Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,227

All time

Critical · Active

11,982

CVSS ≥ 9.0

New · 14 days

2,687

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 781–810 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-7391	medium	5.3/10	SourceCodester Pharmacy Sales and Inventory System ajax.php save_supplier sql injection	Apr 29, 2026 3mo ago
CVE-2026-7390	medium	5.1/10	SourceCodester Pharmacy Sales and Inventory System index.php customer cross site scripting	Apr 29, 2026 3mo ago
CVE-2026-7389	medium	6.9/10	EyouCMS common.php GetSortData sql injection	Apr 29, 2026 3mo ago
CVE-2026-7388	medium	5.1/10	EyouCMS Template File FilemanagerLogic.php editFile code injection	Apr 29, 2026 3mo ago
CVE-2026-7317	low	2.3/10	Grav CMS Cache Value FileCache.php doGet deserialization	Apr 28, 2026 3mo ago
CVE-2026-7297	medium	4.8/10	SourceCodester Pizzafy Ecommerce System ajax.php save_user cross site scripting	Apr 28, 2026 3mo ago
CVE-2026-7296	medium	4.8/10	SourceCodester Pizzafy Ecommerce System ajax.php save_order cross site scripting	Apr 28, 2026 3mo ago
CVE-2026-7295	medium	4.8/10	SourceCodester Pizzafy Ecommerce System ajax.php save_menu cross site scripting	Apr 28, 2026 3mo ago
CVE-2026-7294	medium	4.8/10	SourceCodester Pizzafy Ecommerce System index.php save_settings cross site scripting	Apr 28, 2026 3mo ago
CVE-2026-7293	medium	5.1/10	SourceCodester Pizzafy Ecommerce System ajax.php delete_category sql injection	Apr 28, 2026 3mo ago
CVE-2026-7283	medium	5.1/10	SourceCodester Pharmacy Sales and Inventory System ajax.php save_expired sql injection	Apr 28, 2026 3mo ago
CVE-2026-27760	critical	9.2/10	OpenCATS PHP Code Injection via installer AJAX endpoint	Apr 28, 2026 3mo ago
CVE-2026-7282	medium	5.1/10	SourceCodester Pharmacy Sales and Inventory System ajax.php delete_expired sql injection	Apr 28, 2026 3mo ago
CVE-2026-7281	medium	4.8/10	SourceCodester Pharmacy Sales and Inventory System index.php supplier cross site scripting	Apr 28, 2026 3mo ago
CVE-2026-7269	medium	4.8/10	SourceCodester Pharmacy Sales and Inventory System index.php cross site scripting	Apr 28, 2026 3mo ago
CVE-2026-7268	medium	5.3/10	SourceCodester Pizzafy Ecommerce System ajax.php save_category sql injection	Apr 28, 2026 3mo ago
CVE-2026-7267	medium	5.3/10	SourceCodester Pizzafy Ecommerce System view_prod.php sql injection	Apr 28, 2026 3mo ago
CVE-2026-7266	medium	5.3/10	SourceCodester Pizzafy Ecommerce System ajax.php save_order sql injection	Apr 28, 2026 3mo ago
CVE-2026-7265	medium	5.3/10	SourceCodester Pizzafy Ecommerce System index.php category sql injection	Apr 28, 2026 3mo ago
CVE-2026-7264	medium	5.3/10	SourceCodester Pizzafy Ecommerce System ajax.php get_cart_items sql injection	Apr 28, 2026 3mo ago
CVE-2026-7238	medium	5.1/10	code-projects Online Music Site AdminUpdateAlbum.php unrestricted upload	Apr 28, 2026 3mo ago
CVE-2026-7229	medium	5.3/10	code-projects Coaching Management System POST reply.php sql injection	Apr 28, 2026 3mo ago
CVE-2026-7228	medium	6.9/10	SourceCodester Pizzafy Ecommerce System ajax.php get_cart_count sql injection	Apr 28, 2026 3mo ago
CVE-2026-7227	medium	6.9/10	SourceCodester Pizzafy Ecommerce System ajax.php login sql injection	Apr 28, 2026 3mo ago
CVE-2026-7226	medium	6.9/10	SourceCodester Pizzafy Ecommerce System ajax.php login2 sql injection	Apr 28, 2026 3mo ago
CVE-2026-7225	medium	6.9/10	SourceCodester Pizzafy Ecommerce System ajax.php delete_menu sql injection	Apr 28, 2026 3mo ago
CVE-2026-7224	medium	6.9/10	SourceCodester Pizzafy Ecommerce System ajax.php delete_cart sql injection	Apr 28, 2026 3mo ago
CVE-2026-7222	medium	5.1/10	code-projects Coaching Management System Complaint Form complaint.php cross site scripting	Apr 28, 2026 3mo ago
CVE-2026-7200	medium	5.3/10	SourceCodester Pharmacy Sales and Inventory System index.php cross site scripting	Apr 27, 2026 3mo ago
CVE-2026-7199	medium	6.9/10	SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection	Apr 27, 2026 3mo ago