Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,805

All time

Critical · Active

12,186

CVSS ≥ 9.0

New · 14 days

3,112

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 6091–6120 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-37502	medium	5.4/10	WordPress Social Login plugin <= 2.6.3 - PHP Object Injection vulnerability	Jul 9, 2024 2y ago
CVE-2024-6374	medium	5.3/10	lahirudanushka School Management System Subject Page subject.php cross site scripting	Jun 27, 2024 2y ago
CVE-2024-6373	medium	6.9/10	itsourcecode Online Food Ordering System addproduct.php unrestricted upload	Jun 27, 2024 2y ago
CVE-2024-6372	medium	5.3/10	itsourcecode Tailoring Management System customeradd.php sql injection	Jun 27, 2024 2y ago
CVE-2024-6371	medium	6.9/10	itsourcecode Pool of Bethesda Online Reservation System controller.php sql injection	Jun 27, 2024 2y ago
CVE-2024-6308	medium	6.9/10	itsourcecode Simple Online Hotel Reservation System index.php sql injection	Jun 25, 2024 2y ago
CVE-2024-37109	critical	9.9/10	WordPress WishList Member X plugin < 3.26.7 - Authenticated Arbitrary PHP Code Execution vulnerability	Jun 24, 2024 2y ago
CVE-2024-6279	medium	5.3/10	lahirudanushka School Management System Exam Results Page examresults-par.php sql injection	Jun 24, 2024 2y ago
CVE-2024-6278	medium	5.1/10	lahirudanushka School Management System Subject Page subject.php sql injection	Jun 24, 2024 2y ago
CVE-2024-6277	medium	5.1/10	lahirudanushka School Management System Student Page student.php sql injection	Jun 24, 2024 2y ago
CVE-2024-6276	medium	5.1/10	lahirudanushka School Management System Teacher Page teacher.php sql injection	Jun 24, 2024 2y ago
CVE-2024-6275	medium	5.1/10	lahirudanushka School Management System Parent Page parent.php sql injection	Jun 24, 2024 2y ago
CVE-2024-6274	medium	5.1/10	lahirudanushka School Management System Attendance Report Page attendancelist.php sql injection	Jun 24, 2024 2y ago
CVE-2024-6273	medium	6.9/10	SourceCodester Clinic Queuing System patient_side.php save_patient cross site scripting	Jun 23, 2024 2y ago
CVE-2024-6269	medium	5.1/10	Ruijie RG-UAC HTTP POST Request sxh_vpnlic.php get_ip.addr_details command injection	Jun 23, 2024 2y ago
CVE-2024-6268	medium	6.9/10	lahirudanushka School Management System Login Page login.php sql injection	Jun 23, 2024 2y ago
CVE-2024-6267	medium	5.1/10	SourceCodester Service Provider Management System System Info Page index.php cross site scripting	Jun 23, 2024 2y ago
CVE-2024-6253	medium	6.9/10	itsourcecode Online Food Ordering System purchase.php sql injection	Jun 22, 2024 2y ago
CVE-2024-37212	high	8.3/10	WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - CSRF to PHP Object Injection vulnerability	Jun 21, 2024 2y ago
CVE-2024-35776	medium	5.3/10	WordPress phpinfo() WP plugin <= 5.0 - Unauthenticated Data Exposure vulnerability	Jun 21, 2024 2y ago
CVE-2024-6218	medium	6.9/10	itsourcecode Vehicle Management System busprofile.php sql injection	Jun 21, 2024 2y ago
CVE-2024-6217	medium	5.3/10	SourceCodester Food Ordering Management System user-router.php sql injection	Jun 21, 2024 2y ago
CVE-2024-6216	medium	5.3/10	SourceCodester Food Ordering Management System add-users.php sql injection	Jun 21, 2024 2y ago
CVE-2024-6215	medium	5.3/10	SourceCodester Food Ordering Management System view-ticket-admin.php sql injection	Jun 21, 2024 2y ago
CVE-2024-6214	medium	5.3/10	SourceCodester Food Ordering Management System add-item.php sql injection	Jun 21, 2024 2y ago
CVE-2024-6213	medium	6.9/10	SourceCodester Food Ordering Management System Login Panel login.php sql injection	Jun 21, 2024 2y ago
CVE-2024-6212	medium	5.3/10	SourceCodester Simple Student Attendance System student_form.php get_student cross site scripting	Jun 21, 2024 2y ago
CVE-2024-6196	medium	6.9/10	itsourcecode Banking Management System admin_class.php sql injection	Jun 20, 2024 2y ago
CVE-2024-6195	medium	5.3/10	itsourcecode Tailoring Management System orderadd.php sql injection	Jun 20, 2024 2y ago
CVE-2024-6194	medium	5.3/10	itsourcecode Tailoring Management System editmeasurement.php sql injection	Jun 20, 2024 2y ago