Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,032

All time

Critical · Active

12,193

CVSS ≥ 9.0

New · 14 days

3,303

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 7201–7230 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-37390	high	8.3/10	WordPress Themesflat Addons For Elementor Plugin <= 2.0.0 is vulnerable to PHP Object Injection	Dec 19, 2023 2y ago
CVE-2023-6945	low	2.4/10	SourceCodester Online Student Management System edit-student-detail.php cross site scripting	Dec 19, 2023 2y ago
CVE-2014-125107	medium	4.3/10	Corveda PHPSandbox String protection mechanism	Dec 19, 2023 2y ago
CVE-2023-46154	medium	6.6/10	WordPress e2pdf Plugin <= 1.20.18 is vulnerable to PHP Object Injection	Dec 18, 2023 2y ago
CVE-2023-49819	high	7.5/10	WordPress Structured Content Plugin <= 1.5.3 is vulnerable to PHP Object Injection	Dec 18, 2023 2y ago
CVE-2023-6907	medium	5.4/10	codelyfe Stupid Simple CMS Deletion Interface delete.php improper authentication	Dec 18, 2023 2y ago
CVE-2023-6902	medium	5.5/10	codelyfe Stupid Simple CMS upload.php unrestricted upload	Dec 17, 2023 2y ago
CVE-2023-6901	high	7.3/10	codelyfe Stupid Simple CMS HTTP POST Request handle-command.php os command injection	Dec 17, 2023 2y ago
CVE-2023-6898	medium	5.5/10	SourceCodester Best Courier Management System manage_user.php sql injection	Dec 17, 2023 2y ago
CVE-2023-6895	medium	6.3/10	Hikvision Intercom Broadcasting System ping.php os command injection	Dec 17, 2023 2y ago
CVE-2023-6893	medium	4.3/10	Hikvision Intercom Broadcasting System exportrecord.php path traversal	Dec 17, 2023 2y ago
CVE-2023-6885	medium	5.5/10	Tongda OA 2017 delete.php sql injection	Dec 16, 2023 2y ago
CVE-2023-6853	medium	6.3/10	kalcaddle KodExplorer app.php index server-side request forgery	Dec 16, 2023 2y ago
CVE-2023-6852	medium	6.3/10	kalcaddle KodExplorer app.php server-side request forgery	Dec 16, 2023 2y ago
CVE-2023-6851	medium	6.3/10	kalcaddle KodExplorer ZIP Archive app.php unzipList code injection	Dec 16, 2023 2y ago
CVE-2023-6890	medium	5.4/10	Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq	Dec 16, 2023 2y ago
CVE-2023-6889	medium	5.4/10	Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq	Dec 16, 2023 2y ago
CVE-2023-6849	high	7.3/10	kalcaddle kodbox app.php cover server-side request forgery	Dec 16, 2023 2y ago
CVE-2023-6848	high	7.3/10	kalcaddle kodbox index.class.php check command injection	Dec 16, 2023 2y ago
CVE-2023-6772	medium	4.7/10	OTCMS ind_backstage.php sql injection	Dec 13, 2023 2y ago
CVE-2023-6771	medium	5.5/10	SourceCodester Simple Student Attendance System actions.class.php save_attendance sql injection	Dec 13, 2023 2y ago
CVE-2023-46726	high	7.2/10	GLPI Remote code execution from LDAP server configuration form on PHP 7.4	Dec 13, 2023 2y ago
CVE-2023-6767	medium	4.3/10	SourceCodester Wedding Guest e-Book add-guest.php cross site scripting	Dec 13, 2023 2y ago
CVE-2023-6766	medium	4.3/10	PHPGurukul Teacher Subject Allocation Management System Delete Course course.php cross-site request forgery	Dec 13, 2023 2y ago
CVE-2023-6765	medium	5.5/10	SourceCodester Online Tours & Travels Management System email_setup.php prepare sql injection	Dec 13, 2023 2y ago
CVE-2023-6755	medium	4.7/10	DedeBIZ content_batchup_action.php sql injection	Dec 13, 2023 2y ago
CVE-2023-50252	high	8.3/10	php-svg-lib unsafe attributes merge when parsing `use` tag	Dec 12, 2023 2y ago
CVE-2023-50251	medium	5.3/10	php-svg-lib possible DoS caused by infinite recursion when parsing SVG document	Dec 12, 2023 2y ago
CVE-2023-6659	medium	6.3/10	Campcodes Web-Based Student Clearance System login.php sql injection	Dec 11, 2023 2y ago
CVE-2023-6657	medium	5.5/10	SourceCodester Simple Student Attendance System student_form.php sql injection	Dec 10, 2023 2y ago