Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,773

All time

Critical · Active

12,176

CVSS ≥ 9.0

New · 14 days

3,086

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 5431–5460 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-11212	medium	5.3/10	SourceCodester Best Employee Management System fetch_product_details.php sql injection	Nov 14, 2024 1y ago
CVE-2024-11210	medium	5.3/10	EyouCMS FilemanagerLogic.php editFile path traversal	Nov 14, 2024 1y ago
CVE-2024-10962	high	8.8/10	Migration, Backup, Staging – WPvivid <= 0.9.107 - Unauthenticated PHP Object Injection	Nov 14, 2024 1y ago
CVE-2024-11215	medium	6.5/10	Path traversal vulnerability in EasyPHP	Nov 14, 2024 1y ago
CVE-2024-10828	high	8.1/10	Advanced Order Export For WooCommerce <= 3.5.5 - Unauthenticated PHP Object Injection via Order Details	Nov 13, 2024 1y ago
CVE-2024-11138	medium	5.1/10	DedeCMS friendlink_add.php unrestricted upload	Nov 12, 2024 1y ago
CVE-2024-11130	medium	5.1/10	ZZCMS msg.php cross site scripting	Nov 12, 2024 1y ago
CVE-2024-11127	medium	5.3/10	code-projects Job Recruitment admin.php sql injection	Nov 12, 2024 1y ago
CVE-2024-11125	medium	6.9/10	GetSimpleCMS profile.php cross-site request forgery	Nov 12, 2024 1y ago
CVE-2024-11123	medium	5.3/10	上海灵当信息科技有限公司 Lingdang CRM pdf.php path traversal	Nov 12, 2024 1y ago
CVE-2024-11122	medium	5.3/10	上海灵当信息科技有限公司 Lingdang CRM index.php unrestricted upload	Nov 12, 2024 1y ago
CVE-2024-11121	medium	5.3/10	上海灵当信息科技有限公司 Lingdang CRM index.php sql injection	Nov 12, 2024 1y ago
CVE-2024-11102	medium	5.3/10	SourceCodester Hospital Management System edit-doc.php cross site scripting	Nov 12, 2024 1y ago
CVE-2024-11101	medium	5.1/10	1000 Projects Beauty Parlour Management System search-invoices.php sql injection	Nov 12, 2024 1y ago
CVE-2024-11100	medium	6.9/10	1000 Projects Beauty Parlour Management System index.php sql injection	Nov 12, 2024 1y ago
CVE-2024-11099	medium	6.9/10	code-projects Job Recruitment login.php sql injection	Nov 12, 2024 1y ago
CVE-2024-11096	medium	5.3/10	code-projects Task Manager newProject.php sql injection	Nov 12, 2024 1y ago
CVE-2024-11078	medium	5.3/10	code-projects Job Recruitment register.php cross site scripting	Nov 11, 2024 1y ago
CVE-2024-11077	medium	6.9/10	code-projects Job Recruitment index.php sql injection	Nov 11, 2024 1y ago
CVE-2024-11076	medium	5.3/10	code-projects Job Recruitment activation.php sql injection	Nov 11, 2024 1y ago
CVE-2024-11074	medium	5.3/10	itsourcecode Tailoring Management System incadd.php sql injection	Nov 11, 2024 1y ago
CVE-2024-11073	medium	5.3/10	SourceCodester Hospital Management System delete-account.php improper authorization	Nov 11, 2024 1y ago
CVE-2024-11059	medium	5.3/10	Project Worlds Free Download Online Shopping System success.php sql injection	Nov 10, 2024 1y ago
CVE-2024-11058	medium	5.1/10	CodeAstro Real Estate Management System About Us Page aboutedit.php sql injection	Nov 10, 2024 1y ago
CVE-2024-11057	medium	6.9/10	Codezips Hospital Appointment System removeBranchResult.php sql injection	Nov 10, 2024 1y ago
CVE-2024-11055	medium	6.9/10	1000 Projects Beauty Parlour Management System admin-profile.php sql injection	Nov 10, 2024 1y ago
CVE-2024-11054	medium	5.3/10	SourceCodester Simple Music Cloud Community System ajax.php unrestricted upload	Nov 10, 2024 1y ago
CVE-2024-11051	medium	5.3/10	AMTT Hotel Broadband Operation System online_status.php sql injection	Nov 10, 2024 1y ago
CVE-2024-11050	medium	5.3/10	AMTT Hotel Broadband Operation System language.php cross site scripting	Nov 10, 2024 1y ago
CVE-2024-11000	medium	5.1/10	CodeAstro Real Estate Management System About Us Page aboutedit.php unrestricted upload	Nov 8, 2024 1y ago