Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,965

All time

Critical · Active

12,189

CVSS ≥ 9.0

New · 14 days

3,236

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 6871–6900 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-1750	medium	5.6/10	TemmokuMVC Image Download images_get_down.php img_replace deserialization	Feb 22, 2024 2y ago
CVE-2024-1705	medium	5.6/10	Shopwind Installation DefaultController.php actionCreate code injection	Feb 21, 2024 2y ago
CVE-2024-1702	medium	6.3/10	keerti1924 PHP-MYSQL-User-Login-System edit.php sql injection	Feb 21, 2024 2y ago
CVE-2024-25117	medium	6.8/10	php-svg-lib lacks path validation on font through SVG inline styles	Feb 21, 2024 2y ago
CVE-2024-1701	medium	5.3/10	keerti1924 PHP-MYSQL-User-Login-System edit.php access control	Feb 21, 2024 2y ago
CVE-2024-1700	medium	4.3/10	keerti1924 PHP-MYSQL-User-Login-System signup.php cross site scripting	Feb 21, 2024 2y ago
CVE-2024-0658	medium	4.4/10	Insert PHP Code Snippet <= 1.3.4 - Authenticated (Admin+) Stored Cross-Site Scripting	Feb 20, 2024 2y ago
CVE-2024-1530	medium	6.3/10	ECshop view_sendlist.php sql injection	Feb 15, 2024 2y ago
CVE-2023-46615	medium	5.4/10	WordPress KD Coming Soon Plugin <= 1.7 is vulnerable to PHP Object Injection	Feb 12, 2024 2y ago
CVE-2024-23512	high	8.7/10	WordPress ProductX – Gutenberg WooCommerce Blocks Plugin <= 3.1.4 is vulnerable to PHP Object Injection	Feb 12, 2024 2y ago
CVE-2024-23513	high	8.7/10	WordPress PropertyHive Plugin <= 2.0.5 is vulnerable to PHP Object Injection	Feb 12, 2024 2y ago
CVE-2024-24796	high	8.2/10	WordPress Event Manager for WooCommerce Plugin <= 4.1.1 is vulnerable to PHP Object Injection	Feb 12, 2024 2y ago
CVE-2024-24797	critical	9.8/10	WordPress ERE Recently Viewed Plugin <= 1.3 is vulnerable to PHP Object Injection	Feb 12, 2024 2y ago
CVE-2024-24926	high	7.5/10	WordPress Brooklyn Theme <= 4.9.7.6 is vulnerable to PHP Object Injection	Feb 12, 2024 2y ago
CVE-2024-25100	critical	10.0/10	WordPress Coupon Referral Program plugin < 1.8.4 - Unauthenticated PHP Object Injection vulnerability	Feb 12, 2024 2y ago
CVE-2024-1353	medium	6.3/10	PHPEMS index.api.php index deserialization	Feb 9, 2024 2y ago
CVE-2024-24821	high	8.8/10	Code execution and possible privilege escalation via compromised InstalledVersions.php or installed.php in Composer	Feb 8, 2024 2y ago
CVE-2024-1269	low	2.4/10	SourceCodester Product Management System supplier.php cross site scripting	Feb 7, 2024 2y ago
CVE-2024-1268	medium	6.3/10	CodeAstro Restaurant POS System update_product.php unrestricted upload	Feb 7, 2024 2y ago
CVE-2024-1267	low	3.5/10	CodeAstro Restaurant POS System create_account.php cross site scripting	Feb 7, 2024 2y ago
CVE-2024-1266	low	2.4/10	CodeAstro University Management System Student Registration Form st_reg.php cross site scripting	Feb 7, 2024 2y ago
CVE-2024-1265	low	2.4/10	CodeAstro University Management System Attendance Management att_add.php cross site scripting	Feb 7, 2024 2y ago
CVE-2024-1264	medium	6.3/10	Juanpao JPShop UploadsController.php actionUpdate unrestricted upload	Feb 6, 2024 2y ago
CVE-2024-1263	medium	6.3/10	Juanpao JPShop API PosterController.php actionUpdate unrestricted upload	Feb 6, 2024 2y ago
CVE-2024-1262	medium	6.3/10	Juanpao JPShop API MaterialController.php actionUpdate unrestricted upload	Feb 6, 2024 2y ago
CVE-2024-1261	medium	6.3/10	Juanpao JPShop API ComboController.php actionIndex unrestricted upload	Feb 6, 2024 2y ago
CVE-2024-1260	medium	6.3/10	Juanpao JPShop API ComboController.php actionIndex unrestricted upload	Feb 6, 2024 2y ago
CVE-2024-1259	medium	6.3/10	Juanpao JPShop API AppController.php unrestricted upload	Feb 6, 2024 2y ago
CVE-2024-1258	low	3.1/10	Juanpao JPShop API params.php hard-coded key	Feb 6, 2024 2y ago
CVE-2024-1254	medium	4.7/10	Byzoro Smart S20 Management Platform sysmanageajax.php sql injection	Feb 6, 2024 2y ago