Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,773

All time

Critical · Active

12,176

CVSS ≥ 9.0

New · 14 days

3,086

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 5371–5400 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-11587	medium	5.3/10	idcCMS classProvCity.php GetCityOptionJs cross site scripting	Nov 21, 2024 1y ago
CVE-2024-11409	high	7.2/10	Grid View Gallery <= 1.0 - Authenticated (Editor+) PHP Object Injection	Nov 21, 2024 1y ago
CVE-2024-11487	medium	5.3/10	Code4Berry Decoration Management System Between Dates Reports btndates_report.php sql injection	Nov 20, 2024 1y ago
CVE-2024-11486	medium	5.3/10	Code4Berry Decoration Management System User Permission user_permission.php	Nov 20, 2024 1y ago
CVE-2024-11485	medium	5.3/10	Code4Berry Decoration Management System User userregister.php permission	Nov 20, 2024 1y ago
CVE-2024-11484	medium	5.3/10	Code4Berry Decoration Management System User Image update_image.php access control	Nov 20, 2024 1y ago
CVE-2024-10913	high	8.8/10	Clone <= 2.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialized_replace'	Nov 20, 2024 1y ago
CVE-2024-52439	critical	9.8/10	WordPress Team Rosters plugin <= 4.8.2 - PHP Object Injection vulnerability	Nov 20, 2024 1y ago
CVE-2024-52440	critical	9.8/10	WordPress Xpresslane Fast Checkout plugin <= 1.0.0 - PHP Object Injection vulnerability	Nov 20, 2024 1y ago
CVE-2024-52441	critical	9.8/10	WordPress Quick Learn plugin <= 1.0.1 - PHP Object Injection vulnerability	Nov 20, 2024 1y ago
CVE-2024-52443	critical	9.8/10	WordPress Geolocator plugin <= 1.1 - PHP Object Injection vulnerability	Nov 20, 2024 1y ago
CVE-2024-52445	high	8.8/10	WordPress QRMenu Restaurant QR Menu Lite plugin <= 1.0.4 - PHP Object Injection vulnerability	Nov 20, 2024 1y ago
CVE-2024-52446	high	8.8/10	WordPress Buying Buddy IDX CRM plugin <= 1.2.8 - CSRF to PHP Object Injection vulnerability	Nov 20, 2024 1y ago
CVE-2024-45691	—	—	Moodle: lesson activity password bypass through php loose comparison	Nov 20, 2024 1y ago
CVE-2024-51805	medium	6.5/10	WordPress yPHPlista plugin <= 1.1.1 - Stored Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-10486	medium	5.3/10	Google for WooCommerce <= 2.8.6 - Information Disclosure via Publicly Accessible PHP Info File	Nov 18, 2024 1y ago
CVE-2024-48917	high	7.5/10	XXE in PHPSpreadsheet's XLSX reader	Nov 18, 2024 1y ago
CVE-2024-47873	high	7.5/10	PhpSpreadsheet XmlScanner bypass leads to XXE	Nov 18, 2024 1y ago
CVE-2024-52430	critical	9.8/10	WordPress Lis Video Gallery plugin <= 0.2.1 - PHP Object Injection vulnerability	Nov 18, 2024 1y ago
CVE-2024-52432	critical	9.8/10	WordPress NIX Anti-Spam Light plugin <= 0.0.4 - PHP Object Injection vulnerability	Nov 18, 2024 1y ago
CVE-2024-52433	critical	9.8/10	WordPress My Geo Posts Free plugin <= 1.2 - PHP Object Injection vulnerability	Nov 18, 2024 1y ago
CVE-2024-52409	critical	9.8/10	WordPress AJAX Random Posts plugin <= 0.3.3 - PHP Object Injection vulnerability	Nov 16, 2024 1y ago
CVE-2024-52410	critical	9.8/10	WordPress Referrer Detector plugin <= 4.2.1.0 - PHP Object Injection vulnerability	Nov 16, 2024 1y ago
CVE-2024-52411	critical	9.8/10	WordPress Advanced Personalization plugin <= 1.1.2 - PHP Object Injection vulnerability	Nov 16, 2024 1y ago
CVE-2024-52412	critical	9.8/10	WordPress Xin theme <= 1.0.8.1 - PHP Object Injection vulnerability	Nov 16, 2024 1y ago
CVE-2024-52413	critical	9.8/10	WordPress Airin Blog theme <= 1.6.1 - PHP Object Injection vulnerability	Nov 16, 2024 1y ago
CVE-2024-52414	critical	9.8/10	WordPress WDES Responsive Mobile Menu plugin <= 5.3.18 - PHP Object Injection vulnerability	Nov 16, 2024 1y ago
CVE-2024-52415	high	8.8/10	WordPress SK WP Settings Backup plugin <= 1.0 - CSRF to PHP Object Injection vulnerability	Nov 16, 2024 1y ago
CVE-2024-45611	medium	5.7/10	GLPI has a stored XSS at src/RSSFeed.php	Nov 15, 2024 1y ago
CVE-2024-45610	medium	6.5/10	GLPI has a reflected XSS in ajax/cable.php	Nov 15, 2024 1y ago