Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,965

All time

Critical · Active

12,189

CVSS ≥ 9.0

New · 14 days

3,236

Newly disclosed

Feed last synced

5 hrs ago

Data freshness

Showing 6901–6930 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-1253	medium	4.7/10	Byzoro Smart S40 Management Platform Import web.php unrestricted upload	Feb 6, 2024 2y ago
CVE-2024-1252	medium	5.5/10	Tongda OA 2017 delete.php sql injection	Feb 6, 2024 2y ago
CVE-2024-1251	medium	5.5/10	Tongda OA 2017 delete.php sql injection	Feb 6, 2024 2y ago
CVE-2024-0668	medium	6.6/10	Advanced Database Cleaner <= 3.1.3 - Authenticated(Administrator+) PHP Object Injection via process_bulk_action	Feb 5, 2024 2y ago
CVE-2023-6933	high	8.8/10	Better Search Replace <= 1.4.4 - Unauthenticated PHP Object Injection	Feb 5, 2024 2y ago
CVE-2024-24574	medium	6.5/10	phpMyFAQ vulnerable to stored XSS on attachments filename	Feb 5, 2024 2y ago
CVE-2024-22208	medium	6.5/10	phpMyFAQ sharing FAQ functionality can easily be abused for phishing purposes	Feb 5, 2024 2y ago
CVE-2024-1225	high	7.3/10	QiboSoft QiboCMS X1 Pay.php rmb_pay deserialization	Feb 5, 2024 2y ago
CVE-2019-25159	medium	5.5/10	mpedraza2020 Intranet del Monterroso cargos.php sql injection	Feb 4, 2024 2y ago
CVE-2015-10129	low	3.7/10	planet-freo auth.inc.php comparison	Feb 4, 2024 2y ago
CVE-2024-1215	low	3.5/10	SourceCodester CRUD without Page Reload fetch_data.php cross site scripting	Feb 3, 2024 2y ago
CVE-2024-1199	medium	5.4/10	CodeAstro Employee Task Management System attendance-info.php denial of service	Feb 3, 2024 2y ago
CVE-2024-1198	medium	6.3/10	openBI Phar User.php addxinzhi deserialization	Feb 2, 2024 2y ago
CVE-2024-1197	high	7.3/10	SourceCodester Testimonial Page Manager HTTP GET Request delete-testimonial.php sql injection	Feb 2, 2024 2y ago
CVE-2024-1196	medium	4.3/10	SourceCodester Testimonial Page Manager HTTP POST Request add-testimonial.php cross site scripting	Feb 2, 2024 2y ago
CVE-2024-1117	high	7.3/10	openBI Screen.php index code injection	Jan 31, 2024 2y ago
CVE-2024-1116	high	7.3/10	openBI Upload.php index unrestricted upload	Jan 31, 2024 2y ago
CVE-2024-1115	high	7.3/10	openBI Setting.php dlfile os command injection	Jan 31, 2024 2y ago
CVE-2024-1114	medium	6.5/10	openBI Screen.php dlfile access control	Jan 31, 2024 2y ago
CVE-2024-1113	medium	6.3/10	openBI Unity.php uploadUnity unrestricted upload	Jan 31, 2024 2y ago
CVE-2024-1111	medium	4.3/10	SourceCodester QR Code Login System add-user.php cross site scripting	Jan 31, 2024 2y ago
CVE-2024-1103	low	3.5/10	CodeAstro Real Estate Management System Feedback Form profile.php cross site scripting	Jan 31, 2024 2y ago
CVE-2024-1036	high	7.3/10	openBI Icon Screen.php uploadIcon unrestricted upload	Jan 30, 2024 2y ago
CVE-2024-1035	high	7.3/10	openBI Icon.php uploadIcon unrestricted upload	Jan 30, 2024 2y ago
CVE-2024-1034	high	7.3/10	openBI File.php uploadFile unrestricted upload	Jan 30, 2024 2y ago
CVE-2024-1033	medium	4.3/10	openBI Datament.php agent information disclosure	Jan 30, 2024 2y ago
CVE-2024-1032	high	7.3/10	openBI Test Connection Databasesource.php testConnection deserialization	Jan 30, 2024 2y ago
CVE-2024-1031	low	3.5/10	CodeAstro Expense Management System Add Expenses Page 5-Add-Expenses.php cross site scripting	Jan 30, 2024 2y ago
CVE-2024-1030	low	3.5/10	Cogites eReserv tenancyDetail.php cross site scripting	Jan 30, 2024 2y ago
CVE-2024-1029	low	3.5/10	Cogites eReserv tenancyDetail.php cross site scripting	Jan 30, 2024 2y ago