Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,965

All time

Critical · Active

12,189

CVSS ≥ 9.0

New · 14 days

3,236

Newly disclosed

Feed last synced

5 hrs ago

Data freshness

Showing 6961–6990 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-0729	medium	5.5/10	ForU CMS cms_admin.php sql injection	Jan 19, 2024 2y ago
CVE-2024-0728	medium	4.7/10	ForU CMS channel.php file inclusion	Jan 19, 2024 2y ago
CVE-2024-0726	medium	4.3/10	Project Worlds Student Project Allocation System Admin Login Module admin_login.php cross site scripting	Jan 19, 2024 2y ago
CVE-2024-0722	low	3.5/10	code-projects Social Networking Site Message Page message.php cross site scripting	Jan 19, 2024 2y ago
CVE-2024-0716	low	3.1/10	Byzoro Smart S150 Management Platform Backup File download.php information disclosure	Jan 19, 2024 2y ago
CVE-2022-45845	medium	4.3/10	WordPress Smart Slider 3 Plugin <= 3.5.1.9 is vulnerable to PHP Object Injection	Jan 19, 2024 2y ago
CVE-2022-45083	medium	6.6/10	WordPress ProfilePress Plugin <= 4.3.2 is vulnerable to PHP Object Injection	Jan 19, 2024 2y ago
CVE-2024-0714	medium	6.3/10	MiczFlor RPi-Jukebox-RFID HTTP Request userScripts.php os command injection	Jan 19, 2024 2y ago
CVE-2024-0712	high	7.3/10	Byzoro Smart S150 Management Platform userattea.php access control	Jan 19, 2024 2y ago
CVE-2024-0652	low	3.5/10	PHPGurukul Company Visitor Management System search-visitor.php cross site scripting	Jan 18, 2024 2y ago
CVE-2024-0651	medium	6.3/10	PHPGurukul Company Visitor Management System search-visitor.php sql injection	Jan 18, 2024 2y ago
CVE-2024-0650	medium	4.3/10	Project Worlds Visitor Management System URL dataset.php cross site scripting	Jan 17, 2024 2y ago
CVE-2024-0649	medium	6.3/10	ZhiHuiYun Search ImageController.php download_network_image server-side request forgery	Jan 17, 2024 2y ago
CVE-2024-0648	high	7.3/10	Yunyou CMS Common.php unrestricted upload	Jan 17, 2024 2y ago
CVE-2024-0603	high	7.3/10	ZhiCms giftcontroller.php deserialization	Jan 16, 2024 2y ago
CVE-2023-1405	—	—	Formidable Forms < 6.2 - Unauthenticated PHP Object Injection	Jan 16, 2024 2y ago
CVE-2024-0558	medium	4.7/10	DedeBIZ makehtml_freelist_action.php sql injection	Jan 15, 2024 2y ago
CVE-2023-6049	—	—	Estatik Real Estate Plugin < 4.1.1 - Unauthenticated PHP Object Injection	Jan 15, 2024 2y ago
CVE-2024-0543	medium	6.3/10	CodeAstro Real Estate Management System propertydetail.php sql injection	Jan 15, 2024 2y ago
CVE-2024-0530	medium	5.5/10	CXBSoft Post-Office HTTP POST Request reg_go.php sql injection	Jan 15, 2024 2y ago
CVE-2024-0529	medium	5.5/10	CXBSoft Post-Office HTTP POST Request login_auth.php sql injection	Jan 15, 2024 2y ago
CVE-2024-0528	medium	5.5/10	CXBSoft Post-Office HTTP POST Request update_go.php sql injection	Jan 15, 2024 2y ago
CVE-2024-0527	medium	6.3/10	CXBSoft Url-shorting HTTP POST Request update_go.php sql injection	Jan 15, 2024 2y ago
CVE-2024-0526	medium	5.5/10	CXBSoft Url-shorting HTTP POST Request short_to_long.php sql injection	Jan 15, 2024 2y ago
CVE-2024-0525	medium	5.5/10	CXBSoft Url-shorting HTTP POST Request long_s_short.php sql injection	Jan 14, 2024 2y ago
CVE-2024-0524	medium	5.5/10	CXBSoft Url-shorting index.php sql injection	Jan 14, 2024 2y ago
CVE-2024-0523	medium	6.3/10	CmsEasy language_admin.php getslide_child_action sql injection	Jan 14, 2024 2y ago
CVE-2024-0510	high	7.3/10	HaoKeKeJi YiQiNiu Api.php http_post server-side request forgery	Jan 13, 2024 2y ago
CVE-2024-0504	low	3.5/10	code-projects Simple Online Hotel Reservation System Make a Reservation Page add_reserve.php cross site scripting	Jan 13, 2024 2y ago
CVE-2024-0503	low	3.5/10	code-projects Online FIR System registercomplaint.php cross site scripting	Jan 13, 2024 2y ago