Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,227

All time

Critical · Active

11,982

CVSS ≥ 9.0

New · 14 days

2,689

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 751–780 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-7732	medium	5.3/10	code-projects BloodBank Managing System request_blood.php unrestricted upload	May 4, 2026 3mo ago
CVE-2026-7731	medium	5.3/10	code-projects BloodBank Managing System get_state.php sql injection	May 4, 2026 3mo ago
CVE-2026-7716	medium	5.3/10	code-projects Gym Management System In PHP/Windows NT index.php sql injection	May 4, 2026 3mo ago
CVE-2026-7697	medium	5.1/10	AMTT Hotel Broadband Operation System cardhand_submit.php sql injection	May 3, 2026 3mo ago
CVE-2026-7689	medium	6.3/10	Dolibarr ERP CRM Online Signature security.lib.php dol_verifyHash signature verification	May 3, 2026 3mo ago
CVE-2026-7688	low	2.3/10	Dolibarr ERP CRM Shipments API Endpoint expedition.class.php _checkValForAPI sql injection	May 3, 2026 3mo ago
CVE-2026-7632	medium	6.9/10	code-projects Online Hospital Management System viewappointment.php sql injection	May 2, 2026 3mo ago
CVE-2026-7630	medium	6.9/10	innocommerce InnoShop Installation Endpoint InstallServiceProvider.php boot improper authentication	May 2, 2026 3mo ago
CVE-2026-7612	medium	5.1/10	itsourcecode Courier Management System edit_user.php sql injection	May 2, 2026 3mo ago
CVE-2026-7647	high	8.1/10	Profile Builder Pro <= 3.14.5 - Unauthenticated PHP Object Injection	May 2, 2026 3mo ago
CVE-2026-7592	medium	6.9/10	itsourcecode Courier Management System edit_staff.php sql injection	May 1, 2026 3mo ago
CVE-2026-7555	medium	6.9/10	itsourcecode Electronic Judging System login.php sql injection	May 1, 2026 3mo ago
CVE-2026-7553	medium	5.1/10	code-projects Gym Management System edit_exercises.php sql injection	May 1, 2026 3mo ago
CVE-2026-7550	medium	6.9/10	SourceCodester Pharmacy Sales and Inventory System ajax.php save_customer sql injection	May 1, 2026 3mo ago
CVE-2026-7549	medium	6.9/10	SourceCodester Pharmacy Sales and Inventory System ajax.php delete_customer sql injection	May 1, 2026 3mo ago
CVE-2026-7545	medium	6.9/10	SourceCodester Advanced School Management System checkEmail Endpoint commonController.php sql injection	May 1, 2026 3mo ago
CVE-2026-7508	medium	5.3/10	Bootstrap CMS Page Creation show.blade.php code injection	Apr 30, 2026 3mo ago
CVE-2026-7502	medium	5.3/10	LinkStackOrg LinkStack Management Endpoint UserController.php saveLink authorization	Apr 30, 2026 3mo ago
CVE-2026-7501	medium	5.1/10	LinkStackOrg LinkStack UserController.php editPage cross site scripting	Apr 30, 2026 3mo ago
CVE-2026-6498	medium	5.3/10	Five Star Restaurant Reservations <= 2.7.16 - Unauthenticated Payment Bypass via PHP Type Juggling in 'payment_id' Parameter	Apr 30, 2026 3mo ago
CVE-2026-7447	medium	5.3/10	SourceCodester Pet Grooming Management Software update_customer.php sql injection	Apr 30, 2026 3mo ago
CVE-2026-7410	medium	5.3/10	SourceCodester Pizzafy Ecommerce System ajax.php add_to_cart sql injection	Apr 29, 2026 3mo ago
CVE-2026-7409	medium	5.1/10	SourceCodester Pizzafy Ecommerce System ajax.php save_user sql injection	Apr 29, 2026 3mo ago
CVE-2026-7408	medium	5.1/10	SourceCodester Pizzafy Ecommerce System ajax.php save_menu sql injection	Apr 29, 2026 3mo ago
CVE-2026-7407	medium	5.1/10	SourceCodester Pizzafy Ecommerce System Setting ajax.php save_settings sql injection	Apr 29, 2026 3mo ago
CVE-2018-25300	high	8.8/10	XATABoost CMS 1.0.0 SQL Injection via news.php	Apr 29, 2026 3mo ago
CVE-2026-7401	medium	5.3/10	SourceCodester CET Automated Grading System with AI Predictive Analytics Registration index.php register cross site scripting	Apr 29, 2026 3mo ago
CVE-2026-7394	medium	5.1/10	SourceCodester Pizzafy Ecommerce System GET Parameter view_order.php sql injection	Apr 29, 2026 3mo ago
CVE-2026-7393	medium	5.1/10	SourceCodester Pizzafy Ecommerce System File Extension admin_class_novo.php save_menu unrestricted upload	Apr 29, 2026 3mo ago
CVE-2026-7392	medium	5.3/10	SourceCodester Pharmacy Sales and Inventory System ajax.php delete_supplier sql injection	Apr 29, 2026 3mo ago