Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,965

All time

Critical · Active

12,189

CVSS ≥ 9.0

New · 14 days

3,271

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 6661–6690 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-28108	medium	4.7/10	phpMyFAQ Stored HTML Injection at contentLink	Mar 25, 2024 2y ago
CVE-2024-28107	high	8.8/10	phpMyFAQ SQL injections at insertentry & saveentry	Mar 25, 2024 2y ago
CVE-2024-28106	medium	4.3/10	phpMyFAQ Stored XSS at FAQ News Content	Mar 25, 2024 2y ago
CVE-2024-28105	high	7.2/10	phpMyFAQ's File Upload Bypass at Category Image Leads to RCE	Mar 25, 2024 2y ago
CVE-2024-27300	medium	5.5/10	phpMyFAQ Stored XSS at user email	Mar 25, 2024 2y ago
CVE-2024-27299	high	8.8/10	phpMyFAQ SQL Injection at "Save News"	Mar 25, 2024 2y ago
CVE-2020-36825	medium	5.3/10	cyberaz0r WebRAT api.php download_file unrestricted upload	Mar 24, 2024 2y ago
CVE-2024-2832	low	3.5/10	Campcodes Online Shopping System offersmail.php cross site scripting	Mar 23, 2024 2y ago
CVE-2024-2025	high	8.8/10	BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.20 - Authenticated (Subscriber+) PHP Object Injection in get_simple_request	Mar 23, 2024 2y ago
CVE-2024-2823	medium	4.3/10	DedeCMS mda_main.php cross-site request forgery	Mar 22, 2024 2y ago
CVE-2024-2822	medium	4.3/10	DedeCMS vote_edit.php cross-site request forgery	Mar 22, 2024 2y ago
CVE-2024-2821	medium	4.3/10	DedeCMS friendlink_edit.php cross-site request forgery	Mar 22, 2024 2y ago
CVE-2024-2820	medium	4.3/10	DedeCMS baidunews.php cross-site request forgery	Mar 22, 2024 2y ago
CVE-2024-2780	low	3.5/10	Campcodes Online Marriage Registration System admin-profile.php cross site scripting	Mar 22, 2024 2y ago
CVE-2024-2779	low	3.5/10	Campcodes Online Marriage Registration System application-bwdates-reports-details.php cross site scripting	Mar 22, 2024 2y ago
CVE-2024-2778	low	3.5/10	Campcodes Online Marriage Registration System search.php cross site scripting	Mar 22, 2024 2y ago
CVE-2024-2777	medium	5.3/10	Campcodes/PHPGurukul Online Marriage Registration System application-bwdates-reports-details.php sql injection	Mar 22, 2024 2y ago
CVE-2024-2776	medium	6.3/10	Campcodes Online Marriage Registration System search.php sql injection	Mar 21, 2024 2y ago
CVE-2024-2775	low	3.5/10	Campcodes Online Marriage Registration System user-profile.php cross site scripting	Mar 21, 2024 2y ago
CVE-2024-2774	medium	6.3/10	Campcodes Online Marriage Registration System search.php sql injection	Mar 21, 2024 2y ago
CVE-2024-2773	low	3.5/10	Campcodes Online Marriage Registration System search.php cross site scripting	Mar 21, 2024 2y ago
CVE-2024-2770	medium	6.3/10	Campcodes Complete Online Beauty Parlor Management System contact-us.php sql injection	Mar 21, 2024 2y ago
CVE-2024-2769	medium	5.3/10	Campcodes Complete Online Beauty Parlor Management System admin-profile.php sql injection	Mar 21, 2024 2y ago
CVE-2024-2768	medium	6.3/10	Campcodes Complete Online Beauty Parlor Management System edit-services.php sql injection	Mar 21, 2024 2y ago
CVE-2024-2767	medium	6.3/10	Campcodes Complete Online Beauty Parlor Management System forgot-password.php sql injection	Mar 21, 2024 2y ago
CVE-2024-2766	medium	6.3/10	Campcodes Complete Online Beauty Parlor Management System index.php sql injection	Mar 21, 2024 2y ago
CVE-2024-27985	medium	5.4/10	WordPress PropertyHive plugin <= 2.0.9 - PHP Object Injection vulnerability	Mar 21, 2024 2y ago
CVE-2024-2754	medium	4.7/10	SourceCodester Complete E-Commerce Site users_photo.php unrestricted upload	Mar 21, 2024 2y ago
CVE-2024-2720	low	3.5/10	Campcodes Complete Online DJ Booking System aboutus.php cross site scripting	Mar 20, 2024 2y ago
CVE-2024-2719	low	3.5/10	Campcodes Complete Online DJ Booking System admin-profile.php cross site scripting	Mar 20, 2024 2y ago