Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,093

All time

Critical · Active

12,197

CVSS ≥ 9.0

New · 14 days

3,329

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 8221–8250 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2018-25073	low	3.5/10	Newcomer1989 TSN-Ranksystem bot.php getlog cross site scripting	Jan 11, 2023 3y ago
CVE-2016-15017	medium	5.5/10	fabarea media_upload UploadFileService.php getUploadedFileList pathname traversal	Jan 10, 2023 3y ago
CVE-2022-3679	—	—	Starter Templates by Kadence WP < 1.2.17 - Admin+ PHP Object Injection	Jan 9, 2023 3y ago
CVE-2022-3417	—	—	WPtouch < 4.3.45 - Admin+ PHP Object Injection	Jan 9, 2023 3y ago
CVE-2022-4043	—	—	WP Custom Admin Interface < 7.29 - Admin+ PHP Object Injection	Jan 9, 2023 3y ago
CVE-2015-10032	low	3.5/10	HealthMateWeb createaccount.php cross site scripting	Jan 9, 2023 3y ago
CVE-2016-15016	medium	5.5/10	mrtnmtth joomla_mod_einsatz_stats helper.php getStatsByType sql injection	Jan 8, 2023 3y ago
CVE-2016-15015	low	2.6/10	viafintech Barzahlen Payment Module PHP SDK Webhook.php verify timing discrepancy	Jan 8, 2023 3y ago
CVE-2015-10031	medium	5.5/10	purpleparrots 491-Project Highscore update.php sql injection	Jan 8, 2023 3y ago
CVE-2019-25100	medium	5.5/10	happyman twmap pointdata2.php sql injection	Jan 8, 2023 3y ago
CVE-2015-10030	medium	5.5/10	SUKOHI Surpass Surpass.php pathname traversal	Jan 8, 2023 3y ago
CVE-2007-10002	high	7.3/10	web-cyradm auth.inc.php sql injection	Jan 8, 2023 3y ago
CVE-2022-2666	medium	6.3/10	SourceCodester Loan Management System login.php sql injection	Jan 7, 2023 3y ago
CVE-2014-125029	medium	5.5/10	ttskch PaginationServiceProvider Demo index.php sql injection	Jan 7, 2023 3y ago
CVE-2022-1102	medium	4.3/10	SourceCodester Royale Event Management System companyprofile.php cross site scripting	Jan 7, 2023 3y ago
CVE-2022-1101	high	7.3/10	SourceCodester Royale Event Management System userregister.php improper authentication	Jan 7, 2023 3y ago
CVE-2016-15014	low	3.3/10	CESNET theme-cesnet resetpassword.php insufficiently protected credentials	Jan 7, 2023 3y ago
CVE-2015-10029	medium	5.5/10	kelvinmo simplexrd simplexrd.class.php xml external entity reference	Jan 7, 2023 3y ago
CVE-2016-15013	medium	5.5/10	ForumHulp searchresults listener.php list_keywords sql injection	Jan 7, 2023 3y ago
CVE-2017-20164	medium	6.3/10	Symbiote Seed Login SecurityLoginExtension.php onBeforeSecurityLogin redirect	Jan 7, 2023 3y ago
CVE-2014-125062	medium	5.5/10	ananich bitstorm announce.php sql injection	Jan 7, 2023 3y ago
CVE-2018-25071	medium	5.5/10	roxlukas LMeve proxy.php insert_log sql injection	Jan 7, 2023 3y ago
CVE-2014-125057	low	3.1/10	mrobit robitailletheknot CSRF Token filters.php comparison	Jan 7, 2023 3y ago
CVE-2015-10019	low	3.5/10	foxoverflow MySimplifiedSQL MySimplifiedSQL_Examples.php cross site scripting	Jan 7, 2023 3y ago
CVE-2014-125053	medium	5.5/10	Piwigo-Guest-Book Navigation Bar guestbook.inc.php sql injection	Jan 6, 2023 3y ago
CVE-2018-25067	medium	5.5/10	JoomGallery Image Sort default.php sql injection	Jan 6, 2023 3y ago
CVE-2014-125051	medium	5.5/10	himiklab yii2-jqgrid-widget JqGridAction.php addSearchOptionsRecursively sql injection	Jan 6, 2023 3y ago
CVE-2015-10018	medium	5.5/10	DBRisinajumi d2files D2filesController.php actionDownloadFile sql injection	Jan 6, 2023 3y ago
CVE-2019-25099	medium	5.5/10	Arthmoor QSF-Portal index.php path traversal	Jan 6, 2023 3y ago
CVE-2020-36642	medium	5.5/10	trampgeek jobe LanguageTask.php run_in_sandbox command injection	Jan 6, 2023 3y ago