Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,805

All time

Critical · Active

12,186

CVSS ≥ 9.0

New · 14 days

3,113

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 5881–5910 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-43242	critical	9.0/10	WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Unauthenticated PHP Object Injection vulnerability	Aug 19, 2024 2y ago
CVE-2024-37099	critical	10.0/10	WordPress GiveWP plugin <= 3.14.1 - Unauthenticated PHP Object Injection vulnerability	Aug 19, 2024 2y ago
CVE-2024-7917	medium	5.1/10	DouPHP Favicon system.php unrestricted upload	Aug 18, 2024 2y ago
CVE-2024-7916	medium	5.3/10	nafisulbari/itsourcecode Insurance Management System Add Nominee Page addNominee.php cross site scripting	Aug 18, 2024 2y ago
CVE-2024-7914	medium	5.3/10	SourceCodester Yoga Class Registration System SystemSettings.php cross site scripting	Aug 18, 2024 2y ago
CVE-2024-7913	medium	6.9/10	itsourcecode Billing System addclient1.php sql injection	Aug 18, 2024 2y ago
CVE-2024-7911	medium	5.3/10	SourceCodester Simple Online Bidding System index.php file inclusion	Aug 18, 2024 2y ago
CVE-2024-7910	medium	5.1/10	CodeAstro Online Railway Reservation System Profile Photo Update emp-profile-avatar.php unrestricted upload	Aug 18, 2024 2y ago
CVE-2024-7906	medium	5.3/10	DedeBIZ Attachment Settings select_images_post.php get_mime_type unrestricted upload	Aug 18, 2024 2y ago
CVE-2024-7905	medium	5.3/10	DedeBIZ archives_do.php AdminUpload unrestricted upload	Aug 18, 2024 2y ago
CVE-2024-7904	medium	5.3/10	DedeBIZ File Extension file_manage_control.php unrestricted upload	Aug 18, 2024 2y ago
CVE-2024-7903	medium	5.3/10	DedeBIZ File Extension media_add.php unrestricted upload	Aug 18, 2024 2y ago
CVE-2024-7897	medium	5.3/10	Tosei Online Store Management System ネット店舗管理システム tosei_kikai.php command injection	Aug 17, 2024 2y ago
CVE-2024-7896	medium	5.3/10	Tosei Online Store Management System ネット店舗管理システム p1_ftpserver.php command injection	Aug 17, 2024 2y ago
CVE-2024-7887	medium	5.1/10	LimeSurvey File Upload index.php denial of service	Aug 17, 2024 2y ago
CVE-2024-7852	medium	5.3/10	SourceCodester Yoga Class Registration System view_inquiry.php cross site scripting	Aug 16, 2024 2y ago
CVE-2024-7851	medium	5.3/10	SourceCodester Yoga Class Registration System Add User Users.php improper authorization	Aug 16, 2024 2y ago
CVE-2024-7845	medium	5.3/10	SourceCodester Online Graduate Tracer System fetch_it.php sql injection	Aug 15, 2024 2y ago
CVE-2024-7844	medium	5.3/10	SourceCodester Online Graduate Tracer System add_acc.php cross site scripting	Aug 15, 2024 2y ago
CVE-2024-7843	medium	6.9/10	SourceCodester Online Graduate Tracer System exportcs.php information disclosure	Aug 15, 2024 2y ago
CVE-2024-7842	medium	6.9/10	SourceCodester Online Graduate Tracer System export_it.php information disclosure	Aug 15, 2024 2y ago
CVE-2024-7841	medium	5.3/10	SourceCodester Clinics Patient Management System check_user_name.php sql injection	Aug 15, 2024 2y ago
CVE-2024-7839	medium	6.9/10	itsourcecode Billing System addbill.php sql injection	Aug 15, 2024 2y ago
CVE-2024-7838	medium	6.9/10	itsourcecode Online Food Ordering System addcategory.php sql injection	Aug 15, 2024 2y ago
CVE-2024-7815	medium	5.1/10	CodeAstro Online Railway Reservation System Update Employee Page admin-update-employee.php cross site scripting	Aug 15, 2024 2y ago
CVE-2024-7814	medium	5.1/10	CodeAstro Online Railway Reservation System Add Employee Page admin-add-employee.php cross site scripting	Aug 15, 2024 2y ago
CVE-2024-7812	medium	5.3/10	SourceCodester Best House Rental Management System POST Parameter ajax.php cross site scripting	Aug 15, 2024 2y ago
CVE-2024-7811	medium	5.3/10	SourceCodester Daily Expenses Monitoring App delete-expense.php sql injection	Aug 15, 2024 2y ago
CVE-2024-7420	medium	5.8/10	Insert PHP Code Snippet <= 1.3.6 - Cross-Site Request Forgery to Code Snippet Activate/Deactivate/Deletion	Aug 15, 2024 2y ago
CVE-2024-7810	medium	5.3/10	SourceCodester Online Graduate Tracer System view_itprofile.php sql injection	Aug 15, 2024 2y ago