Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,965

All time

Critical · Active

12,189

CVSS ≥ 9.0

New · 14 days

3,236

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 6781–6810 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-2351	medium	6.3/10	CodeAstro Ecommerce Site Search action.php sql injection	Mar 9, 2024 2y ago
CVE-2024-2333	medium	6.3/10	CodeAstro Membership Management System add_members.php sql injection	Mar 9, 2024 2y ago
CVE-2024-2332	medium	6.3/10	SourceCodester Online Mobile Management Store HTTP GET Request manage_category.php sql injection	Mar 9, 2024 2y ago
CVE-2024-2330	medium	6.3/10	Netentsec NS-ASG Application Security Gateway index.php sql injection	Mar 9, 2024 2y ago
CVE-2024-2285	low	3.5/10	boyiddha Automated-Mess-Management-System member_edit.php cross site scripting	Mar 8, 2024 2y ago
CVE-2024-2284	low	3.5/10	boyiddha Automated-Mess-Management-System Chat Book chat.php cross site scripting	Mar 8, 2024 2y ago
CVE-2024-2283	medium	6.3/10	boyiddha Automated-Mess-Management-System view.php sql injection	Mar 8, 2024 2y ago
CVE-2024-2282	high	7.3/10	boyiddha Automated-Mess-Management-System Login Page index.php sql injection	Mar 8, 2024 2y ago
CVE-2024-2281	medium	6.3/10	boyiddha Automated-Mess-Management-System Setting index.php access control	Mar 8, 2024 2y ago
CVE-2024-2272	medium	6.3/10	keerti1924 Online-Book-Store-Website HTTP POST Request home.php sql injection	Mar 7, 2024 2y ago
CVE-2024-2271	medium	6.3/10	keerti1924 Online-Book-Store-Website HTTP POST Request shop.php sql injection	Mar 7, 2024 2y ago
CVE-2024-2270	medium	4.3/10	keerti1924 Online-Book-Store-Website signup.php cross site scripting	Mar 7, 2024 2y ago
CVE-2024-2269	medium	6.3/10	keerti1924 Online-Book-Store-Website search.php sql injection	Mar 7, 2024 2y ago
CVE-2024-2267	medium	4.3/10	keerti1924 Online-Book-Store-Website shop.php logic error	Mar 7, 2024 2y ago
CVE-2024-2266	low	3.5/10	keerti1924 Secret-Coder-PHP-Project Login Page login.php cross site scripting	Mar 7, 2024 2y ago
CVE-2024-2265	medium	5.3/10	keerti1924 PHP-MYSQL-User-Login-System login.sql inclusion of sensitive information in source code	Mar 7, 2024 2y ago
CVE-2024-2264	high	7.3/10	keerti1924 PHP-MYSQL-User-Login-System login.php sql injection	Mar 7, 2024 2y ago
CVE-2024-1773	high	8.8/10	PDF Invoices and Packing Slips For WooCommerce <= 1.3.7 - Authenticated (Subscriber+) PHP Object Injection	Mar 7, 2024 2y ago
CVE-2024-2054	—	—	Artica Proxy Unauthenticated PHP Deserialization Vulnerability	Mar 5, 2024 2y ago
CVE-2024-0825	high	8.8/10	Vimeography: Vimeo Video Gallery WordPress Plugin <= 2.3.2 - Authenticated (Contributor+) PHP Object Injection	Mar 5, 2024 2y ago
CVE-2024-1731	high	8.8/10	Auto Refresh Single Page <= 1.1 - Authenticated (Contributor+) PHP Object Injection	Mar 5, 2024 2y ago
CVE-2024-2168	medium	4.7/10	SourceCodester Online Tours & Travels Management System HTTP POST Request expense_category.php sql injection	Mar 4, 2024 2y ago
CVE-2024-2156	medium	6.3/10	SourceCodester Best POS Management System admin_class.php sql injection	Mar 4, 2024 2y ago
CVE-2024-2155	medium	4.3/10	SourceCodester Best POS Management System index.php file inclusion	Mar 4, 2024 2y ago
CVE-2024-2154	medium	6.3/10	SourceCodester Online Mobile Management Store view_product.php sql injection	Mar 4, 2024 2y ago
CVE-2024-2153	medium	6.3/10	SourceCodester Online Mobile Management Store view_order.php sql injection	Mar 4, 2024 2y ago
CVE-2024-2152	medium	4.7/10	SourceCodester Online Mobile Management Store manage_product.php sql injection	Mar 4, 2024 2y ago
CVE-2024-2149	medium	4.7/10	CodeAstro Membership Management System settings.php sql injection	Mar 3, 2024 2y ago
CVE-2024-2148	medium	6.3/10	SourceCodester Online Mobile Management Store Users.php unrestricted upload	Mar 3, 2024 2y ago
CVE-2024-2147	high	7.3/10	SourceCodester Online Mobile Management Store login.php sql injection	Mar 3, 2024 2y ago