Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,093

All time

Critical · Active

12,197

CVSS ≥ 9.0

New · 14 days

3,342

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 8101–8130 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-0906	high	7.3/10	SourceCodester Online Pizza Ordering System POST Parameter ajax.php delete_category missing authentication	Feb 18, 2023 3y ago
CVE-2023-0905	high	7.3/10	SourceCodester Employee Task Management System changePasswordForEmployee.php improper authentication	Feb 18, 2023 3y ago
CVE-2023-0904	medium	6.3/10	SourceCodester Employee Task Management System task-details.php sql injection	Feb 18, 2023 3y ago
CVE-2023-0903	medium	5.0/10	SourceCodester Employee Task Management System edit-task.php sql injection	Feb 18, 2023 3y ago
CVE-2023-0902	low	3.5/10	SourceCodester Simple Food Ordering System process_order.php cross site scripting	Feb 18, 2023 3y ago
CVE-2023-0883	medium	6.3/10	SourceCodester Online Pizza Ordering System index.php sql injection	Feb 17, 2023 3y ago
CVE-2023-0880	high	8.3/10	Misinterpretation of Input in thorsten/phpmyfaq	Feb 17, 2023 3y ago
CVE-2023-0840	low	3.5/10	PHPCrazy cross site scripting	Feb 15, 2023 3y ago
CVE-2022-4905	low	3.5/10	UDX Stateless Media Plugin class-settings.php setup_wizard_interface cross site scripting	Feb 13, 2023 3y ago
CVE-2015-10078	low	3.5/10	atwellpub Resend Welcome Email Plugin resend-welcome-email.php send_welcome_email_url cross site scripting	Feb 12, 2023 3y ago
CVE-2023-0785	low	3.7/10	SourceCodester Best Online News Portal check_availability.php information exposure	Feb 12, 2023 3y ago
CVE-2023-0794	high	8.3/10	Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq	Feb 12, 2023 3y ago
CVE-2023-0793	high	7.1/10	Weak Password Requirements in thorsten/phpmyfaq	Feb 12, 2023 3y ago
CVE-2023-0792	medium	6.5/10	Code Injection in thorsten/phpmyfaq	Feb 12, 2023 3y ago
CVE-2023-0791	high	8.3/10	Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq	Feb 12, 2023 3y ago
CVE-2023-0790	high	7.6/10	Uncaught Exception in thorsten/phpmyfaq	Feb 12, 2023 3y ago
CVE-2023-0789	high	8.1/10	Command Injection in thorsten/phpmyfaq	Feb 12, 2023 3y ago
CVE-2023-0788	high	8.1/10	Code Injection in thorsten/phpmyfaq	Feb 12, 2023 3y ago
CVE-2023-0787	high	8.1/10	Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaq	Feb 12, 2023 3y ago
CVE-2023-0786	high	8.4/10	Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaq	Feb 12, 2023 3y ago
CVE-2023-0783	medium	4.7/10	EcShop PHP File template.php unrestricted upload	Feb 11, 2023 3y ago
CVE-2023-0781	medium	6.3/10	SourceCodester Canteen Management System removeOrder.php query sql injection	Feb 11, 2023 3y ago
CVE-2015-10077	medium	6.3/10	webbuilders-group silverstripe-kapost-bridge KapostService.php getPreview sql injection	Feb 10, 2023 3y ago
CVE-2023-0774	high	7.3/10	SourceCodester Medical Certificate Generator App action.php sql injection	Feb 10, 2023 3y ago
CVE-2023-0732	low	3.5/10	SourceCodester Online Eyewear Shop POST Request Users.php registration cross site scripting	Feb 7, 2023 3y ago
CVE-2011-10002	medium	5.5/10	weblabyrinth labyrinth.inc.php Labyrinth sql injection	Feb 7, 2023 3y ago
CVE-2023-0707	medium	5.5/10	SourceCodester Medical Certificate Generator App function.php delete_record sql injection	Feb 7, 2023 3y ago
CVE-2015-10075	low	2.6/10	Custom-Content-Width custom-content-width.php register_settings cross site scripting	Feb 7, 2023 3y ago
CVE-2015-10074	low	3.5/10	OpenSeaMap online_chart index.php init cross site scripting	Feb 7, 2023 3y ago
CVE-2023-0706	medium	6.3/10	SourceCodester Medical Certificate Generator App manage_record.php sql injection	Feb 7, 2023 3y ago