Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,773

All time

Critical · Active

12,176

CVSS ≥ 9.0

New · 14 days

3,086

Newly disclosed

Feed last synced

5 hrs ago

Data freshness

Showing 5551–5580 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-10598	medium	6.9/10	Tongda OA Annual Leave data.php improper authorization	Oct 31, 2024 1y ago
CVE-2024-10561	medium	6.9/10	Codezips Pet Shop Management System birdsupdate.php sql injection	Oct 31, 2024 1y ago
CVE-2024-10557	medium	6.9/10	code-projects Blood Bank Management System updateprofile.php cross-site request forgery	Oct 31, 2024 1y ago
CVE-2024-10556	medium	6.9/10	Codezips Pet Shop Management System birdsadd.php sql injection	Oct 31, 2024 1y ago
CVE-2024-50507	critical	9.8/10	WordPress DS.DownloadList plugin <= 1.3 - PHP Object Injection vulnerability	Oct 30, 2024 1y ago
CVE-2024-10509	medium	6.9/10	Codezips Online Institute Management System login.php sql injection	Oct 30, 2024 1y ago
CVE-2024-10507	medium	6.9/10	Codezips Free Exam Hall Seating Management System login.php sql injection	Oct 30, 2024 1y ago
CVE-2024-10506	medium	5.3/10	code-projects Blood Bank System B-.php sql injection	Oct 30, 2024 1y ago
CVE-2024-10505	medium	5.3/10	wuzhicms block.php edit code injection	Oct 30, 2024 1y ago
CVE-2017-20195	medium	5.1/10	LUNAD3v AreaLoad request.php sql injection	Oct 29, 2024 1y ago
CVE-2024-10450	medium	5.3/10	SourceCodester Kortex Lite Advocate Office Management System POST Parameter edit_profile.php sql injection	Oct 28, 2024 1y ago
CVE-2024-10449	medium	6.9/10	Codezips Hospital Appointment System loginAction.php sql injection	Oct 28, 2024 1y ago
CVE-2024-10448	medium	6.9/10	code-projects Blood Bank Management System delete.php cross-site request forgery	Oct 28, 2024 1y ago
CVE-2024-10447	medium	5.3/10	Project Worlds Online Time Table Generator staffdashboard.php sql injection	Oct 28, 2024 1y ago
CVE-2024-50408	high	8.8/10	WordPress Namaste! LMS plugin <= 2.6.3 - PHP Object Injection vulnerability	Oct 28, 2024 1y ago
CVE-2024-10446	medium	5.3/10	Project Worlds Online Time Table Generator admindashboard.php sql injection	Oct 28, 2024 1y ago
CVE-2024-50416	high	8.8/10	WordPress WPC Shop as a Customer for WooCommerce plugin <= 1.2.6 - PHP Object Injection vulnerability	Oct 28, 2024 1y ago
CVE-2024-9162	high	7.2/10	All-in-One WP Migration and Backup <= 7.86 - Authenticated (Administrator+) Arbitrary PHP Code Injection	Oct 28, 2024 1y ago
CVE-2024-10433	medium	5.3/10	Project Worlds Simple Web-Based Chat Application index.php cross site scripting	Oct 28, 2024 1y ago
CVE-2024-10432	medium	6.9/10	Project Worlds Simple Web-Based Chat Application index.php sql injection	Oct 27, 2024 1y ago
CVE-2024-10431	medium	6.9/10	Codezips Pet Shop Management System deletebird.php sql injection	Oct 27, 2024 1y ago
CVE-2024-10430	medium	6.9/10	Codezips Pet Shop Management System animalsupdate.php sql injection	Oct 27, 2024 1y ago
CVE-2024-10427	medium	5.3/10	Codezips Pet Shop Management System deleteanimal.php sql injection	Oct 27, 2024 1y ago
CVE-2024-10426	medium	5.3/10	Codezips Pet Shop Management System animalsadd.php sql injection	Oct 27, 2024 1y ago
CVE-2024-10425	medium	5.3/10	Project Worlds Student Project Allocation System Project Selection Page move_up_project.php sql injection	Oct 27, 2024 1y ago
CVE-2024-10424	medium	5.3/10	Project Worlds Student Project Allocation System Project Selection Page remove_project.php sql injection	Oct 27, 2024 1y ago
CVE-2024-10423	medium	5.3/10	Project Worlds Student Project Allocation System Project Selection Page project_selection.php sql injection	Oct 27, 2024 1y ago
CVE-2024-10422	medium	5.3/10	SourceCodester Attendance and Payroll System overtime_add.php sql injection	Oct 27, 2024 1y ago
CVE-2024-10421	medium	5.3/10	SourceCodester Attendance and Payroll System overtime_row.php sql injection	Oct 27, 2024 1y ago
CVE-2024-10420	medium	5.3/10	SourceCodester Attendance and Payroll System update.php upload unrestricted upload	Oct 27, 2024 1y ago