Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,738

All time

Critical · Active

12,169

CVSS ≥ 9.0

New · 14 days

3,052

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 5311–5340 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-12232	medium	5.3/10	code-projects Simple CRUD Functionality index.php cross site scripting	Dec 5, 2024 1y ago
CVE-2024-12231	medium	6.9/10	CodeZips Project Management System index.php sql injection	Dec 5, 2024 1y ago
CVE-2024-12230	medium	6.9/10	PHPGurukul Complaint Management System subcategory.php sql injection	Dec 5, 2024 1y ago
CVE-2024-12229	medium	6.9/10	PHPGurukul Complaint Management System complaint-search.php sql injection	Dec 5, 2024 1y ago
CVE-2024-12228	medium	6.9/10	PHPGurukul Complaint Management System user-search.php sql injection	Dec 5, 2024 1y ago
CVE-2024-11317	critical	10.0/10	PHP Session Fixation	Dec 5, 2024 1y ago
CVE-2024-12188	medium	6.9/10	1000 Projects Library Management System stu.php sql injection	Dec 5, 2024 1y ago
CVE-2024-12187	medium	6.9/10	1000 Projects Library Management System showbook.php sql injection	Dec 5, 2024 1y ago
CVE-2024-12183	medium	5.3/10	DedeCMS HTTP POST Request carbuyaction.php RemoveXSS cross site scripting	Dec 4, 2024 1y ago
CVE-2024-12182	medium	5.3/10	DedeCMS soft_add.php cross site scripting	Dec 4, 2024 1y ago
CVE-2024-12181	medium	5.3/10	DedeCMS SWF File uploads_add.php cross site scripting	Dec 4, 2024 1y ago
CVE-2024-12180	medium	5.3/10	DedeCMS article_add.php cross site scripting	Dec 4, 2024 1y ago
CVE-2024-11952	high	7.5/10	Classic Addons – WPBakery Page Builder <= 3.0 - Authenticated (Contributor+) Limited Local PHP File Inclusion	Dec 4, 2024 1y ago
CVE-2024-10587	high	8.8/10	Funnelforms Free <= 3.7.5.1 - Authenticated (Contributor+) PHP Object Injection	Dec 4, 2024 1y ago
CVE-2024-52596	high	8.8/10	SimpleSAMLphp xml-common XXE vulnerability	Dec 2, 2024 1y ago
CVE-2024-52806	high	8.3/10	SimpleSAMLphp SAML2 has an XXE in parsing SAML messages	Dec 2, 2024 1y ago
CVE-2024-53717	high	7.1/10	WordPress yPHPlista plugin <= 1.1.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-12007	medium	5.3/10	code-projects Farmacia visualizar-produto.php sql injection	Dec 1, 2024 1y ago
CVE-2024-12001	medium	5.3/10	code-projects Wazifa System Setting updatesettings.php cross site scripting	Nov 30, 2024 1y ago
CVE-2024-12000	medium	5.3/10	code-projects Blood Bank System Setting updatesettings.php cross site scripting	Nov 30, 2024 1y ago
CVE-2024-11997	medium	5.3/10	code-projects Farmacia vendas.php cross site scripting	Nov 30, 2024 1y ago
CVE-2024-11996	medium	5.3/10	code-projects Farmacia editar-fornecedor.php cross site scripting	Nov 30, 2024 1y ago
CVE-2024-11995	medium	5.3/10	code-projects Farmacia pagamento.php cross site scripting	Nov 29, 2024 1y ago
CVE-2024-11970	medium	6.9/10	code-projects Concert Ticket Ordering System tour(cor).php sql injection	Nov 28, 2024 1y ago
CVE-2024-11968	medium	5.3/10	code-projects Farmacia pagamento.php sql injection	Nov 28, 2024 1y ago
CVE-2024-11967	medium	6.9/10	PHPGurukul Complaint Management system reset-password.php sql injection	Nov 28, 2024 1y ago
CVE-2024-11966	medium	6.9/10	PHPGurukul Complaint Management system index.php sql injection	Nov 28, 2024 1y ago
CVE-2024-11965	medium	6.9/10	PHPGurukul Complaint Management system reset-password.php sql injection	Nov 28, 2024 1y ago
CVE-2024-11964	medium	6.9/10	PHPGurukul Complaint Management system index.php sql injection	Nov 28, 2024 1y ago
CVE-2024-11963	medium	5.3/10	code-projects Responsive Hotel Site room.php sql injection	Nov 28, 2024 1y ago