Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,032

All time

Critical · Active

12,193

CVSS ≥ 9.0

New · 14 days

3,299

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 7681–7710 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-3094	medium	6.3/10	code-projects Agro-School Management System btn_functions.php doUpdateQuestion sql injection	Jun 4, 2023 3y ago
CVE-2023-3068	medium	6.3/10	Campcodes Retro Cellphone Online Store modal_add_product.php sql injection	Jun 2, 2023 3y ago
CVE-2023-3062	medium	6.3/10	code-projects Agro-School Management System index.php sql injection	Jun 2, 2023 3y ago
CVE-2023-3061	medium	6.3/10	code-projects Agro-School Management System Attachment Image btn_functions.php unrestricted upload	Jun 2, 2023 3y ago
CVE-2023-3060	low	3.5/10	code-projects Agro-School Management System btn_functions.php doAddQuestion cross site scripting	Jun 2, 2023 3y ago
CVE-2023-3059	medium	6.3/10	SourceCodester Online Exam Form Submission update_s6.php sql injection	Jun 2, 2023 3y ago
CVE-2023-3057	medium	4.3/10	YFCMF Ajax.php path traversal	Jun 2, 2023 3y ago
CVE-2023-3056	medium	4.3/10	YFCMF index.php path traversal	Jun 2, 2023 3y ago
CVE-2016-15032	low	3.5/10	mback2k mh_httpbl Extension class.tx_mhhttpbl.php stopOutput cross site scripting	Jun 1, 2023 3y ago
CVE-2015-10110	low	3.5/10	ruddernation TinyChat Room Spy Plugin room-spy.php wp_show_room_spy cross site scripting	Jun 1, 2023 3y ago
CVE-2015-10109	medium	4.3/10	Video Playlist and Gallery Plugin wp-media-cincopa.php cross-site request forgery	Jun 1, 2023 3y ago
CVE-2014-125104	medium	6.3/10	VaultPress Plugin MailPoet Plugin class.vaultpress-hotfixes.php protect_aioseo_ajax unrestricted upload	Jun 1, 2023 3y ago
CVE-2018-25086	low	3.5/10	sea75300 FanPress CM Template Preview templatepreview.php getArticlesPreview cross site scripting	Jun 1, 2023 3y ago
CVE-2010-10010	low	3.5/10	Stars Alliance PsychoStats login.php cross site scripting	Jun 1, 2023 3y ago
CVE-2015-10108	medium	4.3/10	meitar Inline Google Spreadsheet Viewer Plugin inline-gdocs-viewer.php displayShortcode cross-site request forgery	May 31, 2023 3y ago
CVE-2023-3016	low	3.5/10	yiwent Vip Video Analysis admincore.php cross site scripting	May 31, 2023 3y ago
CVE-2023-3015	medium	6.3/10	yiwent Vip Video Analysis title.php server-side request forgery	May 31, 2023 3y ago
CVE-2023-3014	low	3.5/10	BeipyVideoResolution admincore.php cross site scripting	May 31, 2023 3y ago
CVE-2023-3008	high	7.3/10	ningzichun Student Management System login.php sql injection	May 31, 2023 3y ago
CVE-2023-3007	medium	6.5/10	ningzichun Student Management System Password Reset resetPassword.php password recovery	May 31, 2023 3y ago
CVE-2023-3003	medium	6.3/10	SourceCodester Train Station Ticketing System GET Parameter manage_prices.php sql injection	May 31, 2023 3y ago
CVE-2014-125103	low	2.4/10	BestWebSoft Twitter Plugin twitter.php twttr_settings_page cross site scripting	May 31, 2023 3y ago
CVE-2023-2999	medium	6.7/10	Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq	May 31, 2023 3y ago
CVE-2023-2998	medium	6.0/10	Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq	May 31, 2023 3y ago
CVE-2012-10015	medium	4.3/10	BestWebSoft Twitter Plugin Settings Page twitter.php twttr_settings_page cross-site request forgery	May 30, 2023 3y ago
CVE-2023-2955	medium	6.3/10	SourceCodester Students Online Internship Timesheet System GET Parameter rendered_report.php sql injection	May 29, 2023 3y ago
CVE-2015-10106	medium	6.3/10	mback2k mh_httpbl Extension index.php moduleContent sql injection	May 28, 2023 3y ago
CVE-2023-2951	medium	6.3/10	code-projects Bus Dispatch and Information System delete_bus.php sql injection	May 28, 2023 3y ago
CVE-2023-2928	medium	6.3/10	DedeCMS article_allowurl_edit.php code injection	May 27, 2023 3y ago
CVE-2023-2927	medium	6.3/10	JIZHICMS TemplateController.php index server-side request forgery	May 27, 2023 3y ago