Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,176

All time

Critical · Active

11,977

CVSS ≥ 9.0

New · 14 days

2,665

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 571–600 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2018-25370	medium	6.9/10	Admidio 3.3.5 Cross-Site Request Forgery via roles_function.php	May 25, 2026 3mo ago
CVE-2018-25364	high	8.8/10	Twitter-Clone 1 SQL Injection via search.php	May 25, 2026 3mo ago
CVE-2018-25363	medium	5.3/10	Twitter-Clone 1 Cross-Site Request Forgery via tweetdel.php	May 25, 2026 3mo ago
CVE-2018-25362	high	8.8/10	Twitter-Clone 1 SQL Injection via follow.php	May 25, 2026 3mo ago
CVE-2026-9451	medium	5.3/10	code-projects Employee Management System applyleaveprocess.php sql injection	May 25, 2026 3mo ago
CVE-2026-9450	medium	5.3/10	code-projects Employee Management System psubmit.php sql injection	May 25, 2026 3mo ago
CVE-2026-9449	medium	5.3/10	code-projects Employee Management System changepassemp.php sql injection	May 25, 2026 3mo ago
CVE-2026-9448	medium	5.3/10	code-projects Employee Management System applyleave.php cross site scripting	May 25, 2026 3mo ago
CVE-2026-9447	medium	6.9/10	SourceCodester Simple POS and Inventory System search.php sql injection	May 25, 2026 3mo ago
CVE-2026-9446	medium	5.1/10	SourceCodester Simple POS and Inventory System edit_customer.php sql injection	May 25, 2026 3mo ago
CVE-2026-9445	medium	5.3/10	SourceCodester Simple POS and Inventory System File Extension addproduct.php unrestricted upload	May 25, 2026 3mo ago
CVE-2026-9444	medium	5.1/10	SourceCodester Simple POS and Inventory System GET Parameter deleteproduct.php delete sql injection	May 25, 2026 3mo ago
CVE-2026-9438	medium	5.3/10	yashpokharna2555 StudentManagementSystem courseDel.php resource injection	May 25, 2026 3mo ago
CVE-2026-9421	medium	6.9/10	KLiK SocialMediaWebsite File upload.inc.php uniqid unrestricted upload	May 25, 2026 3mo ago
CVE-2026-9419	medium	5.3/10	code-projects Employee Management System empproject.php cross site scripting	May 25, 2026 3mo ago
CVE-2026-9418	medium	5.3/10	code-projects Employee Management System changepassemp.php cross site scripting	May 25, 2026 3mo ago
CVE-2026-9417	medium	5.3/10	code-projects Employee Management System myprofileup.php cross site scripting	May 25, 2026 3mo ago
CVE-2026-9416	medium	5.3/10	code-projects Employee Management System myprofile.php cross site scripting	May 25, 2026 3mo ago
CVE-2026-9415	medium	5.3/10	code-projects Employee Management System eloginwel.php cross site scripting	May 25, 2026 3mo ago
CVE-2026-9414	medium	5.1/10	SourceCodester Indian Invoicing System Invoice Template Render Database-Backed add_order.php cross site scripting	May 25, 2026 3mo ago
CVE-2026-9413	medium	5.3/10	SourceCodester Indian Invoicing System category.php cross site scripting	May 25, 2026 3mo ago
CVE-2026-9411	medium	5.3/10	SourceCodester Indian Invoicing System Invoice Generation IGST_Invoice.php sql injection	May 25, 2026 3mo ago
CVE-2026-9383	medium	6.9/10	itsourcecode Electronic Judging System login.php sql injection	May 24, 2026 3mo ago
CVE-2026-9377	medium	4.8/10	SourceCodester SUP Online Shopping productedit.php cross site scripting	May 24, 2026 3mo ago
CVE-2026-9364	medium	6.9/10	projectworlds Online Art Gallery Shop adminHome.php sql injection	May 24, 2026 3mo ago
CVE-2026-9356	medium	6.9/10	SourceCodester Hospitals Patient Records Management System manage_history.php sql injection	May 24, 2026 3mo ago
CVE-2026-9355	medium	6.9/10	SourceCodester Hospitals Patient Records Management System Master.php save_patient_history sql injection	May 24, 2026 3mo ago
CVE-2026-9342	medium	5.3/10	SourceCodester Hospitals Patient Records Management System view_history.php sql injection	May 23, 2026 3mo ago
CVE-2018-25357	critical	9.3/10	Dolibarr ERP CRM 7.0.3 Remote Code Execution via install/step1.php	May 23, 2026 3mo ago
CVE-2018-25350	critical	9.3/10	userSpice 4.3.24 Username Enumeration via existingUsernameCheck.php	May 23, 2026 3mo ago