Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,501

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

699

Newly disclosed

Feed last synced

6 hrs ago

Data freshness

Showing 691–720 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-5671	medium	5.3/10	Cyber-III Student-Management-System Class Schedule Deletion Endpoint delete_batch.php cross site scripting	Apr 6, 2026 2mo ago
CVE-2026-5670	medium	5.3/10	Cyber-III Student-Management-System upload.php move_uploaded_file unrestricted upload	Apr 6, 2026 2mo ago
CVE-2026-5669	medium	6.9/10	Cyber-III Student-Management-System Parameter login.php sql injection	Apr 6, 2026 2mo ago
CVE-2026-5668	medium	4.8/10	Cyber-III Student-Management-System add%20notice.php cross site scripting	Apr 6, 2026 2mo ago
CVE-2026-34951	medium	5.1/10	Reflected XSS in footer.php in Workbench Allows Attackers to Hijack Authenticated Sessions	Apr 6, 2026 2mo ago
CVE-2026-5665	medium	6.9/10	code-projects Online FIR System Login checklogin.php sql injection	Apr 6, 2026 2mo ago
CVE-2026-5660	medium	5.3/10	itsourcecode Construction Management System Parameter borrowed_equip.php sql injection	Apr 6, 2026 2mo ago
CVE-2026-5649	medium	5.3/10	code-projects Online Application System for Admission Endpoint admsnform.php sql injection	Apr 6, 2026 2mo ago
CVE-2026-5648	medium	6.9/10	code-projects Simple Laundry System Parameter userfinishregister.php sql injection	Apr 6, 2026 2mo ago
CVE-2026-5647	medium	4.8/10	code-projects Online Shoe Store Add Product admin_feature.php cross site scripting	Apr 6, 2026 2mo ago
CVE-2026-5646	medium	6.9/10	code-projects Easy Blog Site login.php sql injection	Apr 6, 2026 2mo ago
CVE-2026-5645	medium	6.9/10	projectworlds Car Rental System Parameter pay.php sql injection	Apr 6, 2026 2mo ago
CVE-2026-5644	medium	4.8/10	Cyber-III Student-Management-System batch-notice.php cross site scripting	Apr 6, 2026 2mo ago
CVE-2026-5643	medium	4.8/10	Cyber-III Student-Management-System Admin Add Endpoint notice.php cross site scripting	Apr 6, 2026 2mo ago
CVE-2026-5642	medium	6.9/10	Cyber-III Student-Management-System HTTP POST Request update.php improper authorization	Apr 6, 2026 2mo ago
CVE-2026-5641	medium	5.3/10	PHPGurukul Online Shopping Portal Project Parameter update-image1.php sql injection	Apr 6, 2026 2mo ago
CVE-2026-5640	medium	5.3/10	PHPGurukul Online Shopping Portal Project Parameter update-image2.php sql injection	Apr 6, 2026 2mo ago
CVE-2026-5639	medium	5.3/10	PHPGurukul Online Shopping Portal Project Parameter update-image3.php sql injection	Apr 6, 2026 2mo ago
CVE-2026-5637	medium	6.9/10	projectworlds Car Rental System Parameter message_admin.php sql injection	Apr 6, 2026 2mo ago
CVE-2026-5636	medium	5.3/10	PHPGurukul Online Shopping Portal Project Parameter cancelorder.php sql injection	Apr 6, 2026 2mo ago
CVE-2026-5635	medium	5.3/10	PHPGurukul Online Shopping Portal Project Parameter categorywise-products.php sql injection	Apr 6, 2026 2mo ago
CVE-2026-5634	medium	6.9/10	projectworlds Car Rental Project Parameter book_car.php sql injection	Apr 6, 2026 2mo ago
CVE-2026-5624	medium	5.3/10	ProjectSend upload.php cross-site request forgery	Apr 6, 2026 2mo ago
CVE-2026-5620	medium	5.3/10	itsourcecode Construction Management System Parameter borrowed_equip_report.php sql injection	Apr 6, 2026 2mo ago
CVE-2026-5615	medium	5.3/10	givanz Vvvebjs File Upload Endpoint upload.php cross site scripting	Apr 6, 2026 2mo ago
CVE-2026-5606	medium	5.3/10	PHPGurukul Online Shopping Portal Project Parameter order-details.php sql injection	Apr 6, 2026 2mo ago
CVE-2019-25687	critical	9.3/10	Pegasus CMS 1.0 Remote Code Execution via extra_fields.php	Apr 5, 2026 2mo ago
CVE-2019-25682	medium	5.3/10	CMSsite 1.0 Cross-Site Request Forgery via users.php	Apr 5, 2026 2mo ago
CVE-2019-25678	high	8.8/10	C4G BLIS 3.4 SQL Injection via users_select.php	Apr 5, 2026 2mo ago
CVE-2019-25671	high	8.7/10	VA MAX 8.3.4 Remote Code Execution via changeip.php	Apr 5, 2026 2mo ago