Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,738

All time

Critical · Active

12,169

CVSS ≥ 9.0

New · 14 days

3,052

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 5341–5370 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-11962	medium	6.9/10	code-projects Simple Car Rental System login.php sql injection	Nov 28, 2024 1y ago
CVE-2024-53860	high	8.6/10	Potential Abuse for Sending Arbitrary Emails in sp-php-email-handler	Nov 27, 2024 1y ago
CVE-2024-11860	medium	6.9/10	SourceCodester Best House Rental Management System POST Request ajax.php improper authorization	Nov 27, 2024 1y ago
CVE-2024-11820	medium	5.3/10	code-projects Crud Operation System add.php cross site scripting	Nov 27, 2024 1y ago
CVE-2024-11819	medium	6.9/10	1000 Projects Portfolio Management System MCA forgot_password_process.php sql injection	Nov 26, 2024 1y ago
CVE-2024-11818	medium	6.9/10	PHPGurukul User Registration & Login and User Management System signup.php sql injection	Nov 26, 2024 1y ago
CVE-2024-11817	medium	6.9/10	PHPGurukul User Registration & Login and User Management System index.php sql injection	Nov 26, 2024 1y ago
CVE-2024-11744	medium	6.9/10	1000 Projects Portfolio Management System MCA register.php sql injection	Nov 26, 2024 1y ago
CVE-2024-11743	medium	6.9/10	SourceCodester Best House Rental Management System POST Request ajax.php cross-site request forgery	Nov 26, 2024 1y ago
CVE-2024-11742	medium	5.3/10	SourceCodester Best House Rental Management System ajax.php cross site scripting	Nov 26, 2024 1y ago
CVE-2024-11678	medium	5.3/10	CodeAstro Hospital Management System his_doc_register_patient.php cross site scripting	Nov 26, 2024 1y ago
CVE-2024-11677	medium	5.3/10	CodeAstro Hospital Management System Add Vendor Details Page his_admin_add_vendor.php cross site scripting	Nov 26, 2024 1y ago
CVE-2024-11676	medium	5.3/10	CodeAstro Hospital Management System Add Laboratory Equipment Page his_admin_add_lab_equipment.php cross site scripting	Nov 26, 2024 1y ago
CVE-2024-11675	medium	5.3/10	CodeAstro Hospital Management System Add Patient Details Page his_admin_register_patient.php cross site scripting	Nov 26, 2024 1y ago
CVE-2024-11674	medium	5.3/10	CodeAstro Hospital Management System his_doc_update-account.php unrestricted upload	Nov 25, 2024 1y ago
CVE-2024-11663	medium	6.9/10	Codezips E-Commerce Site search.php sql injection	Nov 25, 2024 1y ago
CVE-2024-11661	medium	5.3/10	Codezips Free Exam Hall Seating Management System Profile Image profile.php unrestricted upload	Nov 25, 2024 1y ago
CVE-2024-11660	medium	5.3/10	code-projects Farmacia usuario.php cross site scripting	Nov 25, 2024 1y ago
CVE-2024-11649	medium	6.9/10	1000 Projects Beauty Parlour Management System search-appointment.php sql injection	Nov 25, 2024 1y ago
CVE-2024-11648	medium	6.9/10	1000 Projects Beauty Parlour Management System add-customer.php sql injection	Nov 25, 2024 1y ago
CVE-2024-11647	medium	6.9/10	1000 Projects Beauty Parlour Management System view-appointment.php sql injection	Nov 25, 2024 1y ago
CVE-2024-11646	medium	6.9/10	1000 Projects Beauty Parlour Management System edit-services.php sql injection	Nov 24, 2024 1y ago
CVE-2024-11632	medium	6.9/10	code-projects Simple Car Rental System book_car.php sql injection	Nov 23, 2024 1y ago
CVE-2024-11631	medium	5.3/10	itsourcecode Tailoring Management System expedit.php sql injection	Nov 23, 2024 1y ago
CVE-2024-9511	critical	9.8/10	FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider <= 2.2.82 - Unauthenticated PHP Object Injection	Nov 23, 2024 1y ago
CVE-2024-11330	medium	6.1/10	Custom CSS, JS & PHP <= 2.3.0 - Reflected Cross-Site Scripting	Nov 23, 2024 1y ago
CVE-2024-11592	medium	6.9/10	1000 Projects Beauty Parlour Management System about-us.php sql injection	Nov 21, 2024 1y ago
CVE-2024-11591	medium	6.9/10	1000 Projects Beauty Parlour Management System add-services.php sql injection	Nov 21, 2024 1y ago
CVE-2024-11590	medium	6.9/10	1000 Projects Bookstore Management System forget_password_process.php sql injection	Nov 21, 2024 1y ago
CVE-2024-11589	medium	5.3/10	itsourcecode Tailoring Management System expcatedit.php sql injection	Nov 21, 2024 1y ago