Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,773

All time

Critical · Active

12,176

CVSS ≥ 9.0

New · 14 days

3,086

Newly disclosed

Feed last synced

5 hrs ago

Data freshness

Showing 5611–5640 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-10298	medium	5.1/10	PHPGurukul Medical Card Generation System Managecard Edit Card Detail Page edit-card-detail.php sql injection	Oct 23, 2024 1y ago
CVE-2024-10297	medium	5.1/10	PHPGurukul Medical Card Generation System Managecard Edit Image Page changeimage.php sql injection	Oct 23, 2024 1y ago
CVE-2024-10296	medium	5.1/10	PHPGurukul Medical Card Generation System Report of Medical Card Page card-bwdates-reports-details.php sql injection	Oct 23, 2024 1y ago
CVE-2024-10293	medium	5.3/10	ZZCMS functions.php Ebak_SetGotoPak unrestricted upload	Oct 23, 2024 1y ago
CVE-2024-10292	medium	5.3/10	ZZCMS ChangeTable.php unrestricted upload	Oct 23, 2024 1y ago
CVE-2024-10291	medium	5.3/10	ZZCMS phome.php Ebak_DotranExecutSQL sql injection	Oct 23, 2024 1y ago
CVE-2024-49684	high	7.2/10	WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.21 - PHP Object Injection vulnerability	Oct 23, 2024 1y ago
CVE-2024-10290	medium	6.9/10	ZZCMS inc.php information disclosure	Oct 23, 2024 1y ago
CVE-2024-10199	medium	5.1/10	code-projects Pharmacy Management System Manage Medicines Page manage_medicine.php cross site scripting	Oct 21, 2024 1y ago
CVE-2024-10198	medium	5.1/10	code-projects Pharmacy Management System Manage Customer Page manage_customer.php cross site scripting	Oct 21, 2024 1y ago
CVE-2024-10197	medium	5.1/10	code-projects Pharmacy Management System Manage Supplier Page manage_supplier.php cross site scripting	Oct 21, 2024 1y ago
CVE-2024-10196	medium	5.3/10	code-projects Pharmacy Management System add_new_invoice.php sql injection	Oct 21, 2024 1y ago
CVE-2024-49332	critical	9.8/10	WordPress Giveaway Boost plugin <= 2.1.4 - PHP Object Injection vulnerability	Oct 20, 2024 1y ago
CVE-2024-49624	critical	9.8/10	WordPress Advanced Advertising System plugin <= 1.3.1 - PHP Object Injection vulnerability	Oct 20, 2024 1y ago
CVE-2024-49625	critical	9.8/10	WordPress SiteBuilder Dynamic Components plugin <= 1.0 - PHP Object Injection vulnerability	Oct 20, 2024 1y ago
CVE-2024-49626	critical	9.8/10	WordPress Shipyaari Shipping Management plugin <= 1.2 - PHP Object Injection vulnerability	Oct 20, 2024 1y ago
CVE-2024-10192	medium	5.3/10	PHPGurukul IFSC Code Finder Project search.php cross site scripting	Oct 20, 2024 1y ago
CVE-2024-10191	medium	5.3/10	PHPGurukul Boat Booking System Booking Details Page book-details.php cross site scripting	Oct 20, 2024 1y ago
CVE-2024-10171	medium	5.1/10	code-projects Blood Bank System massage.php sql injection	Oct 20, 2024 1y ago
CVE-2024-10170	medium	5.3/10	code-projects Hospital Management System get_doctor.php sql injection	Oct 20, 2024 1y ago
CVE-2024-10169	medium	5.3/10	code-projects Hospital Management System change-password.php sql injection	Oct 20, 2024 1y ago
CVE-2024-10167	medium	6.9/10	Codezips Sales Management System deletecustind.php sql injection	Oct 20, 2024 1y ago
CVE-2024-10166	medium	6.9/10	Codezips Sales Management System checkuser.php sql injection	Oct 20, 2024 1y ago
CVE-2024-10165	medium	6.9/10	Codezips Sales Management System deletecustcom.php sql injection	Oct 20, 2024 1y ago
CVE-2024-10163	medium	5.3/10	SourceCodester Sentiment Based Movie Rating System movie_details.php sql injection	Oct 20, 2024 1y ago
CVE-2024-10162	medium	5.3/10	PHPGurukul Boat Booking System Edit Subdomain Details Page edit-subadmin.php sql injection	Oct 20, 2024 1y ago
CVE-2024-10161	medium	5.3/10	PHPGurukul Boat Booking System Update Boat Image Page change-image.php unrestricted upload	Oct 20, 2024 1y ago
CVE-2024-10160	medium	5.3/10	PHPGurukul Boat Booking System BW Dates Report Page bwdates-report-details.php sql injection	Oct 20, 2024 1y ago
CVE-2024-10159	medium	6.9/10	PHPGurukul Boat Booking System My Profile Page profile.php sql injection	Oct 19, 2024 1y ago
CVE-2024-10158	medium	6.9/10	PHPGurukul Boat Booking System session_start session fixiation	Oct 19, 2024 1y ago