Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,032

All time

Critical · Active

12,193

CVSS ≥ 9.0

New · 14 days

3,303

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 7051–7080 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-0347	low	3.7/10	SourceCodester Engineers Online Portal signup_teacher.php weak password	Jan 9, 2024 2y ago
CVE-2024-0346	low	3.5/10	CodeAstro Vehicle Booking System Feedback Page user-give-feedback.php cross site scripting	Jan 9, 2024 2y ago
CVE-2024-0345	medium	4.3/10	CodeAstro Vehicle Booking System User Registration usr-register.php cross site scripting	Jan 9, 2024 2y ago
CVE-2024-0344	medium	5.5/10	soxft TimeMail check.php sql injection	Jan 9, 2024 2y ago
CVE-2024-0342	medium	6.3/10	Inis Sqlite.php sql injection	Jan 9, 2024 2y ago
CVE-2024-0341	low	3.5/10	Inis GET Request File.php path traversal	Jan 9, 2024 2y ago
CVE-2023-52202	critical	9.1/10	WordPress HTML5 MP3 Player with Folder Feedburner Plugin <= 2.8.0 is vulnerable to PHP Object Injection	Jan 8, 2024 2y ago
CVE-2023-52206	high	7.7/10	WordPress Page Builder: Live Composer Plugin <= 1.5.25 is vulnerable to PHP Object Injection	Jan 8, 2024 2y ago
CVE-2023-52200	critical	9.6/10	WordPress ARMember Plugin <= 4.0.22 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object Injection	Jan 8, 2024 2y ago
CVE-2023-52205	critical	9.1/10	WordPress HTML5 SoundCloud Player Plugin <= 2.8.0 is vulnerable to PHP Object Injection	Jan 8, 2024 2y ago
CVE-2023-52207	critical	9.1/10	WordPress HTML5 MP3 Player with Playlist Free Plugin <= 3.0.0 is vulnerable to PHP Object Injection	Jan 8, 2024 2y ago
CVE-2023-52218	critical	10.0/10	WordPress WooCommerce Tranzila Gateway Plugin <= 1.0.8 is vulnerable to PHP Object Injection	Jan 8, 2024 2y ago
CVE-2023-52219	critical	9.9/10	WordPress Gecka Terms Thumbnails Plugin <= 1.1 is vulnerable to PHP Object Injection	Jan 8, 2024 2y ago
CVE-2023-52225	critical	10.0/10	WordPress Taggbox Plugin <= 3.1 is vulnerable to PHP Object Injection	Jan 8, 2024 2y ago
CVE-2024-0308	medium	6.3/10	Inis Proxy.php server-side request forgery	Jan 8, 2024 2y ago
CVE-2024-0307	high	7.3/10	Kashipara Dynamic Lab Management System login_process.php sql injection	Jan 8, 2024 2y ago
CVE-2024-0306	high	7.3/10	Kashipara Dynamic Lab Management System admin_login_process.php sql injection	Jan 8, 2024 2y ago
CVE-2024-0305	medium	5.3/10	Guangzhou Yingke Electronic Technology Ncast Guest Login IPSetup.php information disclosure	Jan 8, 2024 2y ago
CVE-2024-0304	medium	6.3/10	Youke365 collect.php server-side request forgery	Jan 8, 2024 2y ago
CVE-2024-0303	medium	6.3/10	Youke365 Parameter caiji.php server-side request forgery	Jan 8, 2024 2y ago
CVE-2024-0300	medium	6.3/10	Byzoro Smart S150 Management Platform HTTP POST Request userattestation.php unrestricted upload	Jan 8, 2024 2y ago
CVE-2024-0290	medium	6.3/10	Kashipara Food Management System stock_edit.php sql injection	Jan 8, 2024 2y ago
CVE-2024-0289	medium	6.3/10	Kashipara Food Management System stock_entry_submit.php sql injection	Jan 8, 2024 2y ago
CVE-2024-0288	medium	6.3/10	Kashipara Food Management System rawstock_used_damaged_submit.php sql injection	Jan 7, 2024 2y ago
CVE-2024-0287	medium	6.3/10	Kashipara Food Management System itemBillPdf.php sql injection	Jan 7, 2024 2y ago
CVE-2024-0286	medium	4.3/10	PHPGurukul Hospital Management System Contact Form index.php#contact_us cross site scripting	Jan 7, 2024 2y ago
CVE-2024-0284	low	3.5/10	Kashipara Food Management System party_submit.php cross site scripting	Jan 7, 2024 2y ago
CVE-2023-7212	medium	4.7/10	DeDeCMS Backend file_class.php unrestricted upload	Jan 7, 2024 2y ago
CVE-2024-0283	low	3.5/10	Kashipara Food Management System party_details.php cross site scripting	Jan 7, 2024 2y ago
CVE-2024-0282	low	3.5/10	Kashipara Food Management System addmaterialsubmit.php cross site scripting	Jan 7, 2024 2y ago