Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,093

All time

Critical · Active

12,197

CVSS ≥ 9.0

New · 14 days

3,322

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 8251–8280 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2015-10016	medium	5.5/10	jeff-kelley opensim-utils regionscrits.php DatabaseForRegion sql injection	Jan 6, 2023 3y ago
CVE-2014-125045	medium	5.5/10	meol1 index.php GetAnimal sql injection	Jan 5, 2023 3y ago
CVE-2017-20163	medium	5.5/10	Red Snapper NView Session.php mutate sql injection	Jan 5, 2023 3y ago
CVE-2014-125044	medium	6.3/10	soshtolsus wing-tight index.php file inclusion	Jan 5, 2023 3y ago
CVE-2014-125040	medium	5.5/10	stevejagodzinski DevNewsAggregator RemoteHtmlContentDataAccess.php getByName sql injection	Jan 5, 2023 3y ago
CVE-2007-10001	low	3.5/10	web-cyradm search.php sql injection	Jan 5, 2023 3y ago
CVE-2015-10013	low	3.5/10	WebDevStudios taxonomy-switcher Plugin taxonomy-switcher.php taxonomy_switcher_init cross site scripting	Jan 5, 2023 3y ago
CVE-2018-25065	low	3.5/10	Wikimedia mediawiki-extensions-I18nTags Unlike Parser I18nTags_body.php cross site scripting	Jan 5, 2023 3y ago
CVE-2019-25098	medium	5.5/10	soerennb eXtplorer Archive archive.php path traversal	Jan 5, 2023 3y ago
CVE-2022-4876	low	3.5/10	Kaltura mwEmbed DefaultSettings.php cross site scripting	Jan 4, 2023 3y ago
CVE-2010-10003	medium	5.5/10	gesellix titlelink plugin_content_title.php sql injection	Jan 4, 2023 3y ago
CVE-2022-4871	medium	4.7/10	ummmmm nflpick-em.com LoadUsers.php _Load_Users sql injection	Jan 3, 2023 3y ago
CVE-2013-10007	medium	5.3/10	ethitter WP-Print-Friendly wp-print-friendly.php information disclosure	Jan 3, 2023 3y ago
CVE-2012-10002	low	3.5/10	ahmyi RivetTracker css.php changeColor cross site scripting	Jan 3, 2023 3y ago
CVE-2022-4324	—	—	Custom Field Template < 2.5.8 - Admin+ PHP Object Injection	Jan 2, 2023 3y ago
CVE-2022-4302	—	—	White Label CMS < 2.5 - Admin+ PHP Object Injection	Jan 2, 2023 3y ago
CVE-2015-10009	medium	5.5/10	nterchange code_caller_controller.php getContent code injection	Jan 2, 2023 3y ago
CVE-2014-125034	low	3.5/10	stiiv contact_app View.php render cross site scripting	Jan 2, 2023 3y ago
CVE-2019-25093	low	2.4/10	dragonexpert Recent Threads on Index Setting hooks.php recentthread_list_threads cross site scripting	Jan 2, 2023 3y ago
CVE-2014-125032	medium	5.5/10	porpeeranut go-with-me add.php sql injection	Jan 2, 2023 3y ago
CVE-2014-125031	low	3.5/10	kirill2485 TekNet loggedin.php cross site scripting	Jan 2, 2023 3y ago
CVE-2015-10006	low	3.5/10	admont28 Ingnovarq insertarSliderAjax.php cross site scripting	Jan 1, 2023 3y ago
CVE-2010-10002	low	3.1/10	SimpleSAMLphp simplesamlphp-module-openid OpenID consumer.php cross site scripting	Jan 1, 2023 3y ago
CVE-2014-125027	low	3.5/10	Yuna Scatari TBDev usersearch.php get_user_icons cross site scripting	Dec 31, 2022 3y ago
CVE-2017-20158	low	3.5/10	vova07 Yii2 FileAPI Widget UploadAction.php run cross site scripting	Dec 31, 2022 3y ago
CVE-2017-20157	medium	5.5/10	Ariadne Component Library Url.php server-side request forgery	Dec 31, 2022 3y ago
CVE-2017-20152	low	3.1/10	aerouk imageserve File viewer.php path traversal	Dec 30, 2022 3y ago
CVE-2020-36638	low	3.5/10	Chris92de AdminServ adminserv.php cross site scripting	Dec 30, 2022 3y ago
CVE-2020-36637	low	3.5/10	Chris92de AdminServ adminserv.php cross site scripting	Dec 30, 2022 3y ago
CVE-2022-4855	high	7.3/10	SourceCodester Lead Management System login.php sql injection	Dec 30, 2022 3y ago