Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,965

All time

Critical · Active

12,189

CVSS ≥ 9.0

New · 14 days

3,271

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 6361–6390 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-4717	medium	5.3/10	Campcodes Complete Web-Based School Management System update_classroom.php cross site scripting	May 10, 2024 2y ago
CVE-2024-4716	medium	5.3/10	Campcodes Complete Web-Based School Management System update_exam.php cross site scripting	May 10, 2024 2y ago
CVE-2024-4715	medium	5.3/10	Campcodes Complete Web-Based School Management System update_grade.php cross site scripting	May 10, 2024 2y ago
CVE-2024-4714	medium	5.3/10	Campcodes Complete Web-Based School Management System update_subject.php cross site scripting	May 10, 2024 2y ago
CVE-2024-4713	medium	5.3/10	Campcodes Complete Web-Based School Management System all_teacher.php cross site scripting	May 10, 2024 2y ago
CVE-2024-4699	medium	5.3/10	D-Link DAR-8000-10 importhtml.php deserialization	May 10, 2024 2y ago
CVE-2024-4688	medium	5.3/10	Campcodes Complete Web-Based School Management System conversation_history_admin.php cross site scripting	May 9, 2024 2y ago
CVE-2024-4687	medium	5.3/10	Campcodes Complete Web-Based School Management System create_events.php cross site scripting	May 9, 2024 2y ago
CVE-2024-4686	medium	5.3/10	Campcodes Complete Web-Based School Management System emarks_range_grade_update_form.php cross site scripting	May 9, 2024 2y ago
CVE-2024-2290	high	7.2/10	Advanced Ads – Ad Manager & AdSense <= 1.52.1 - Authenticated (Admin+) PHP Object Injection	May 9, 2024 2y ago
CVE-2024-3070	critical	9.8/10	Last Viewed Posts by WPBeginner <= 1.0.0 - Unauthenticated PHP Object Injection	May 9, 2024 2y ago
CVE-2024-3954	high	8.8/10	Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.38 - Authenticated (Contributor+) PHP Object Injection	May 9, 2024 2y ago
CVE-2024-4685	medium	5.3/10	Campcodes Complete Web-Based School Management System exam_timetable.php cross site scripting	May 9, 2024 2y ago
CVE-2024-4684	medium	5.3/10	Campcodes Complete Web-Based School Management System exam_timetable_grade_wise.php cross site scripting	May 9, 2024 2y ago
CVE-2024-4683	medium	5.3/10	Campcodes Complete Web-Based School Management System exam_timetable_insert_form.php cross site scripting	May 9, 2024 2y ago
CVE-2024-4682	medium	5.3/10	Campcodes Complete Web-Based School Management System exam_timetable_update_form.php cross site scripting	May 9, 2024 2y ago
CVE-2024-4678	medium	5.3/10	Campcodes Complete Web-Based School Management System find_friends.php cross site scripting	May 9, 2024 2y ago
CVE-2024-4677	medium	5.3/10	Campcodes Complete Web-Based School Management System my_student_exam_marks1.php cross site scripting	May 9, 2024 2y ago
CVE-2024-4676	medium	5.3/10	Campcodes Complete Web-Based School Management System range_grade_text.php cross site scripting	May 9, 2024 2y ago
CVE-2024-34433	medium	4.4/10	WordPress One Click Demo Import plugin <=3.2.0 - PHP Object Injection vulnerability	May 9, 2024 2y ago
CVE-2024-4606	medium	5.4/10	WordPress Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder plugin <= 2.0.3 - PHP Object Injection vulnerability	May 9, 2024 2y ago
CVE-2024-4675	medium	5.3/10	Campcodes Complete Web-Based School Management System show_events.php cross site scripting	May 9, 2024 2y ago
CVE-2024-4674	medium	5.3/10	Campcodes Complete Web-Based School Management System show_friend_request.php cross site scripting	May 9, 2024 2y ago
CVE-2024-4673	medium	5.3/10	Campcodes Complete Web-Based School Management System show_student_grade_subject.php cross site scripting	May 9, 2024 2y ago
CVE-2024-4672	medium	5.3/10	Campcodes Complete Web-Based School Management System show_student_subject.php cross site scripting	May 9, 2024 2y ago
CVE-2024-4654	medium	6.3/10	BlueNet Technology Clinical Browsing System cloudInterface.php sql injection	May 8, 2024 2y ago
CVE-2024-4653	medium	6.3/10	BlueNet Technology Clinical Browsing System outIndex.php sql injection	May 8, 2024 2y ago
CVE-2024-4652	low	3.5/10	Campcodes Complete Web-Based School Management System show_teacher2.php cross site scripting	May 8, 2024 2y ago
CVE-2024-4651	low	3.5/10	Campcodes Complete Web-Based School Management System student_attendance_history1.php cross site scripting	May 8, 2024 2y ago
CVE-2024-4650	low	3.5/10	Campcodes Complete Web-Based School Management System student_due_payment.php cross site scripting	May 8, 2024 2y ago