Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,501

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

695

Newly disclosed

Feed last synced

8 hrs ago

Data freshness

Showing 721–750 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2019-25668	high	8.8/10	News Website Script 2.0.5 SQL Injection via index.php	Apr 5, 2026 2mo ago
CVE-2019-25662	high	8.8/10	ResourceSpace 8.6 SQL Injection via watched_searches.php	Apr 5, 2026 2mo ago
CVE-2026-5583	medium	5.3/10	PHPGurukul Online Shopping Portal Project Parameter my-profile.php sql injection	Apr 5, 2026 2mo ago
CVE-2026-5580	medium	5.3/10	CodeAstro Online Classroom Parameter addvideos.php sql injection	Apr 5, 2026 2mo ago
CVE-2026-5579	medium	5.3/10	CodeAstro Online Classroom Parameter updatedetailsfromfaculty.php sql injection	Apr 5, 2026 2mo ago
CVE-2026-5578	medium	5.3/10	CodeAstro Online Classroom Parameter addassessment.php sql injection	Apr 5, 2026 2mo ago
CVE-2026-5576	medium	5.1/10	SourceCodester/jkev Record Management System Add Employee save_emp.php unrestricted upload	Apr 5, 2026 2mo ago
CVE-2026-5575	medium	6.9/10	SourceCodester/jkev Record Management System Login index.php sql injection	Apr 5, 2026 2mo ago
CVE-2026-5565	medium	6.9/10	code-projects Simple Laundry System Parameter delmemberinfo.php sql injection	Apr 5, 2026 2mo ago
CVE-2026-5564	medium	6.9/10	code-projects Simple Laundry System Parameter searchguest.php sql injection	Apr 5, 2026 2mo ago
CVE-2026-5561	medium	5.3/10	Campcodes Complete POS Management and Inventory System Environment Variable SettingsController.php injection	Apr 5, 2026 2mo ago
CVE-2026-5560	medium	5.3/10	PHPGurukul Online Shopping Portal Project Parameter payment-method.php sql injection	Apr 5, 2026 2mo ago
CVE-2026-5558	medium	5.3/10	PHPGurukul PHPGurukul Online Shopping Portal Project Parameter pending-orders.php sql injection	Apr 5, 2026 2mo ago
CVE-2026-5555	medium	6.9/10	code-projects Concert Ticket Reservation System Parameter login.php sql injection	Apr 5, 2026 2mo ago
CVE-2026-5554	medium	6.9/10	code-projects Concert Ticket Reservation System Parameter process_search.php sql injection	Apr 5, 2026 2mo ago
CVE-2026-5553	medium	5.3/10	itsourcecode Online Cellphone System Parameter available.php sql injection	Apr 5, 2026 2mo ago
CVE-2026-5552	medium	5.3/10	PHPGurukul Online Shopping Portal Project Parameter sub-category.php sql injection	Apr 5, 2026 2mo ago
CVE-2026-5551	medium	6.9/10	itsourcecode Free Hotel Reservation System Parameter login.php sql injection	Apr 5, 2026 2mo ago
CVE-2026-5546	medium	5.3/10	Campcodes Complete Online Learning Management System Crud_model.php add_lesson unrestricted upload	Apr 5, 2026 2mo ago
CVE-2026-5543	medium	5.3/10	PHPGurukul User Registration & Login and User Management System yesterday-reg-users.php sql injection	Apr 5, 2026 2mo ago
CVE-2026-5542	medium	5.3/10	code-projects Simple Laundry System Parameter modstaffinfo.php cross site scripting	Apr 5, 2026 2mo ago
CVE-2026-5541	medium	5.3/10	code-projects Simple Laundry System Parameter modmemberinfo.php cross site scripting	Apr 5, 2026 2mo ago
CVE-2026-5540	medium	6.9/10	code-projects Simple Laundry System Parameter modifymember.php sql injection	Apr 5, 2026 2mo ago
CVE-2026-5539	medium	5.3/10	code-projects Simple Laundry System Parameter modifymember.php cross site scripting	Apr 5, 2026 2mo ago
CVE-2026-5537	medium	5.3/10	halex CourseSEL HTTP GET Parameter IndexController.class.php check_sel sql injection	Apr 5, 2026 2mo ago
CVE-2026-5534	medium	6.9/10	itsourcecode Online Enrollment System Parameter index.php sql injection	Apr 5, 2026 2mo ago
CVE-2018-25248	medium	5.1/10	MyBB Downloads Plugin 2.0.3 Persistent XSS via downloads.php	Apr 4, 2026 2mo ago
CVE-2026-34787	medium	6.5/10	Emlog: Local File Inclusion in plugin.php via unsanitized plugin parameter	Apr 3, 2026 2mo ago
CVE-2026-5484	medium	6.9/10	BookStackApp BookStack Chapter Export ExportFormatter.php chapterToMarkdown access control	Apr 3, 2026 2mo ago
CVE-2026-5472	medium	5.3/10	ProjectsAndPrograms School Management System Profile Picture settings.php unrestricted upload	Apr 3, 2026 2mo ago