Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,773

All time

Critical · Active

12,176

CVSS ≥ 9.0

New · 14 days

3,086

Newly disclosed

Feed last synced

5 hrs ago

Data freshness

Showing 5671–5700 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-45060	high	7.1/10	Unauthenticated Cross-Site-Scripting (XSS) in sample file in PHPSpreadsheet	Oct 7, 2024 1y ago
CVE-2024-45290	high	7.7/10	Path traversal and Server-Side Request Forgery when opening XLSX files in PHPSpreadsheet	Oct 7, 2024 1y ago
CVE-2024-45291	medium	6.3/10	Path traversal and Server-Side Request Forgery in HTML writer when embedding images is enabled in PHPSpreadsheet	Oct 7, 2024 1y ago
CVE-2024-45292	medium	5.4/10	PhpSpreadsheet HTML writer is vulnerable to Cross-Site Scripting via JavaScript hyperlinks	Oct 7, 2024 1y ago
CVE-2024-45293	high	7.5/10	XML External Entity Reference (XXE) in PHPSpreadsheet's XLSX reader	Oct 7, 2024 1y ago
CVE-2024-9314	high	7.2/10	Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.228 - Authenticated (Administrator+) PHP Object Injection	Oct 5, 2024 1y ago
CVE-2024-41925	critical	9.8/10	Optigo Networks ONS-S8 Spectra Aggregation Switch PHP Remote File Inclusion	Oct 3, 2024 1y ago
CVE-2024-9460	medium	6.9/10	Codezips Online Shopping Portal index.php sql injection	Oct 3, 2024 1y ago
CVE-2024-9429	medium	5.3/10	code-projects Restaurant Reservation System filter2.php sql injection	Oct 2, 2024 1y ago
CVE-2024-47525	high	7.5/10	Stored XSS ('Cross-site Scripting') in librenms/includes/html/print-alert-rules.php	Oct 1, 2024 1y ago
CVE-2024-47526	low	3.5/10	LibreNMS has a Self-XSS ('Cross-site Scripting') in librenms/includes/html/modal/alert_template.inc.php	Oct 1, 2024 1y ago
CVE-2024-47527	high	7.5/10	LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device-dependencies.inc.php	Oct 1, 2024 1y ago
CVE-2024-7434	high	8.8/10	UltraPress <= 1.2.2 - Authenticated (Contributor+) PHP Object Injection	Oct 1, 2024 1y ago
CVE-2024-7433	high	8.8/10	Empowerment <= 1.0.2 - Authenticated (Contributor+) PHP Object Injection	Oct 1, 2024 1y ago
CVE-2024-7432	high	8.8/10	Unseen Blog <= 1.0.0 - Authenticated (Contributor+) PHP Object Injection	Oct 1, 2024 1y ago
CVE-2024-9360	medium	6.9/10	code-projects Restaurant Reservation System updatebal.php sql injection	Oct 1, 2024 1y ago
CVE-2024-9359	medium	6.9/10	code-projects Restaurant Reservation System addcompany.php sql injection	Oct 1, 2024 1y ago
CVE-2024-9328	medium	5.3/10	SourceCodester Advocate Office Management System edit_client.php sql injection	Sep 29, 2024 1y ago
CVE-2024-9327	medium	5.3/10	code-projects Blood Bank System forgot.php sql injection	Sep 29, 2024 1y ago
CVE-2024-9326	medium	6.9/10	PHPGurukul Online Shopping Portal Admin Panel index.php sql injection	Sep 29, 2024 1y ago
CVE-2024-9323	medium	5.3/10	SourceCodester Inventory Management System add_staff.php cross site scripting	Sep 29, 2024 1y ago
CVE-2024-9322	medium	5.3/10	code-projects Supply Chain Management edit_manufacturer.php sql injection	Sep 29, 2024 1y ago
CVE-2024-9321	medium	6.9/10	SourceCodester Online Railway Reservation System view_details.php access control	Sep 29, 2024 1y ago
CVE-2024-9320	medium	5.3/10	SourceCodester Online Timesheet App Add Timesheet Form add-timesheet.php cross site scripting	Sep 29, 2024 1y ago
CVE-2024-9319	medium	5.3/10	SourceCodester Online Timesheet App delete-timesheet.php sql injection	Sep 28, 2024 1y ago
CVE-2024-9318	medium	5.3/10	SourceCodester Advocate Office Management System activate.php sql injection	Sep 28, 2024 1y ago
CVE-2024-9317	medium	5.3/10	SourceCodester Online Eyewear Shop Master.php delete_category sql injection	Sep 28, 2024 1y ago
CVE-2024-9316	medium	5.3/10	code-projects Blood Bank Management System B+.php sql injection	Sep 28, 2024 1y ago
CVE-2024-9315	medium	5.3/10	SourceCodester Employee and Visitor Gate Pass Logging System manage_department.php sql injection	Sep 28, 2024 1y ago
CVE-2024-9300	medium	6.9/10	SourceCodester Online Railway Reservation System Message Us Form contact_us.php cross site scripting	Sep 28, 2024 1y ago