Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,965

All time

Critical · Active

12,189

CVSS ≥ 9.0

New · 14 days

3,271

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 6751–6780 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-2529	medium	6.3/10	MAGESH-K21 Online-College-Event-Hall-Reservation-System rooms.php unrestricted upload	Mar 16, 2024 2y ago
CVE-2024-2528	medium	6.3/10	MAGESH-K21 Online-College-Event-Hall-Reservation-System update-rooms.php sql injection	Mar 16, 2024 2y ago
CVE-2024-2527	medium	6.3/10	MAGESH-K21 Online-College-Event-Hall-Reservation-System rooms.php sql injection	Mar 16, 2024 2y ago
CVE-2024-2526	low	3.5/10	MAGESH-K21 Online-College-Event-Hall-Reservation-System rooms.php cross site scripting	Mar 16, 2024 2y ago
CVE-2024-2525	low	3.5/10	MAGESH-K21 Online-College-Event-Hall-Reservation-System receipt.php cross site scripting	Mar 16, 2024 2y ago
CVE-2024-2524	medium	6.3/10	MAGESH-K21 Online-College-Event-Hall-Reservation-System receipt.php sql injection	Mar 16, 2024 2y ago
CVE-2024-2523	low	3.5/10	MAGESH-K21 Online-College-Event-Hall-Reservation-System booktime.php cross site scripting	Mar 16, 2024 2y ago
CVE-2024-2522	medium	6.3/10	MAGESH-K21 Online-College-Event-Hall-Reservation-System booktime.php sql injection	Mar 16, 2024 2y ago
CVE-2024-2521	low	3.5/10	MAGESH-K21 Online-College-Event-Hall-Reservation-System bookdate.php cross site scripting	Mar 16, 2024 2y ago
CVE-2024-2520	medium	6.3/10	MAGESH-K21 Online-College-Event-Hall-Reservation-System bookdate.php sql injection	Mar 16, 2024 2y ago
CVE-2024-2519	low	3.5/10	MAGESH-K21 Online-College-Event-Hall-Reservation-System navbar.php cross site scripting	Mar 16, 2024 2y ago
CVE-2024-2518	low	3.5/10	MAGESH-K21 Online-College-Event-Hall-Reservation-System book_history.php cross site scripting	Mar 16, 2024 2y ago
CVE-2024-2517	medium	6.3/10	MAGESH-K21 Online-College-Event-Hall-Reservation-System book_history.php sql injection	Mar 16, 2024 2y ago
CVE-2024-2516	medium	6.3/10	MAGESH-K21 Online-College-Event-Hall-Reservation-System home.php sql injection	Mar 16, 2024 2y ago
CVE-2024-2515	low	3.5/10	MAGESH-K21 Online-College-Event-Hall-Reservation-System home.php cross site scripting	Mar 16, 2024 2y ago
CVE-2024-1685	high	8.8/10	Social Media Share Buttons <= 2.1.0 - Authenticated (Subscriber+) PHP Object Injection	Mar 16, 2024 2y ago
CVE-2024-2514	high	7.3/10	MAGESH-K21 Online-College-Event-Hall-Reservation-System login.php sql injection	Mar 15, 2024 2y ago
CVE-2024-2497	medium	4.7/10	RaspAP raspap-webgui HTTP POST Request provider.php code injection	Mar 15, 2024 2y ago
CVE-2024-2483	medium	4.3/10	Surya2Developer Hostel Management Service Password Change change-password.php cross-site request forgery	Mar 15, 2024 2y ago
CVE-2024-2482	low	3.7/10	Surya2Developer Hostel Management Service HTTP POST Request check_availability.php observable response discrepancy	Mar 15, 2024 2y ago
CVE-2024-2481	medium	6.5/10	Surya2Developer Hostel Management System manage-students.php access control	Mar 15, 2024 2y ago
CVE-2024-2418	medium	6.3/10	SourceCodester Best POS Management System view_order.php sql injection	Mar 13, 2024 2y ago
CVE-2024-1950	high	7.5/10	Product Carousel Slider & Grid Ultimate for WooCommerce <= 1.9.7 - Authenticated(Contributor+) PHP Object Injection	Mar 13, 2024 2y ago
CVE-2024-1951	high	7.5/10	Logo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid <= 1.3.8 - Authenticated(Contributor+) PHP Object Injection	Mar 13, 2024 2y ago
CVE-2024-2006	high	8.8/10	Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.7 - Authenticated (Contributor+) PHP Object Injection in outpost_shortcode_metabox_markup	Mar 13, 2024 2y ago
CVE-2024-1772	high	8.8/10	Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio <= 3.6.4 - Authenticated (Contributor+) PHP Object Injection	Mar 13, 2024 2y ago
CVE-2024-2406	medium	5.4/10	Gacjie Server Upload.php index unrestricted upload	Mar 12, 2024 2y ago
CVE-2024-2394	medium	4.7/10	SourceCodester Employee Management System add-admin.php unrestricted upload	Mar 12, 2024 2y ago
CVE-2024-2393	medium	6.3/10	SourceCodester CRUD without Page Reload add_user.php sql injection	Mar 12, 2024 2y ago
CVE-2024-2355	low	3.7/10	keerti1924 Secret-Coder-PHP-Project secret_coder.sql inclusion of sensitive information in source code	Mar 10, 2024 2y ago