Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,032

All time

Critical · Active

12,193

CVSS ≥ 9.0

New · 14 days

3,301

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 7351–7380 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-5681	medium	4.7/10	Netentsec NS-ASG Application Security Gateway list_addr_fwresource_ip.php sql injection	Oct 20, 2023 2y ago
CVE-2023-4386	high	8.1/10	Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via queries	Oct 20, 2023 2y ago
CVE-2023-4402	high	8.1/10	Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via products	Oct 20, 2023 2y ago
CVE-2012-10016	medium	4.3/10	Halulu simple-download-button-shortcode Plugin Download simple-download-button_dl.php information disclosure	Oct 16, 2023 2y ago
CVE-2011-10004	medium	6.3/10	reciply Plugin uploadImage.php unrestricted upload	Oct 16, 2023 2y ago
CVE-2023-4643	—	—	Enable Media Replace < 4.1.3 - Author+ PHP Object Injection	Oct 16, 2023 2y ago
CVE-2023-4971	—	—	Weaver Xtreme Theme Support < 6.3.1 - Admin+ PHP Object Injection	Oct 16, 2023 2y ago
CVE-2023-3392	—	—	Read More & Accordion < 3.2.7 - Admin+ PHP Object Injection	Oct 16, 2023 2y ago
CVE-2023-5589	high	7.3/10	SourceCodester Judging Management System login.php sql injection	Oct 15, 2023 2y ago
CVE-2023-5587	medium	6.3/10	SourceCodester Free Hospital Management System for Small Practices Parameter doctors.php sql injection	Oct 15, 2023 2y ago
CVE-2023-5581	low	3.5/10	SourceCodester Medicine Tracker System index.php cross site scripting	Oct 14, 2023 2y ago
CVE-2023-5580	medium	6.3/10	SourceCodester Library System index.php sql injection	Oct 14, 2023 2y ago
CVE-2023-5578	low	3.5/10	Portábilis i-Educar HTTP GET Request agenda_imprimir.php cross site scripting	Oct 14, 2023 2y ago
CVE-2023-26367	medium	4.9/10	Error based file extraction via PHP filter chains during product bulk import logic	Oct 13, 2023 2y ago
CVE-2023-5497	medium	6.3/10	Tongda OA 2017 delete.php sql injection	Oct 10, 2023 2y ago
CVE-2023-5494	medium	6.3/10	Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform download.php os command injection	Oct 10, 2023 2y ago
CVE-2023-5493	medium	6.3/10	Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform web.php unrestricted upload	Oct 10, 2023 2y ago
CVE-2023-5492	medium	6.3/10	Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform licence.php unrestricted upload	Oct 10, 2023 2y ago
CVE-2023-5491	medium	6.3/10	Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform updatelib.php unrestricted upload	Oct 10, 2023 2y ago
CVE-2023-5490	medium	6.3/10	Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform userattestation.php unrestricted upload	Oct 10, 2023 2y ago
CVE-2023-5489	medium	6.3/10	Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform uploadfile.php unrestricted upload	Oct 10, 2023 2y ago
CVE-2023-30806	critical	9.8/10	Sangfor Next-Gen Application Firewall PHPSESSID Command Injection	Oct 10, 2023 2y ago
CVE-2023-5488	medium	6.3/10	Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform updatelib.php unrestricted upload	Oct 10, 2023 2y ago
CVE-2023-5471	medium	6.3/10	codeprojects Farmacia index.php sql injection	Oct 10, 2023 2y ago
CVE-2023-5374	medium	6.3/10	SourceCodester Online Computer and Laptop Store products.php sql injection	Oct 4, 2023 2y ago
CVE-2023-5373	high	7.3/10	SourceCodester Online Computer and Laptop Store Master.php register sql injection	Oct 4, 2023 2y ago
CVE-2015-10124	medium	6.3/10	Most Popular Posts Widget Plugin functions.php show_views sql injection	Oct 2, 2023 2y ago
CVE-2023-5322	medium	4.7/10	D-Link DAR-7000 edit_manageadmin.php sql injection	Oct 1, 2023 2y ago
CVE-2023-5313	medium	5.3/10	phpkobo Ajax Poll Script ajax-poll.php improper enforcement of a single, unique action	Sep 30, 2023 2y ago
CVE-2023-5305	low	3.5/10	Online Banquet Booking System Contact Us Page mail.php cross site scripting	Sep 30, 2023 2y ago