Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,805

All time

Critical · Active

12,186

CVSS ≥ 9.0

New · 14 days

3,113

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 5851–5880 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-8089	medium	5.3/10	SourceCodester E-Commerce System controller.php unrestricted upload	Aug 22, 2024 2y ago
CVE-2024-8087	medium	5.3/10	SourceCodester E-Commerce System popup_Item.php sql injection	Aug 22, 2024 2y ago
CVE-2024-8086	medium	6.9/10	SourceCodester E-Commerce System Admin Login login.php sql injection	Aug 22, 2024 2y ago
CVE-2024-8084	medium	5.1/10	SourceCodester Online Computer and Laptop Store Setting SystemSettings.php cross site scripting	Aug 22, 2024 2y ago
CVE-2024-8083	medium	5.3/10	SourceCodester Online Computer and Laptop Store Master.php sql injection	Aug 22, 2024 2y ago
CVE-2024-8081	medium	6.9/10	itsourcecode Payroll Management System login.php sql injection	Aug 22, 2024 2y ago
CVE-2024-8080	medium	5.3/10	SourceCodester Online Health Care System search.php sql injection	Aug 22, 2024 2y ago
CVE-2024-5335	critical	9.8/10	Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 1.6.4 - Unauthenticated PHP Object Injection	Aug 21, 2024 2y ago
CVE-2024-5932	critical	10.0/10	GiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Unauthenticated PHP Object Injection to Remote Code Execution	Aug 20, 2024 2y ago
CVE-2024-7949	medium	5.3/10	SourceCodester Online Graduate Tracer System fetch_genderit.php sql injection	Aug 20, 2024 2y ago
CVE-2024-7948	medium	5.3/10	SourceCodester Accounts Manager App Update Account Page update-account.php cross site scripting	Aug 20, 2024 2y ago
CVE-2024-7947	medium	6.9/10	SourceCodester Point of Sales and Inventory Management System login.php sql injection	Aug 20, 2024 2y ago
CVE-2024-7946	medium	6.9/10	itsourcecode Online Blood Bank Management System User Signup register.php sql injection	Aug 20, 2024 2y ago
CVE-2024-7944	medium	5.3/10	itsourcecode Laravel Property Management System DocumentsController.php UpdateDocumentsRequest unrestricted upload	Aug 20, 2024 2y ago
CVE-2024-7943	medium	5.3/10	itsourcecode Laravel Property Management System PropertiesController.php upload unrestricted upload	Aug 20, 2024 2y ago
CVE-2024-7942	medium	5.3/10	SourceCodester Leads Manager Tool update-leads.php cross site scripting	Aug 20, 2024 2y ago
CVE-2024-7937	medium	5.3/10	itsourcecode Project Expense Monitoring System printtransfer.php sql injection	Aug 20, 2024 2y ago
CVE-2024-7936	medium	5.3/10	itsourcecode Project Expense Monitoring System transferred_report.php sql injection	Aug 19, 2024 2y ago
CVE-2024-7935	medium	5.3/10	itsourcecode Project Expense Monitoring System print.php sql injection	Aug 19, 2024 2y ago
CVE-2024-7934	medium	5.3/10	itsourcecode Project Expense Monitoring System execute.php sql injection	Aug 19, 2024 2y ago
CVE-2024-7933	medium	6.9/10	itsourcecode Project Expense Monitoring System Backend Login login1.php sql injection	Aug 19, 2024 2y ago
CVE-2024-7931	medium	5.3/10	SourceCodester Online Graduate Tracer System view_csprofile.php sql injection	Aug 19, 2024 2y ago
CVE-2024-7930	medium	5.3/10	SourceCodester Clinics Patient Management System get_packings.php sql injection	Aug 19, 2024 2y ago
CVE-2024-7929	medium	6.9/10	SourceCodester Simple Forum Website Signup Page registration.php cross site scripting	Aug 19, 2024 2y ago
CVE-2024-7927	medium	6.9/10	ZZCMS class.php path traversal	Aug 19, 2024 2y ago
CVE-2024-7926	medium	6.9/10	ZZCMS about_edit.php path traversal	Aug 19, 2024 2y ago
CVE-2024-43354	critical	9.8/10	WordPress myCred plugin <= 2.7.2 - PHP Object Injection vulnerability	Aug 19, 2024 2y ago
CVE-2024-7925	medium	5.3/10	ZZCMS eginfo.php information disclosure	Aug 19, 2024 2y ago
CVE-2024-7924	medium	6.9/10	ZZCMS list.php path traversal	Aug 19, 2024 2y ago
CVE-2024-43252	critical	9.0/10	WordPress Crew HRM plugin <= 1.1.1 - PHP Object Injection vulnerability	Aug 19, 2024 2y ago