Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,176

All time

Critical · Active

11,977

CVSS ≥ 9.0

New · 14 days

2,673

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 541–570 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-35672	high	7.5/10	phpMyFAQ - Authentication Bypass via Empty API Token	May 28, 2026 2mo ago
CVE-2026-35671	high	8.8/10	phpMyFAQ - Insecure Direct Object Reference in User Password API	May 28, 2026 2mo ago
CVE-2026-2374	high	7.2/10	Login No Captcha reCAPTCHA <= 1.8.0 - Unauthenticated Stored Cross-Site Scripting via PHP_SELF	May 28, 2026 2mo ago
CVE-2026-42878	medium	5.3/10	FacturaScripts: Unauthenticated phpinfo() Disclosure via Installer Endpoint in FacturaScripts	May 27, 2026 2mo ago
CVE-2026-45027	medium	5.9/10	WeGIA: Use of Weak Password Hashing Algorithm (SHA-256, no salt) in html/login.php	May 27, 2026 2mo ago
CVE-2026-8707	medium	6.1/10	NS Product icon badge <= 1.2.4 - Reflected Cross-Site Scripting via PHP_SELF	May 27, 2026 2mo ago
CVE-2026-9609	medium	5.1/10	QianFox FoxCMS Admin.php edit password recovery	May 27, 2026 2mo ago
CVE-2026-9607	medium	5.3/10	itsourcecode Courier Management System parcel_list.php sql injection	May 27, 2026 2mo ago
CVE-2026-9606	medium	6.9/10	itsourcecode Courier Management System manage_user.php sql injection	May 26, 2026 2mo ago
CVE-2026-9603	medium	6.9/10	SourceCodester eDoc Doctor Appointment System delete-session.php authorization	May 26, 2026 2mo ago
CVE-2026-9584	medium	6.9/10	code-projects Project Management System Login chk.php sql injection	May 26, 2026 2mo ago
CVE-2026-9583	medium	5.3/10	SourceCodester CET Automated Grading System with AI Predictive Analytics SQL index.php information exposure	May 26, 2026 2mo ago
CVE-2026-9575	medium	6.9/10	itsourcecode Student Transcript Processing System index.php sql injection	May 26, 2026 2mo ago
CVE-2026-9574	medium	6.9/10	itsourcecode Student Transcript Processing System trans.php sql injection	May 26, 2026 2mo ago
CVE-2026-9573	medium	6.9/10	itsourcecode Student Transcript Processing System index.php sql injection	May 26, 2026 3mo ago
CVE-2026-46620	medium	6.5/10	e107: CSRF in comment.php moderation endpoints via token-optional validation in session_handler::check()	May 26, 2026 3mo ago
CVE-2026-45247	critical	9.3/10	Mirasvit Cache Warmer for Magento < 1.11.12 PHP Object Injection	May 26, 2026 3mo ago
CVE-2026-9542	medium	5.3/10	CodeAstro Leave Management System add_staff.php sql injection	May 26, 2026 3mo ago
CVE-2026-9528	medium	6.9/10	itsourcecode Electronic Judging System delete_judge.php sql injection	May 26, 2026 3mo ago
CVE-2026-9527	medium	5.3/10	itsourcecode Electronic Judging System judges.php cross site scripting	May 26, 2026 3mo ago
CVE-2026-9526	medium	6.9/10	itsourcecode Electronic Judging System edit_team.php sql injection	May 26, 2026 3mo ago
CVE-2026-9525	medium	6.9/10	itsourcecode Electronic Judging System edit_judge.php sql injection	May 26, 2026 3mo ago
CVE-2026-9518	medium	5.3/10	hemant6488 CodeIgniter-StudentManagementSystem Students Controller view_students.php addStudent cross site scripting	May 26, 2026 3mo ago
CVE-2026-9485	medium	5.1/10	SourceCodester Student Grades Management System students.php cross site scripting	May 25, 2026 3mo ago
CVE-2026-9484	medium	5.3/10	SourceCodester Student Grades Management System classroom.php removeStudentFromClassroom improper authorization	May 25, 2026 3mo ago
CVE-2026-9483	medium	5.3/10	SourceCodester Student Grades Management System grades.php improper authorization	May 25, 2026 3mo ago
CVE-2026-9474	medium	6.9/10	yashpokharna2555 StudentManagementSystem studentdel.php confirm_logged_in sql injection	May 25, 2026 3mo ago
CVE-2026-9471	medium	5.1/10	yashpokharna2555 StudentManagementSystem student.php cross site scripting	May 25, 2026 3mo ago
CVE-2026-9470	medium	6.9/10	yashpokharna2555 StudentManagementSystem student_trans.php confirm_logged_in sql injection	May 25, 2026 3mo ago
CVE-2026-9469	medium	6.9/10	yashpokharna2555 StudentManagementSystem success.php sql injection	May 25, 2026 3mo ago