Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,773

All time

Critical · Active

12,176

CVSS ≥ 9.0

New · 14 days

3,086

Newly disclosed

Feed last synced

6 hrs ago

Data freshness

Showing 5701–5730 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-9296	medium	6.9/10	SourceCodester Advocate Office Management System forgot_pass.php sql injection	Sep 28, 2024 1y ago
CVE-2024-9295	medium	6.9/10	SourceCodester Advocate Office Management System login.php sql injection	Sep 28, 2024 1y ago
CVE-2024-8353	critical	9.8/10	GiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Unauthenticated PHP Object Injection	Sep 28, 2024 1y ago
CVE-2024-9294	medium	5.3/10	dingfanzu CMS saveNewPwd.php sql injection	Sep 27, 2024 1y ago
CVE-2024-9293	medium	5.3/10	skyselang yylAdmin Backend File.php list sql injection	Sep 27, 2024 1y ago
CVE-2024-9282	medium	6.9/10	bg5sbk MiniCMS page-edit.php cross-site request forgery	Sep 27, 2024 1y ago
CVE-2024-9281	medium	6.9/10	bg5sbk MiniCMS post-edit.php cross-site request forgery	Sep 27, 2024 1y ago
CVE-2024-9278	medium	5.1/10	HuankeMao SCRM Administrator Backend WxkConfig.php upload_domain_verification_file unrestricted upload	Sep 27, 2024 1y ago
CVE-2024-9276	medium	5.3/10	TMsoft MyAuth Gateway index.php cross site scripting	Sep 27, 2024 1y ago
CVE-2024-9275	medium	5.3/10	jeanmarc77 123solar admin_invt2.php file inclusion	Sep 27, 2024 1y ago
CVE-2024-8922	high	8.8/10	Product Enquiry for WooCommerce <= 2.2.33.33 - Authenticated (Author+) PHP Object Injection in enquiry_detail.php	Sep 27, 2024 1y ago
CVE-2024-8514	critical	9.1/10	Prisna GWT - Google Website Translator <= 1.4.11 - Authenticated (Admin+) PHP Object Injection	Sep 25, 2024 1y ago
CVE-2024-9094	medium	5.3/10	code-projects Blood Bank System o-.php sql injection	Sep 23, 2024 1y ago
CVE-2024-9093	medium	5.3/10	SourceCodester Profile Registration without Reload Refresh GET Parameter del.php sql injection	Sep 23, 2024 1y ago
CVE-2024-9092	medium	5.3/10	SourceCodester Profile Registration without Reload Refresh Registration Form add.php cross site scripting	Sep 23, 2024 1y ago
CVE-2024-9091	medium	6.9/10	code-projects Student Record System index.php sql injection	Sep 23, 2024 1y ago
CVE-2024-9090	medium	5.3/10	SourceCodester Modern Loan Management System search_member.php sql injection	Sep 22, 2024 1y ago
CVE-2024-9089	medium	5.3/10	SourceCodester Modern Loan Management System update_loan_record.php cross site scripting	Sep 22, 2024 1y ago
CVE-2024-9087	medium	6.9/10	code-projects Vehicle Management edit1.php sql injection	Sep 22, 2024 1y ago
CVE-2024-9086	medium	5.3/10	code-projects Restaurant Reservation System filter.php sql injection	Sep 22, 2024 1y ago
CVE-2024-9084	medium	5.3/10	code-projects Blood Bank System bbms.php cross site scripting	Sep 22, 2024 1y ago
CVE-2024-9083	medium	5.1/10	SourceCodester Employee Management System add-admin.php cross site scripting	Sep 22, 2024 1y ago
CVE-2024-9082	medium	5.3/10	SourceCodester Online Eyewear Shop User Creation Users.php improper authorization	Sep 22, 2024 1y ago
CVE-2024-9085	medium	6.9/10	code-projects Restaurant Reservation System index.php sql injection	Sep 22, 2024 1y ago
CVE-2024-9081	medium	5.3/10	SourceCodester Online Eyewear Shop view_category.php sql injection	Sep 22, 2024 1y ago
CVE-2024-9080	medium	6.9/10	code-projects Student Record System pincode-verification.php sql injection	Sep 22, 2024 1y ago
CVE-2024-9079	medium	6.9/10	code-projects Student Record System marks.php sql injection	Sep 22, 2024 1y ago
CVE-2024-9078	medium	6.9/10	code-projects Student Record System course.php sql injection	Sep 22, 2024 1y ago
CVE-2024-9076	medium	5.1/10	DedeCMS article_string_mix.php os command injection	Sep 22, 2024 1y ago
CVE-2024-9041	medium	5.3/10	SourceCodester Best House Rental Management System ajax.php sql injection	Sep 20, 2024 1y ago