Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

699

Newly disclosed

Feed last synced

1 day ago

Data freshness

Showing 511–540 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-7133	medium	5.1/10	code-projects Online Lot Reservation System activity.php unrestricted upload	Apr 27, 2026 2mo ago
CVE-2026-7132	medium	6.9/10	code-projects Online Lot Reservation System download.php readfile path traversal	Apr 27, 2026 2mo ago
CVE-2026-7131	medium	6.9/10	code-projects Online Lot Reservation System loginuser.php sql injection	Apr 27, 2026 2mo ago
CVE-2026-7130	medium	6.9/10	SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection	Apr 27, 2026 2mo ago
CVE-2026-7129	medium	5.3/10	SourceCodester Pharmacy Sales and Inventory System index.php cross site scripting	Apr 27, 2026 2mo ago
CVE-2026-7128	medium	6.9/10	SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection	Apr 27, 2026 2mo ago
CVE-2026-7127	medium	6.9/10	SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection	Apr 27, 2026 2mo ago
CVE-2026-7126	medium	6.9/10	SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection	Apr 27, 2026 2mo ago
CVE-2026-7118	medium	5.3/10	code-projects Employee Management System cancel.php sql injection	Apr 27, 2026 2mo ago
CVE-2026-7117	medium	5.3/10	code-projects Employee Management System approve.php sql injection	Apr 27, 2026 2mo ago
CVE-2026-7116	medium	5.3/10	code-projects Employee Management System mark.php cross site scripting	Apr 27, 2026 2mo ago
CVE-2026-7115	medium	5.3/10	code-projects Employee Management System delete.php sql injection	Apr 27, 2026 2mo ago
CVE-2026-7114	medium	5.3/10	code-projects Employee Management System edit.php sql injection	Apr 27, 2026 2mo ago
CVE-2026-7103	medium	6.3/10	code-projects Chat System MD5 Hash update_user.php weak hash	Apr 27, 2026 2mo ago
CVE-2026-7095	medium	5.3/10	code-projects Employee Management System edit.php cross site scripting	Apr 27, 2026 2mo ago
CVE-2026-7090	medium	4.8/10	code-projects Chat System send_message.php cross site scripting	Apr 27, 2026 2mo ago
CVE-2026-7089	medium	5.3/10	code-projects Home Service System Appointment Booking booking.php cross site scripting	Apr 27, 2026 2mo ago
CVE-2026-7088	medium	6.9/10	SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection	Apr 27, 2026 2mo ago
CVE-2026-7087	medium	6.9/10	SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection	Apr 27, 2026 2mo ago
CVE-2026-7083	medium	5.1/10	likeadmin-likeshop likeadmin_php dataTable Admin API DataTableLists.php queryResult sql injection	Apr 27, 2026 2mo ago
CVE-2026-7077	medium	6.9/10	itsourcecode Courier Management System edit_parcel.php sql injection	Apr 27, 2026 2mo ago
CVE-2026-7076	medium	6.9/10	itsourcecode Courier Management System edit_branch.php sql injection	Apr 27, 2026 2mo ago
CVE-2026-7075	medium	6.9/10	itsourcecode Construction Management System locations.php sql injection	Apr 27, 2026 2mo ago
CVE-2026-7074	medium	6.9/10	itsourcecode Construction Management System execute1.php sql injection	Apr 27, 2026 2mo ago
CVE-2026-7073	medium	6.9/10	itsourcecode Construction Management System execute.php sql injection	Apr 27, 2026 2mo ago
CVE-2026-7072	medium	6.9/10	CodePanda Source canteen_management_system login.php sql injection	Apr 27, 2026 2mo ago
CVE-2026-7063	medium	6.9/10	code-projects Employee Management System Endpoint eprocess.php sql injection	Apr 26, 2026 2mo ago
CVE-2026-7044	medium	5.3/10	GreenCMS index.php themeadd unrestricted upload	Apr 26, 2026 2mo ago
CVE-2026-7043	medium	5.3/10	GreenCMS index.php pluginAddLocal unrestricted upload	Apr 26, 2026 2mo ago
CVE-2026-7028	medium	5.1/10	CodeAstro Online Job Portal All Jobs delete-jobs.php sql injection	Apr 26, 2026 2mo ago