Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,032

All time

Critical · Active

12,193

CVSS ≥ 9.0

New · 14 days

3,303

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 7171–7200 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-7057	low	3.5/10	code-projects Faculty Management System yearlevel.php cross site scripting	Dec 22, 2023 2y ago
CVE-2023-7056	low	2.4/10	code-projects Faculty Management System subjects.php cross site scripting	Dec 22, 2023 2y ago
CVE-2023-7055	medium	4.3/10	PHPGurukul Online Notes Sharing System Contact Information profile.php access control	Dec 22, 2023 2y ago
CVE-2023-7054	medium	5.5/10	PHPGurukul Online Notes Sharing System add-notes.php unrestricted upload	Dec 22, 2023 2y ago
CVE-2023-7053	low	3.1/10	PHPGurukul Online Notes Sharing System signup.php weak password	Dec 22, 2023 2y ago
CVE-2023-7052	medium	4.3/10	PHPGurukul Online Notes Sharing System profile.php cross-site request forgery	Dec 22, 2023 2y ago
CVE-2023-7051	medium	4.3/10	PHPGurukul Online Notes Sharing System manage-notes.php cross-site request forgery	Dec 21, 2023 2y ago
CVE-2023-7050	low	3.5/10	PHPGurukul Online Notes Sharing System profile.php cross site scripting	Dec 21, 2023 2y ago
CVE-2023-7041	medium	5.4/10	codelyfe Stupid Simple CMS rename.php path traversal	Dec 21, 2023 2y ago
CVE-2023-7040	medium	4.3/10	codelyfe Stupid Simple CMS rename.php path traversal	Dec 21, 2023 2y ago
CVE-2023-7039	medium	6.3/10	Byzoro S210 importexport.php injection	Dec 21, 2023 2y ago
CVE-2023-7037	medium	6.3/10	automad FileController.php import server-side request forgery	Dec 21, 2023 2y ago
CVE-2023-7036	medium	4.7/10	automad Content Type FileCollectionController.php upload unrestricted upload	Dec 21, 2023 2y ago
CVE-2023-7035	medium	4.8/10	automad Setting post.php cross site scripting	Dec 21, 2023 2y ago
CVE-2023-32242	critical	9.8/10	WordPress Woodmart Core Plugin <= 1.0.36 is vulnerable to PHP Object Injection	Dec 21, 2023 2y ago
CVE-2023-49778	critical	10.0/10	WordPress Sayfa Sayaç Plugin <= 2.6 is vulnerable to PHP Object Injection	Dec 21, 2023 2y ago
CVE-2023-49826	high	8.1/10	WordPress Soledad Theme <= 8.4.1 is vulnerable to PHP Object Injection	Dec 21, 2023 2y ago
CVE-2023-7023	medium	6.3/10	Tongda OA 2017 delete.php sql injection	Dec 21, 2023 2y ago
CVE-2023-7022	medium	6.3/10	Tongda OA 2017 delete_all.php sql injection	Dec 21, 2023 2y ago
CVE-2023-7021	medium	6.3/10	Tongda OA 2017 delete_search.php sql injection	Dec 21, 2023 2y ago
CVE-2023-7020	medium	6.3/10	Tongda OA 2017 view.php sql injection	Dec 21, 2023 2y ago
CVE-2022-47599	medium	5.5/10	WordPress File Manager Plugin <= 5.2.7 is vulnerable to PHP Object Injection	Dec 20, 2023 2y ago
CVE-2023-49773	critical	10.0/10	WordPress BCorp Shortcodes Plugin <= 0.23 is vulnerable to PHP Object Injection	Dec 20, 2023 2y ago
CVE-2023-49772	critical	10.0/10	WordPress Genesis Simple Love Plugin <= 2.0 is vulnerable to PHP Object Injection	Dec 20, 2023 2y ago
CVE-2023-28782	high	8.3/10	WordPress Gravity Forms Plugin <= 2.7.3 is vulnerable to PHP Object Injection	Dec 20, 2023 2y ago
CVE-2023-40555	high	8.3/10	WordPress Flatsome Theme <= 3.17.5 is vulnerable to PHP Object Injection	Dec 20, 2023 2y ago
CVE-2023-46147	high	7.4/10	WordPress Themify Ultra Theme <= 7.3.5 is vulnerable to PHP Object Injection	Dec 20, 2023 2y ago
CVE-2023-47507	high	7.1/10	WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to PHP Object Injection	Dec 20, 2023 2y ago
CVE-2023-34027	high	8.3/10	WordPress Recently Viewed Products Plugin <= 1.0.0 is vulnerable to PHP Object Injection	Dec 19, 2023 2y ago
CVE-2023-34382	medium	4.4/10	WordPress Dokan Plugin <= 3.7.19 is vulnerable to PHP Object Injection	Dec 19, 2023 2y ago