Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,965

All time

Critical · Active

12,189

CVSS ≥ 9.0

New · 14 days

3,271

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 6511–6540 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-3525	low	3.5/10	Campcodes Online Event Management System index.php cross site scripting	Apr 10, 2024 2y ago
CVE-2024-3524	low	3.5/10	Campcodes Online Event Management System process.php cross site scripting	Apr 9, 2024 2y ago
CVE-2024-3523	medium	6.3/10	Campcodes Online Event Management System index.php sql injection	Apr 9, 2024 2y ago
CVE-2024-3522	medium	6.3/10	Campcodes Online Event Management System process.php sql injection	Apr 9, 2024 2y ago
CVE-2024-3521	medium	4.7/10	Byzoro Smart S80 Management Platform userattestation.php unrestricted upload	Apr 9, 2024 2y ago
CVE-2024-2501	high	7.5/10	Hubbub Lite – Fast, Reliable Social Network Sharing Buttons <= 1.33.1 - PHP Object Injection	Apr 9, 2024 2y ago
CVE-2024-1792	high	7.5/10	CMB2 <= 2.10.1 - Authenticated (Contributor+) PHP Object Injection	Apr 9, 2024 2y ago
CVE-2024-1813	critical	9.8/10	Simple Job Board <= 2.11.0 - Unauthenticated PHP Object Injection via Job Application Fields	Apr 9, 2024 2y ago
CVE-2024-2693	high	8.8/10	Link Whisper Free <= 0.7.1 - Authenticated (Contributor+) PHP Object Injection	Apr 9, 2024 2y ago
CVE-2024-3466	medium	5.5/10	SourceCodester Laundry Management System Pengeluaran.php laporan_filter sql injection	Apr 8, 2024 2y ago
CVE-2024-3465	medium	6.3/10	SourceCodester Laundry Management System Transaki.php laporan_filter sql injection	Apr 8, 2024 2y ago
CVE-2024-3464	medium	6.3/10	SourceCodester Laundry Management System Pelanggan.php laporan_filter sql injection	Apr 8, 2024 2y ago
CVE-2024-3458	medium	6.3/10	Netentsec NS-ASG Application Security Gateway add_ikev2.php sql injection	Apr 8, 2024 2y ago
CVE-2024-3457	medium	6.3/10	Netentsec NS-ASG Application Security Gateway config_ISCGroupNoCache.php sql injection	Apr 8, 2024 2y ago
CVE-2024-3456	medium	6.3/10	Netentsec NS-ASG Application Security Gateway config_Anticrack.php sql injection	Apr 8, 2024 2y ago
CVE-2024-3455	medium	6.3/10	Netentsec NS-ASG Application Security Gateway add_postlogin.php sql injection	Apr 8, 2024 2y ago
CVE-2024-3443	low	3.5/10	SourceCodester Prison Management System apply_leave.php cross site scripting	Apr 8, 2024 2y ago
CVE-2024-3442	medium	6.3/10	SourceCodester Prison Management System delete_leave.php sql injection	Apr 8, 2024 2y ago
CVE-2024-3441	medium	6.3/10	SourceCodester Prison Management System edit-profile.php sql injection	Apr 8, 2024 2y ago
CVE-2024-3440	medium	4.7/10	SourceCodester Prison Management System edit_profile.php sql injection	Apr 8, 2024 2y ago
CVE-2011-10006	low	3.5/10	GamerZ WP-PostRatings wp-postratings.php cross site scripting	Apr 8, 2024 2y ago
CVE-2024-3439	high	7.3/10	SourceCodester Prison Management System login.php sql injection	Apr 8, 2024 2y ago
CVE-2024-3438	high	7.3/10	SourceCodester Prison Management System login.php sql injection	Apr 8, 2024 2y ago
CVE-2024-3437	medium	6.9/10	SourceCodester Prison Management System Avatar add-admin.php unrestricted upload	Apr 8, 2024 2y ago
CVE-2024-3436	medium	6.3/10	SourceCodester Prison Management System Avatar edit-photo.php unrestricted upload	Apr 7, 2024 2y ago
CVE-2024-3433	low	3.5/10	PuneethReddyHC Event Management register.php cross site scripting	Apr 7, 2024 2y ago
CVE-2024-3432	medium	5.5/10	PuneethReddyHC Event Management register.php sql injection	Apr 7, 2024 2y ago
CVE-2024-3428	low	3.5/10	SourceCodester Online Courseware edit.php cross site scripting	Apr 7, 2024 2y ago
CVE-2024-31277	high	8.7/10	WordPress Product Designer plugin <= 1.0.32 - PHP Object Injection vulnerability	Apr 7, 2024 2y ago
CVE-2024-31308	medium	4.4/10	WordPress WP Import Export Lite & WP Import Export plugin <= 3.9.26 - PHP Object Injection vulnerability	Apr 7, 2024 2y ago