Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,805

All time

Critical · Active

12,186

CVSS ≥ 9.0

New · 14 days

3,112

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 6001–6030 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-7371	medium	5.3/10	SourceCodester Simple Realtime Quiz System quiz_view.php sql injection	Aug 1, 2024 2y ago
CVE-2024-7370	medium	5.3/10	SourceCodester Simple Realtime Quiz System manage_quiz.php sql injection	Aug 1, 2024 2y ago
CVE-2024-7369	medium	6.9/10	SourceCodester Simple Realtime Quiz System Login ajax.php sql injection	Aug 1, 2024 2y ago
CVE-2024-7368	medium	5.3/10	SourceCodester Simple Realtime Quiz System ajax.php cross site scripting	Aug 1, 2024 2y ago
CVE-2024-39636	high	8.3/10	WordPress Better Find and Replace plugin <= 1.6.1 - PHP Object Injection vulnerability	Aug 1, 2024 2y ago
CVE-2024-7367	medium	6.9/10	SourceCodester Simple Realtime Quiz System ajax.php cross-site request forgery	Aug 1, 2024 2y ago
CVE-2024-39630	medium	5.5/10	WordPress Timetable and Event Schedule by MotoPress plugin <= 2.4.13 - PHP Object Injection vulnerability	Aug 1, 2024 2y ago
CVE-2024-7366	medium	6.9/10	SourceCodester Tracking Monitoring Management System Login ajax.php sql injection	Aug 1, 2024 2y ago
CVE-2024-7365	medium	5.3/10	SourceCodester Tracking Monitoring Management System manage_establishment.php sql injection	Aug 1, 2024 2y ago
CVE-2024-7364	medium	5.3/10	SourceCodester Tracking Monitoring Management System manage_records.php sql injection	Aug 1, 2024 2y ago
CVE-2024-7363	medium	5.3/10	SourceCodester Tracking Monitoring Management System manage_person.php sql injection	Aug 1, 2024 2y ago
CVE-2024-7362	medium	5.3/10	SourceCodester Tracking Monitoring Management System manage_user.php sql injection	Aug 1, 2024 2y ago
CVE-2024-7361	medium	5.3/10	SourceCodester Tracking Monitoring Management System ajax.php sql injection	Aug 1, 2024 2y ago
CVE-2024-7360	medium	6.9/10	SourceCodester Tracking Monitoring Management System ajax.php cross-site request forgery	Aug 1, 2024 2y ago
CVE-2024-7359	medium	5.3/10	SourceCodester Tracking Monitoring Management System ajax.php cross site scripting	Aug 1, 2024 2y ago
CVE-2024-7330	medium	5.3/10	YouDianCMS ydLib.php curl_exec server-side request forgery	Jul 31, 2024 2y ago
CVE-2024-7329	medium	5.3/10	YouDianCMS image_upload.php unrestricted upload	Jul 31, 2024 2y ago
CVE-2024-7327	medium	5.3/10	Xinhu RockOA openmodhetongAction.php dataAction sql injection	Jul 31, 2024 2y ago
CVE-2024-7321	medium	6.9/10	itsourcecode Online Blood Bank Management System User Registration signup.php cross site scripting	Jul 31, 2024 2y ago
CVE-2024-7320	medium	6.9/10	itsourcecode Online Blood Bank Management System Admin Login index.php sql injection	Jul 31, 2024 2y ago
CVE-2024-7311	medium	6.9/10	code-projects Online Bus Reservation Site register.php sql injection	Jul 31, 2024 2y ago
CVE-2024-7310	medium	5.3/10	SourceCodester Record Management System sort_user.php cross site scripting	Jul 31, 2024 2y ago
CVE-2024-7309	medium	5.3/10	SourceCodester Record Management System entry.php cross site scripting	Jul 31, 2024 2y ago
CVE-2024-7308	medium	5.3/10	SourceCodester Establishment Billing Management System view_bill.php sql injection	Jul 31, 2024 2y ago
CVE-2024-7307	medium	5.3/10	SourceCodester Establishment Billing Management System manage_billing.php sql injection	Jul 31, 2024 2y ago
CVE-2024-7306	medium	5.3/10	SourceCodester Establishment Billing Management System manage_block.php sql injection	Jul 31, 2024 2y ago
CVE-2024-7303	medium	5.3/10	itsourcecode Online Blood Bank Management System Send Blood Request Page request.php cross site scripting	Jul 31, 2024 2y ago
CVE-2024-7290	medium	5.3/10	SourceCodester Establishment Billing Management System manage_tenant.php sql injection	Jul 31, 2024 2y ago
CVE-2024-7289	medium	5.3/10	SourceCodester Establishment Billing Management System manage_payment.php sql injection	Jul 31, 2024 2y ago
CVE-2024-7287	medium	5.3/10	SourceCodester Establishment Billing Management System manage_user.php sql injection	Jul 31, 2024 2y ago