Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,773

All time

Critical · Active

12,176

CVSS ≥ 9.0

New · 14 days

3,086

Newly disclosed

Feed last synced

5 hrs ago

Data freshness

Showing 5641–5670 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-10157	medium	6.9/10	PHPGurukul Boat Booking System Reset Your Password Page password-recovery.php sql injection	Oct 19, 2024 1y ago
CVE-2024-10156	medium	6.9/10	PHPGurukul Boat Booking System Sign In Page index.php sql injection	Oct 19, 2024 1y ago
CVE-2024-10155	medium	5.3/10	PHPGurukul Boat Booking System Book a Boat Page book-boat.php cross site scripting	Oct 19, 2024 1y ago
CVE-2024-10154	medium	5.3/10	PHPGurukul Boat Booking System Check Booking Status Page status.php sql injection	Oct 19, 2024 1y ago
CVE-2024-10153	medium	5.3/10	PHPGurukul Boat Booking System Book a Boat Page book-boat.php sql injection	Oct 19, 2024 1y ago
CVE-2024-10142	medium	5.3/10	code-projects Blood Bank System viewrequest.php cross site scripting	Oct 19, 2024 1y ago
CVE-2024-10140	medium	5.3/10	code-projects Pharmacy Management System manage_supplier.php sql injection	Oct 19, 2024 1y ago
CVE-2024-10139	medium	5.3/10	code-projects Pharmacy Management System add_new_supplier.php sql injection	Oct 19, 2024 1y ago
CVE-2024-10138	medium	5.3/10	code-projects Pharmacy Management System add_new_purchase.php sql injection	Oct 19, 2024 1y ago
CVE-2024-10137	medium	5.3/10	code-projects Pharmacy Management System manage_medicine.php sql injection	Oct 19, 2024 1y ago
CVE-2024-10136	medium	5.3/10	code-projects Pharmacy Management System manage_invoice.php sql injection	Oct 19, 2024 1y ago
CVE-2024-10129	medium	5.3/10	HFO4 shudong-share Share create_share.php sql injection	Oct 18, 2024 1y ago
CVE-2024-10079	high	8.8/10	WP Easy Post Types <= 1.4.4 - Authenticated (Subscriber+) PHP Object Injection	Oct 18, 2024 1y ago
CVE-2024-49318	critical	9.8/10	WordPress My Reading Library plugin <= 1.0 - PHP Object Injection vulnerability	Oct 17, 2024 1y ago
CVE-2018-25104	medium	5.3/10	CoinGate Plugin Payment callback.php postProcess logic error	Oct 17, 2024 1y ago
CVE-2024-48026	critical	9.8/10	WordPress Disc Golf Manager plugin <= 1.0.0 - PHP Object Injection vulnerability	Oct 16, 2024 1y ago
CVE-2024-48028	critical	9.8/10	WordPress IP Loc8 plugin <= 1.1 - PHP Object Injection vulnerability	Oct 16, 2024 1y ago
CVE-2024-48030	critical	9.8/10	WordPress Telecash Ricaricaweb plugin <= 2.2 - PHP Object Injection vulnerability	Oct 16, 2024 1y ago
CVE-2024-49218	critical	9.8/10	WordPress Recently plugin <= 1.1 - PHP Object Injection vulnerability	Oct 16, 2024 1y ago
CVE-2024-49226	high	8.8/10	WordPress TAKETIN To WP Membership plugin <= 2.8.17 - PHP Object Injection vulnerability	Oct 16, 2024 1y ago
CVE-2024-49227	high	8.8/10	WordPress Free Stock Photos Foter plugin <= 1.5.4 - PHP Object Injection vulnerability	Oct 16, 2024 1y ago
CVE-2024-10024	medium	5.3/10	code-projects Pharmacy Management System manage_medicine_stock.php sql injection	Oct 16, 2024 1y ago
CVE-2024-10023	medium	5.3/10	code-projects Pharmacy Management System add_new_medicine.php sql injection	Oct 16, 2024 1y ago
CVE-2024-10022	medium	5.3/10	code-projects Pharmacy Management System manage_supplier.php sql injection	Oct 16, 2024 1y ago
CVE-2024-10021	medium	5.3/10	code-projects Pharmacy Management System manage_purchase.php sql injection	Oct 16, 2024 1y ago
CVE-2024-9047	critical	9.8/10	WordPress File Upload <= 4.24.11 - Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.php	Oct 12, 2024 1y ago
CVE-2024-48033	critical	9.8/10	WordPress Talkback plugin <= 1.0 - PHP Object Injection vulnerability	Oct 11, 2024 1y ago
CVE-2024-47636	critical	9.8/10	WordPress WP JobSearch plugin <= 2.5.9 - PHP Object Injection vulnerability	Oct 10, 2024 1y ago
CVE-2024-9026	low	3.3/10	PHP-FPM logs from children may be altered	Oct 8, 2024 1y ago
CVE-2024-8926	high	8.1/10	PHP CGI Parameter Injection Vulnerability (CVE-2024-4577 bypass)	Oct 8, 2024 1y ago