Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,124

All time

Critical · Active

11,966

CVSS ≥ 9.0

New · 14 days

2,707

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 31–60 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-19916	medium	5.1/10	code-projects Online Food Order System edit_food_items.php cross site scripting	Aug 15, 2026 8d ago
CVE-2026-19906	medium	6.3/10	pkp pkp-lib API Key Generation APIProfileForm.php setData entropy	Aug 15, 2026 8d ago
CVE-2026-19899	medium	6.9/10	SourceCodester Class and Exam Timetabling System edit_teacher.php sql injection	Aug 15, 2026 8d ago
CVE-2026-19894	medium	5.3/10	itsourcecode Hospital Management System viewmedicine.php sql injection	Aug 15, 2026 8d ago
CVE-2026-73849	critical	9.8/10	emlog allows unauthenticated reinstallation via `install.php?action=reinstall`.	Aug 14, 2026 9d ago
CVE-2026-19767	medium	5.3/10	itsourcecode Hospital Management System viewdoctortimings.php sql injection	Aug 14, 2026 10d ago
CVE-2026-73482	high	7.2/10	phpList < 3.7.0-RC5 Cross-Site Request Forgery via admins.php	Aug 13, 2026 10d ago
CVE-2026-73670	high	8.6/10	CMS Admin SQL Injection via db_data.php table_name Parameter	Aug 13, 2026 10d ago
CVE-2026-28176	high	8.8/10	WordPress Booking Activities plugin <= 1.18.4 - PHP Object Injection vulnerability	Aug 13, 2026 10d ago
CVE-2026-28149	critical	9.8/10	WordPress Headless Single Sign On plugin <= 1.6 - PHP Object Injection vulnerability	Aug 13, 2026 10d ago
CVE-2026-27380	high	7.2/10	WordPress Car Rental Manager plugin <= 1.3.9 - PHP Object Injection vulnerability	Aug 13, 2026 10d ago
CVE-2026-67285	critical	9.2/10	Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0	Aug 12, 2026 11d ago
CVE-2026-18391	—	—	WooCommerce Subscriptions < 9.1.0 - Unauthenticated RCE via PHP Object Injection	Aug 12, 2026 12d ago
CVE-2026-72593	critical	9.8/10	dulldusk phpfm - Missing Authentication by Default Allows Full Filesystem Access	Aug 10, 2026 13d ago
CVE-2026-72592	critical	9.8/10	dulldusk phpfm - Unauthenticated Remote Code Execution via Unrestricted PHP File Upload	Aug 10, 2026 13d ago
CVE-2026-19378	medium	5.3/10	code-projects Task Management System CommentSave.php cross site scripting	Aug 9, 2026 14d ago
CVE-2026-19345	medium	6.9/10	code-projects Task Management System UpdateTaskStatus.php authorization	Aug 9, 2026 14d ago
CVE-2026-19343	medium	6.9/10	code-projects Task Management System AdminLogin.php sql injection	Aug 9, 2026 15d ago
CVE-2026-16267	—	—	Newsletters < 4.16 - Unauthenticated PHP Object Injection via Date Form Field	Aug 8, 2026 16d ago
CVE-2026-19196	medium	6.9/10	SourceCodester Photo Share Website ajax.php login sql injection	Aug 7, 2026 17d ago
CVE-2026-67434	high	7.3/10	PHP_CodeSniffer gitblame report command injection via crafted filename	Aug 6, 2026 17d ago
CVE-2026-19071	medium	5.3/10	itsourcecode Hospital Management System viewappointment.php sql injection	Aug 6, 2026 17d ago
CVE-2026-19070	medium	5.3/10	itsourcecode Hospital Management System viewadmin.php sql injection	Aug 6, 2026 17d ago
CVE-2026-19069	medium	5.3/10	itsourcecode Hospital Management System treatmentrecord.php sql injection	Aug 6, 2026 17d ago
CVE-2026-19068	medium	5.3/10	itsourcecode Hospital Management System treatmentdetail.php sql injection	Aug 6, 2026 17d ago
CVE-2026-19067	medium	5.3/10	itsourcecode Hospital Management System treatment.php sql injection	Aug 6, 2026 17d ago
CVE-2026-19066	medium	5.3/10	SourceCodester Online Examination & Learning Management System view_students.php authorization	Aug 6, 2026 17d ago
CVE-2026-19065	medium	5.3/10	SourceCodester Online Examination & Learning Management System upload_files.php unrestricted upload	Aug 6, 2026 17d ago
CVE-2026-19064	medium	5.3/10	SourceCodester Online Examination & Learning Management System view.php authorization	Aug 6, 2026 17d ago
CVE-2026-65581	critical	9.8/10	WordPress AI ANN theme <= 1.29.0 - PHP Object Injection vulnerability	Aug 6, 2026 17d ago