-12784	medium	5.3/10	itsourcecode Vehicle Management System editbill.php sql injection	Dec 19, 2024 1y ago