Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,965

All time

Critical · Active

12,189

CVSS ≥ 9.0

New · 14 days

3,271

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 6601–6630 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-3144	medium	4.3/10	DedeCMS makehtml_spec.php cross-site request forgery	Apr 2, 2024 2y ago
CVE-2024-3143	medium	4.3/10	DedeCMS member_rank.php cross-site request forgery	Apr 2, 2024 2y ago
CVE-2024-3129	medium	6.3/10	SourceCodester Image Accordion Gallery App add-image.php unrestricted upload	Apr 1, 2024 2y ago
CVE-2016-15038	medium	6.5/10	NUUO NVRmini 2 deletefile.php path traversal	Apr 1, 2024 2y ago
CVE-2014-125110	low	3.5/10	wp-file-upload Plugin wfu_ajaxactions.php wfu_ajax_action_callback cross site scripting	Mar 31, 2024 2y ago
CVE-2024-31094	high	8.5/10	WordPress Filter Custom Fields & Taxonomies Light plugin <= 1.05 - PHP Object Injection vulnerability	Mar 31, 2024 2y ago
CVE-2020-36828	low	3.5/10	DiscuzX install_function.php show_next_step cross site scripting	Mar 31, 2024 2y ago
CVE-2015-10131	low	3.5/10	chrisy TFO Graphviz Plugin tfo-graphviz-admin.php admin_page cross site scripting	Mar 31, 2024 2y ago
CVE-2024-3117	medium	4.7/10	YouDianCMS ChannelAction.class.php unrestricted upload	Mar 31, 2024 2y ago
CVE-2024-3091	low	2.4/10	PHPGurukul Emergency Ambulance Hiring Portal Search Request Page search.php cross site scripting	Mar 30, 2024 2y ago
CVE-2024-3090	low	2.4/10	PHPGurukul Emergency Ambulance Hiring Portal Add Ambulance Page add-ambulance.php cross site scripting	Mar 30, 2024 2y ago
CVE-2024-3089	medium	4.3/10	PHPGurukul Emergency Ambulance Hiring Portal Manage Ambulance Page manage-ambulance.php cross-site request forgery	Mar 30, 2024 2y ago
CVE-2024-3018	high	8.8/10	Essential Addons for Elementor <= 5.9.13 - Authenticated (Author+) PHP Object Injection via error_resetpassword	Mar 30, 2024 2y ago
CVE-2024-3088	high	7.3/10	PHPGurukul Emergency Ambulance Hiring Portal Forgot Password Page forgot-password.php sql injection	Mar 30, 2024 2y ago
CVE-2024-3087	high	7.3/10	PHPGurukul Emergency Ambulance Hiring Portal Ambulance Tracking Page ambulance-tracking.php sql injection	Mar 30, 2024 2y ago
CVE-2024-3086	medium	4.3/10	PHPGurukul Emergency Ambulance Hiring Portal Ambulance Tracking Page ambulance-tracking.php cross site scripting	Mar 30, 2024 2y ago
CVE-2024-3085	high	7.3/10	PHPGurukul Emergency Ambulance Hiring Portal Admin Login Page login.php sql injection	Mar 30, 2024 2y ago
CVE-2024-3084	medium	4.3/10	PHPGurukul Emergency Ambulance Hiring Portal Hire an Ambulance Page cross site scripting	Mar 30, 2024 2y ago
CVE-2024-1872	high	8.8/10	Button <= 1.1.27 - Authenticated (Contributor+) PHP Object Injection in button_shortcode	Mar 29, 2024 2y ago
CVE-2024-1858	medium	5.4/10	Lightbox slider – Responsive Lightbox Gallery <= 1.9.9 - Authenticated (Contributor+) PHP Object Injection	Mar 29, 2024 2y ago
CVE-2024-3042	medium	6.3/10	SourceCodester Simple Subscription Website manage_user.php sql injection	Mar 28, 2024 2y ago
CVE-2024-3041	medium	6.3/10	Netentsec NS-ASG Application Security Gateway listloginfo.php sql injection	Mar 28, 2024 2y ago
CVE-2024-30221	medium	5.4/10	WordPress Sunshine Photo Cart plugin <= 3.1.1 - PHP Object Injection vulnerability	Mar 28, 2024 2y ago
CVE-2024-30222	high	8.5/10	WordPress ARMember plugin <= 4.0.26 - PHP Object Injection vulnerability	Mar 28, 2024 2y ago
CVE-2024-30223	critical	9.0/10	WordPress ARMember plugin <= 4.0.26 - Unauthenticated PHP Object Injection vulnerability	Mar 28, 2024 2y ago
CVE-2024-30224	critical	10.0/10	WordPress WholesaleX plugin <= 1.3.2 - Unauthenticated PHP Object Injection vulnerability	Mar 28, 2024 2y ago
CVE-2024-30225	critical	10.0/10	WordPress WP Migrate plugin <= 2.6.10 - Unauthenticated PHP Object Injection vulnerability	Mar 28, 2024 2y ago
CVE-2024-30226	critical	9.0/10	WordPress BetterDocs plugin <= 3.3.3 - Unauthenticated PHP Object Injection vulnerability	Mar 28, 2024 2y ago
CVE-2024-30227	critical	9.0/10	WordPress Geo Controller plugin <= 8.6.4 - PHP Object Injection vulnerability	Mar 28, 2024 2y ago
CVE-2024-30228	critical	9.9/10	WordPress Hercules Core plugin <= 6.4 - Auth. PHP Object Injection vulnerability	Mar 28, 2024 2y ago