Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,965

All time

Critical · Active

12,189

CVSS ≥ 9.0

New · 14 days

3,271

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 6421–6450 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-4514	low	3.5/10	Campcodes Complete Web-Based School Management System timetable_insert_form.php cross site scripting	May 6, 2024 2y ago
CVE-2024-4513	low	3.5/10	Campcodes Complete Web-Based School Management System timetable_update_form.php cross site scripting	May 6, 2024 2y ago
CVE-2024-4512	low	3.5/10	SourceCodester Prison Management System edit-profile.php cross site scripting	May 6, 2024 2y ago
CVE-2024-4510	medium	4.7/10	Ruijie RG-UAC arp_add_commit.php os command injection	May 6, 2024 2y ago
CVE-2024-4509	medium	4.7/10	Ruijie RG-UAC add_commit.php os command injection	May 6, 2024 2y ago
CVE-2024-4508	medium	4.7/10	Ruijie RG-UAC static_route_edit_ipv6.php os command injection	May 6, 2024 2y ago
CVE-2024-4507	medium	4.7/10	Ruijie RG-UAC static_route_add_ipv6.php os command injection	May 5, 2024 2y ago
CVE-2024-4506	medium	4.7/10	Ruijie RG-UAC ip_addr_edit_commit.php os command injection	May 5, 2024 2y ago
CVE-2024-4505	medium	4.7/10	Ruijie RG-UAC ip_addr_add_commit.php os command injection	May 5, 2024 2y ago
CVE-2024-4504	medium	4.7/10	Ruijie RG-UAC commit.php os command injection	May 5, 2024 2y ago
CVE-2024-4503	medium	4.7/10	Ruijie RG-UAC dhcp_relay_commit.php os command injection	May 5, 2024 2y ago
CVE-2024-4502	medium	4.7/10	Ruijie RG-UAC dhcp_client_commit.php os command injection	May 5, 2024 2y ago
CVE-2024-4501	medium	4.7/10	Ruijie RG-UAC commit.php os command injection	May 5, 2024 2y ago
CVE-2024-4500	medium	6.3/10	SourceCodester Prison Management System edit-photo.php unrestricted upload	May 5, 2024 2y ago
CVE-2024-3240	high	8.8/10	ConvertPlug <= 3.5.25 - Authenticated (Contributor+) PHP Object Injection	May 4, 2024 2y ago
CVE-2023-7064	high	7.5/10	Shortcodes and extra features for Phlox theme <= 2.17.5 - Authenticated (Subscriber+) PHP Object Injection via auxin_template_control_importer	May 2, 2024 2y ago
CVE-2024-1897	high	7.5/10	Grid Gallery – Photo Image Grid Gallery <= 1.4.3 - Authenticated (Contributor+) PHP Object Injection via shortcode	May 2, 2024 2y ago
CVE-2024-1896	high	7.5/10	Photo Gallery <= 1.4.2 - Authenticated(Contributor+) PHP Object Injection via Shortcode	May 2, 2024 2y ago
CVE-2024-3591	—	—	WordPress Geo Controller < 8.6.5 - PHP Object Injection	May 1, 2024 2y ago
CVE-2024-4349	high	7.3/10	SourceCodester Pisay Online E-Learning System controller.php unrestricted upload	Apr 30, 2024 2y ago
CVE-2024-1895	high	7.5/10	Event Monster <= 1.3.9 - Authenticated(Contributor+) PHP Object Injection via Custom Meta	Apr 30, 2024 2y ago
CVE-2024-33553	critical	9.0/10	WordPress XStore Core plugin <= 5.3.5 - Unauthenticated PHP Object Injection vulnerability	Apr 29, 2024 2y ago
CVE-2024-33641	medium	5.4/10	WordPress Custom field finder plugin <= 0.3 - PHP Object Injection vulnerability	Apr 29, 2024 2y ago
CVE-2024-2757	high	7.5/10	PHP mb_encode_mimeheader runs endlessly for some inputs	Apr 29, 2024 2y ago
CVE-2024-3096	medium	6.5/10	PHP function password_verify can erroneously return true when argument contains NUL	Apr 29, 2024 2y ago
CVE-2024-4294	medium	6.3/10	PHPGurukul Doctor Appointment Management System view-appointment-detail.php resource injection	Apr 27, 2024 2y ago
CVE-2024-4293	low	3.5/10	PHPGurukul Doctor Appointment Management System appointment-bwdates-reports-details.php cross site scripting	Apr 27, 2024 2y ago
CVE-2024-4257	medium	6.3/10	BlueNet Technology Clinical Browsing System deleteStudy.php sql injection	Apr 27, 2024 2y ago
CVE-2024-4255	medium	4.7/10	Ruijie RG-UAC gre_edit_commit.php os command injection	Apr 27, 2024 2y ago
CVE-2024-32817	medium	4.4/10	WordPress Import and export users and customers plugin <= 1.26.2 - PHP Object Injection vulnerability	Apr 24, 2024 2y ago