Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,227

All time

Critical · Active

11,982

CVSS ≥ 9.0

New · 14 days

2,689

Newly disclosed

Feed last synced

50 mins ago

Data freshness

Showing 721–750 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-42569	critical	9.4/10	phpvms: /importer authorization bypass causing full database wipe	May 9, 2026 3mo ago
CVE-2026-8193	medium	5.3/10	Akaunting Invoice PDF Rendering dompdf.php server-side request forgery	May 9, 2026 3mo ago
CVE-2026-42287	critical	10.0/10	Emlog: SQL Injection Vulnerability in log_model.php within addLog() and updateLog() Functions	May 8, 2026 3mo ago
CVE-2026-41570	high	7.8/10	PHPUnit: Argument injection via newline in PHP INI values forwarded to child processes	May 8, 2026 3mo ago
CVE-2026-5127	high	8.8/10	User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.1 - Authenticated (Subscriber+) PHP Object Injection	May 8, 2026 3mo ago
CVE-2026-8136	medium	4.8/10	SourceCodester Pharmacy Sales and Inventory System index.php users cross site scripting	May 8, 2026 3mo ago
CVE-2026-8133	medium	6.9/10	zyx0814 FilePress Shares Filelist API admin.php sql injection	May 8, 2026 3mo ago
CVE-2026-8132	medium	6.9/10	CodeAstro Leave Management System login.php sql injection	May 8, 2026 3mo ago
CVE-2026-8131	medium	6.9/10	SourceCodester SUP Online Shopping replymsg.php sql injection	May 8, 2026 3mo ago
CVE-2026-8130	medium	6.9/10	SourceCodester SUP Online Shopping message.php sql injection	May 8, 2026 3mo ago
CVE-2026-8129	medium	6.9/10	SourceCodester SUP Online Shopping wishlist.php sql injection	May 8, 2026 3mo ago
CVE-2026-8128	medium	6.9/10	SourceCodester SUP Online Shopping viewmsg.php sql injection	May 8, 2026 3mo ago
CVE-2026-8126	medium	6.9/10	SourceCodester Comment System post_comment.php sql injection	May 8, 2026 3mo ago
CVE-2026-8125	medium	5.3/10	code-projects Simple Chat System sendMessage.php sql injection	May 8, 2026 3mo ago
CVE-2026-8117	medium	5.3/10	SourceCodester Pizzafy Ecommerce System index.php cross site scripting	May 7, 2026 3mo ago
CVE-2026-8098	medium	6.9/10	code-projects Feedback System checklogin.php sql injection	May 7, 2026 3mo ago
CVE-2026-8097	medium	5.3/10	CodeAstro Online Classroom askquery.php sql injection	May 7, 2026 3mo ago
CVE-2026-8083	medium	6.9/10	SourceCodester Pharmacy Sales and Inventory System ajax.php save_user sql injection	May 7, 2026 3mo ago
CVE-2026-41587	high	8.6/10	CI4MS: Unrestricted PHP File Upload via Theme Installation Leads to Authenticated Remote Code Execution	May 7, 2026 3mo ago
CVE-2026-41661	medium	6.1/10	Admidio: Reflected XSS in msg_window.php via Square Bracket to HTML Tag Conversion	May 7, 2026 3mo ago
CVE-2026-41657	medium	4.9/10	Admidio: Cross-Organization Member Data Exposure via Permission Check Mismatch in contacts_data.php	May 7, 2026 3mo ago
CVE-2026-40296	medium	5.4/10	PhpSpreadsheet vulnerable to XSS in HTML writer via custom number format codes	May 6, 2026 3mo ago
CVE-2026-41930	critical	9.2/10	Vvveb < 1.0.8.2 Hard-coded Credentials Information Disclosure via phpMyAdmin	May 6, 2026 3mo ago
CVE-2026-35453	medium	4.8/10	PhpSpreadsheet XSS via number format text substitution in HTML Writer	May 5, 2026 3mo ago
CVE-2026-34084	critical	9.2/10	PhpSpreadsheet SSRF and RCE via PHP stream wrappers in IOFactory::load	May 5, 2026 3mo ago
CVE-2026-7822	medium	5.3/10	itsourcecode Courier Management System print_pdets.php sql injection	May 5, 2026 3mo ago
CVE-2026-7783	medium	5.3/10	CodeCanyon Perfex CRM Admin Kanban Endpoint AbstractKanban.php applySortQuery sql injection	May 4, 2026 3mo ago
CVE-2026-7782	medium	5.3/10	CodeCanyon Perfex CRM Tenant Clients.php project authorization	May 4, 2026 3mo ago
CVE-2026-7746	medium	5.3/10	SourceCodester Web-based Pharmacy Product Management System edit-admin.php sql injection	May 4, 2026 3mo ago
CVE-2026-7733	medium	6.9/10	funadmin Frontend Chunked Upload Endpoint UploadService.php chunkUpload unrestricted upload	May 4, 2026 3mo ago