Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,226

All time

Critical · Active

11,982

CVSS ≥ 9.0

New · 14 days

2,708

Newly disclosed

Feed last synced

13 mins ago

Data freshness

Showing 601–630 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2018-25346	high	7.1/10	WordPress Form Maker Plugin 1.12.24 SQL Injection via admin-ajax.php	May 23, 2026 3mo ago
CVE-2018-25343	medium	5.3/10	Smartshop 1 Cross-Site Request Forgery via editprofile.php	May 23, 2026 3mo ago
CVE-2018-25342	high	8.8/10	Smartshop 1 SQL Injection via search.php	May 23, 2026 3mo ago
CVE-2018-25341	high	8.8/10	Smartshop 1 SQL Injection via product.php id Parameter	May 23, 2026 3mo ago
CVE-2018-25340	high	8.8/10	Smartshop 1 SQL Injection via category.php	May 23, 2026 3mo ago
CVE-2026-9302	medium	5.3/10	546669204 vps-inventory-monitoring VpsTest Console VpsTest.php eval code injection	May 23, 2026 3mo ago
CVE-2026-8350	high	7.5/10	Concrete CMS 9.5.0 and below is vulnerable to missing authorization in the bulk_user_assignment.php which can lead to privilege escalation to Administrative Group	May 21, 2026 3mo ago
CVE-2026-8134	critical	9.4/10	Concrete CMS 9.5.0 and below is vulnerable to Authenticated RCE via Composer customTemplate Path Traversal leading to PHP File Inclusion	May 21, 2026 3mo ago
CVE-2026-48249	high	8.2/10	Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in rm/incs/mobile_login.inc.php	May 21, 2026 3mo ago
CVE-2026-48248	high	8.2/10	Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/login.inc.php	May 21, 2026 3mo ago
CVE-2026-48247	high	8.2/10	Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/functions.inc.php	May 21, 2026 3mo ago
CVE-2026-48246	high	8.2/10	Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in ajax/reports.php	May 21, 2026 3mo ago
CVE-2026-48245	medium	6.9/10	Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in tables.php	May 21, 2026 3mo ago
CVE-2026-48244	medium	6.9/10	Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in settings.inc.php	May 21, 2026 3mo ago
CVE-2026-48243	medium	6.9/10	Open ISES Tickets < 3.44.2 Hardcoded WhitePages API Key in wp1.php	May 21, 2026 3mo ago
CVE-2026-48242	critical	9.2/10	Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in import_mdb.php	May 21, 2026 3mo ago
CVE-2026-48241	critical	9.2/10	Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in loader.php	May 21, 2026 3mo ago
CVE-2026-48240	high	7.1/10	Open ISES Tickets < 3.44.2 SQL Injection via ajax/statistics.php tick_id and f_tick_id Parameters	May 21, 2026 3mo ago
CVE-2026-48239	high	7.1/10	Open ISES Tickets < 3.44.2 SQL Injection via ajax/reports.php tick_id Parameter	May 21, 2026 3mo ago
CVE-2026-48238	high	7.1/10	Open ISES Tickets < 3.44.2 SQL Injection via ajax/mobile_main.php id Parameter	May 21, 2026 3mo ago
CVE-2026-48237	high	7.1/10	Open ISES Tickets < 3.44.2 SQL Injection via message.php frm_ticket_id and frm_resp_id Parameters	May 21, 2026 3mo ago
CVE-2026-48236	high	7.1/10	Open ISES Tickets < 3.44.2 SQL Injection via db_loader.php Multiple Parameters	May 21, 2026 3mo ago
CVE-2026-48235	high	8.8/10	Open ISES Tickets < 3.44.2 SQL Injection in incs/remotes.inc.php via External GPS Tracker Data	May 21, 2026 3mo ago
CVE-2026-48234	high	7.1/10	Open ISES Tickets < 3.44.2 SQL Injection via portal/ajax/list_requests.php sort and dir Parameters	May 21, 2026 3mo ago
CVE-2026-48233	high	7.1/10	Open ISES Tickets < 3.44.2 SQL Injection via ajax/sit_incidents.php offset Parameter	May 21, 2026 3mo ago
CVE-2026-48232	high	7.1/10	Open ISES Tickets < 3.44.2 SQL Injection via ajax/fullsit_incidents.php offset Parameter	May 21, 2026 3mo ago
CVE-2026-48231	high	7.1/10	Open ISES Tickets < 3.44.2 SQL Injection via tables.php Multiple Parameters	May 21, 2026 3mo ago
CVE-2026-48230	medium	5.1/10	Open ISES Tickets < 3.44.2 Reflected XSS via ticketsmdb_import.php Multiple POST Parameters	May 21, 2026 3mo ago
CVE-2026-48229	medium	5.1/10	Open ISES Tickets < 3.44.2 Reflected XSS via routes_i.php ticket_id Parameter	May 21, 2026 3mo ago
CVE-2026-48228	medium	5.1/10	Open ISES Tickets < 3.44.2 Reflected XSS via patient_w.php id and ticket_id Parameters	May 21, 2026 3mo ago