Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,805

All time

Critical · Active

12,186

CVSS ≥ 9.0

New · 14 days

3,113

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 5791–5820 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-8348	medium	5.3/10	SourceCodester Computer Laboratory Management System Master.php delete_category sql injection	Aug 30, 2024 1y ago
CVE-2024-8347	medium	5.3/10	SourceCodester Computer Laboratory Management System Master.php delete_record sql injection	Aug 30, 2024 1y ago
CVE-2024-8346	medium	5.3/10	SourceCodester Computer Laboratory Management System SystemSettings.php update_settings_info sql injection	Aug 30, 2024 1y ago
CVE-2024-8345	medium	5.3/10	SourceCodester Music Gallery Site Users.php sql injection	Aug 30, 2024 1y ago
CVE-2024-8344	medium	5.3/10	Campcodes Supplier Management System edit_area.php sql injection	Aug 30, 2024 1y ago
CVE-2024-8343	medium	6.9/10	SourceCodester Sentiment Based Movie Rating System User Registration Users.php sql injection	Aug 30, 2024 1y ago
CVE-2024-8342	medium	5.3/10	SourceCodester Petshop Management System add_client.php unrestricted upload	Aug 30, 2024 1y ago
CVE-2024-8341	medium	5.3/10	SourceCodester Petshop Management System add_user.php unrestricted upload	Aug 30, 2024 1y ago
CVE-2024-8340	medium	6.9/10	SourceCodester Electric Billing Management System Actions.php sql injection	Aug 30, 2024 1y ago
CVE-2024-8338	medium	5.3/10	HFO4 shudong-share File Extension fileReceive.php unrestricted upload	Aug 30, 2024 1y ago
CVE-2024-8336	medium	5.3/10	SourceCodester Music Gallery Site Master.php sql injection	Aug 30, 2024 1y ago
CVE-2024-8335	medium	5.3/10	OpenRapid RapidCMS runlogon.php sql injection	Aug 30, 2024 1y ago
CVE-2024-8331	medium	5.3/10	OpenRapid RapidCMS user-move-run.php sql injection	Aug 30, 2024 1y ago
CVE-2024-8016	critical	9.1/10	The Events Calendar Pro <= 7.0.2 - Authenticated (Administrator+) PHP Object Injection to Remote Code Execution	Aug 30, 2024 1y ago
CVE-2024-2694	high	8.8/10	Betheme <= 27.5.6 - Authenticated (Contributor+) PHP Object Injection	Aug 30, 2024 1y ago
CVE-2024-43931	critical	9.8/10	WordPress JobSearch WP Job Board WordPress Plugin plugin <= 2.5.3 - PHP Object Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-8303	medium	5.3/10	dingfanzu CMS getBasicInfo.php sql injection	Aug 29, 2024 1y ago
CVE-2024-8302	medium	5.3/10	dingfanzu CMS chpwd.php sql injection	Aug 29, 2024 1y ago
CVE-2024-8301	medium	6.9/10	dingfanzu CMS checkin.php sql injection	Aug 29, 2024 1y ago
CVE-2024-8296	medium	5.3/10	FeehiCMS index.php insert unrestricted upload	Aug 29, 2024 1y ago
CVE-2024-8295	medium	5.3/10	FeehiCMS index.php createBanner unrestricted upload	Aug 29, 2024 1y ago
CVE-2024-8294	medium	5.3/10	FeehiCMS index.php update unrestricted upload	Aug 29, 2024 1y ago
CVE-2024-45046	medium	5.4/10	PhpSpreadsheet HTML writer is vulnerable to Cross-Site Scripting via style information	Aug 28, 2024 1y ago
CVE-2024-45048	high	8.8/10	XML External Entity Reference (XXE) in PHPSpreadsheet	Aug 28, 2024 1y ago
CVE-2024-8030	critical	9.8/10	Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.0.3 - Unauthenticated PHP Object Injection	Aug 28, 2024 2y ago
CVE-2024-8223	medium	5.3/10	SourceCodester Music Gallery Site Master.php sql injection	Aug 27, 2024 2y ago
CVE-2024-8221	medium	5.3/10	SourceCodester Music Gallery Site manage_category.php sql injection	Aug 27, 2024 2y ago
CVE-2024-8220	medium	5.3/10	itsourcecode Tailoring Management System staffedit.php sql injection	Aug 27, 2024 2y ago
CVE-2024-8219	medium	6.9/10	code-projects Responsive Hotel Site index.php sql injection	Aug 27, 2024 2y ago
CVE-2024-8218	medium	6.9/10	code-projects Online Quiz Site index.php sql injection	Aug 27, 2024 2y ago