Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,093

All time

Critical · Active

12,197

CVSS ≥ 9.0

New · 14 days

3,322

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 8281–8310 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-4855	high	7.3/10	SourceCodester Lead Management System login.php sql injection	Dec 30, 2022 3y ago
CVE-2022-4822	low	2.4/10	FlatPress Setup main.lib.php cross site scripting	Dec 28, 2022 3y ago
CVE-2022-4821	low	2.4/10	FlatPress XML File Handler/MD File admin.uploader.php onupload cross site scripting	Dec 28, 2022 3y ago
CVE-2022-4820	low	3.5/10	FlatPress Admin Area admin.entry.list.php cross site scripting	Dec 28, 2022 3y ago
CVE-2018-25057	medium	5.5/10	simple_php_link_shortener index.php sql injection	Dec 28, 2022 3y ago
CVE-2019-25092	low	2.4/10	Nakiami Mellivora Admin Panel user.inc.php print_user_ip_log cross site scripting	Dec 28, 2022 3y ago
CVE-2020-36633	medium	4.3/10	moodle-block_sitenews block_sitenews.php get_content cross-site request forgery	Dec 27, 2022 3y ago
CVE-2022-4755	low	3.5/10	FlatPress Media Manager Plugin panel.mediamanager.file.php main cross site scripting	Dec 27, 2022 3y ago
CVE-2019-25086	low	3.5/10	IET-OU Open Media Player timedtext.php webvtt cross site scripting	Dec 27, 2022 3y ago
CVE-2022-4748	medium	5.5/10	FlatPress File Delete panel.mediamanager.file.php doItemActions path traversal	Dec 27, 2022 3y ago
CVE-2021-24942	—	—	Menu Item Visibility Control <= 0.5 - Admin+ Arbitrary PHP Code Execution	Dec 26, 2022 3y ago
CVE-2022-4120	—	—	Stop Spammers Security < 2022.6 - Unauthenticated PHP Object Injection	Dec 26, 2022 3y ago
CVE-2022-4737	high	7.3/10	SourceCodester Blood Bank Management System login.php sql injection	Dec 25, 2022 3y ago
CVE-2020-36630	medium	5.5/10	FreePBX cdr Cdr.class.php ajaxHandler sql injection	Dec 25, 2022 3y ago
CVE-2020-36626	medium	5.5/10	Modern Tribe Panel Builder Plugin SearchFilter.php add_post_content_filtered_to_search_sql sql injection	Dec 24, 2022 3y ago
CVE-2022-4633	medium	4.3/10	Auto Upload Images Settings setting-page.php cross-site request forgery	Dec 21, 2022 3y ago
CVE-2022-4631	low	3.5/10	WP-Ban ban-options.php cross site scripting	Dec 21, 2022 3y ago
CVE-2022-4606	high	8.8/10	PHP Remote File Inclusion in flatpressblog/flatpress	Dec 18, 2022 3y ago
CVE-2022-4604	medium	4.3/10	wp-english-wp-admin Plugin english-wp-admin.php register_endpoints cross-site request forgery	Dec 18, 2022 3y ago
CVE-2022-4592	medium	6.3/10	luckyshot CRMx index.php commentdelete sql injection	Dec 18, 2022 3y ago
CVE-2022-4564	medium	4.3/10	University of Central Florida Materia API Controller api.php before cross-site request forgery	Dec 16, 2022 3y ago
CVE-2022-4561	low	3.5/10	SemanticDrilldown Extension GET Parameter SDBrowseDataPage.php printFilterLine cross site scripting	Dec 16, 2022 3y ago
CVE-2022-4559	low	3.5/10	INEX IPX-Manager list.foil.php cross site scripting	Dec 16, 2022 3y ago
CVE-2022-4524	low	3.5/10	Roots soil Plugin CleanUpModule.php language_attributes cross site scripting	Dec 15, 2022 3y ago
CVE-2022-4514	low	3.5/10	Opencaching Deutschland oc-server3 varset.inc.php cross site scripting	Dec 15, 2022 3y ago
CVE-2022-4455	medium	5.1/10	sproctor php-calendar index.php cross site scripting	Dec 13, 2022 3y ago
CVE-2022-4446	critical	9.8/10	PHP Remote File Inclusion in tsolucio/corebos	Dec 13, 2022 3y ago
CVE-2022-3900	—	—	Cooked Pro < 1.7.5.7 - Unauthenticated PHP Object Injection	Dec 12, 2022 3y ago
CVE-2022-3359	—	—	Shortcodes and extra features for Phlox theme < 2.10.7 - PHP Objection Injection	Dec 12, 2022 3y ago
CVE-2022-4421	low	3.5/10	rAthena FluxCP Service Desk Image URL view.php cross site scripting	Dec 12, 2022 3y ago