Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,032

All time

Critical · Active

12,193

CVSS ≥ 9.0

New · 14 days

3,303

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 7111–7140 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-7191	medium	5.5/10	S-CMS reg.php sql injection	Dec 31, 2023 2y ago
CVE-2023-7188	medium	5.0/10	Shipping 100 Fahuo100 login.php sql injection	Dec 31, 2023 2y ago
CVE-2023-7186	medium	5.5/10	7-card Fakabao notify.php sql injection	Dec 31, 2023 2y ago
CVE-2023-7185	medium	5.5/10	7-card Fakabao wxpay_notify.php sql injection	Dec 31, 2023 2y ago
CVE-2023-7184	medium	5.5/10	7-card Fakabao notify.php sql injection	Dec 31, 2023 2y ago
CVE-2023-7183	medium	5.5/10	7-card Fakabao alipay_notify.php sql injection	Dec 31, 2023 2y ago
CVE-2023-49777	critical	9.1/10	WordPress YITH WooCommerce Product Add-Ons Plugin <= 4.3.0 is vulnerable to PHP Object Injection	Dec 31, 2023 2y ago
CVE-2023-52181	critical	10.0/10	WordPress Theme per user Plugin <= 1.0.1 is vulnerable to PHP Object Injection	Dec 31, 2023 2y ago
CVE-2023-52182	critical	9.9/10	WordPress ARI Stream Quiz Plugin <= 1.3.0 is vulnerable to PHP Object Injection	Dec 31, 2023 2y ago
CVE-2023-7130	medium	6.3/10	code-projects College Notes Gallery login.php sql injection	Dec 31, 2023 2y ago
CVE-2023-7180	medium	5.5/10	Tongda OA 2017 delete.php sql injection	Dec 30, 2023 2y ago
CVE-2023-7179	medium	4.7/10	Campcodes Online College Library System HTTP POST Request category_row.php sql injection	Dec 30, 2023 2y ago
CVE-2023-7178	medium	4.7/10	Campcodes Online College Library System HTTP POST Request book_row.php sql injection	Dec 30, 2023 2y ago
CVE-2023-7177	medium	4.7/10	Campcodes Online College Library System HTTP POST Request book_add.php sql injection	Dec 30, 2023 2y ago
CVE-2023-7176	medium	4.7/10	Campcodes Online College Library System HTTP POST Request return_add.php sql injection	Dec 30, 2023 2y ago
CVE-2023-7175	medium	4.7/10	Campcodes Online College Library System HTTP POST Request borrow_add.php sql injection	Dec 30, 2023 2y ago
CVE-2023-7173	medium	4.3/10	PHPGurukul Hospital Management System registration.php cross site scripting	Dec 30, 2023 2y ago
CVE-2018-25096	medium	4.3/10	MdAlAmin-aol Own Health Record logout.php cross-site request forgery	Dec 30, 2023 2y ago
CVE-2023-7172	high	7.3/10	PHPGurukul Hospital Management System Admin Dashboard sql injection	Dec 30, 2023 2y ago
CVE-2023-51414	critical	9.6/10	WordPress EnvíaloSimple Plugin <= 2.1 is vulnerable to PHP Object Injection	Dec 29, 2023 2y ago
CVE-2023-51422	critical	9.9/10	WordPress WebinarIgnition Plugin <= 3.05.0 is vulnerable to PHP Object Injection	Dec 29, 2023 2y ago
CVE-2023-51470	critical	9.9/10	WordPress Rencontre – Dating Site Plugin <= 3.11.1 is vulnerable to PHP Object Injection	Dec 29, 2023 2y ago
CVE-2023-51505	critical	10.0/10	WordPress Active Products Tables for WooCommerce Plugin <= 1.0.6 is vulnerable to PHP Object Injection	Dec 29, 2023 2y ago
CVE-2023-51545	critical	9.6/10	WordPress Job Manager & Career Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object Injection	Dec 29, 2023 2y ago
CVE-2023-7159	medium	4.7/10	gopeak MasterLab User.php update unrestricted upload	Dec 29, 2023 2y ago
CVE-2023-7157	medium	6.3/10	SourceCodester Free and Open Source Inventory Management System sell_return_data.php sql injection	Dec 29, 2023 2y ago
CVE-2023-7156	high	7.3/10	Campcodes Online College Library System Search index.php sql injection	Dec 29, 2023 2y ago
CVE-2023-7155	medium	6.3/10	SourceCodester Free and Open Source Inventory Management System edit_product.php sql injection	Dec 29, 2023 2y ago
CVE-2023-7150	medium	4.7/10	Campcodes Chic Beauty Salon Product product-list.php unrestricted upload	Dec 29, 2023 2y ago
CVE-2023-7147	medium	6.3/10	gopeak MasterLab User.php base64ImageContent unrestricted upload	Dec 29, 2023 2y ago