Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,093

All time

Critical · Active

12,197

CVSS ≥ 9.0

New · 14 days

3,322

Newly disclosed

Feed last synced

5 hrs ago

Data freshness

Showing 8311–8340 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-4409	medium	6.3/10	Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaq	Dec 11, 2022 3y ago
CVE-2022-4408	medium	4.3/10	Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq	Dec 11, 2022 3y ago
CVE-2022-4407	critical	9.8/10	Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq	Dec 11, 2022 3y ago
CVE-2022-4403	medium	6.3/10	SourceCodester Canteen Management System ajax_represent.php sql injection	Dec 11, 2022 3y ago
CVE-2022-4397	medium	4.3/10	morontt zend-blog-number-2 Comment Comment.php cross-site request forgery	Dec 10, 2022 3y ago
CVE-2022-46157	high	8.8/10	Remote php code execution in Akeneo PIM	Dec 9, 2022 3y ago
CVE-2022-4364	medium	6.9/10	Teledyne FLIR AX8 Web Service palette.php command injection	Dec 8, 2022 3y ago
CVE-2022-4281	medium	6.3/10	Facepay camera.php authorization	Dec 5, 2022 3y ago
CVE-2022-4279	low	3.5/10	SourceCodester Human Resource Management System employeeview.php cross site scripting	Dec 3, 2022 3y ago
CVE-2022-4278	medium	4.7/10	SourceCodester Human Resource Management System employeeadd.php sql injection	Dec 3, 2022 3y ago
CVE-2022-4276	medium	6.3/10	House Rental System POST Request tenant-engine.php unrestricted upload	Dec 3, 2022 3y ago
CVE-2022-4275	medium	6.3/10	House Rental System POST Request search-property.php sql injection	Dec 3, 2022 3y ago
CVE-2022-4274	medium	6.3/10	House Rental System view-property.php sql injection	Dec 3, 2022 3y ago
CVE-2022-4273	high	7.3/10	SourceCodester Human Resource Management System Content-Type employee.php unrestricted upload	Dec 3, 2022 3y ago
CVE-2022-4257	medium	6.3/10	C-DATA Web Management System GET Parameter jumpto.php argument injection	Dec 1, 2022 3y ago
CVE-2022-4253	low	3.5/10	SourceCodester Canteen Management System customer.php builtin_echo cross site scripting	Dec 1, 2022 3y ago
CVE-2022-4252	low	3.5/10	SourceCodester Canteen Management System categories.php builtin_echo cross site scripting	Dec 1, 2022 3y ago
CVE-2022-4251	low	2.4/10	Movie Ticket Booking System editBooking.php cross site scripting	Dec 1, 2022 3y ago
CVE-2022-4250	low	3.5/10	Movie Ticket Booking System booking.php cross site scripting	Dec 1, 2022 3y ago
CVE-2022-4248	medium	5.0/10	Movie Ticket Booking System editBooking.php sql injection	Dec 1, 2022 3y ago
CVE-2022-4247	medium	6.3/10	Movie Ticket Booking System booking.php sql injection	Dec 1, 2022 3y ago
CVE-2022-4234	low	3.5/10	SourceCodester Canteen Management System brand.php builtin_echo cross site scripting	Nov 30, 2022 3y ago
CVE-2022-4229	high	7.3/10	SourceCodester Book Store Management System index.php access control	Nov 30, 2022 3y ago
CVE-2022-4222	medium	5.0/10	SourceCodester Canteen Management System POST Request ajax_invoice.php query sql injection	Nov 30, 2022 3y ago
CVE-2022-3490	—	—	Checkout Field Editor for WooCommerce < 1.8.0 - Admin+ PHP Object Injection	Nov 28, 2022 3y ago
CVE-2022-4091	low	3.5/10	SourceCodester Canteen Management System food.php query cross site scripting	Nov 25, 2022 3y ago
CVE-2022-4089	medium	4.3/10	rickxy Stock Management System processlogin.php cross site scripting	Nov 24, 2022 3y ago
CVE-2022-4088	high	7.3/10	rickxy Stock Management System processlogin.php sql injection	Nov 24, 2022 3y ago
CVE-2022-3861	high	8.8/10	Betheme <= 26.5.1.4 - Authenticated (Subscriber+) PHP Object Injection	Nov 21, 2022 3y ago
CVE-2022-45077	medium	6.3/10	WordPress Betheme theme <= 26.5.1.4 - Auth. PHP Object Injection vulnerability	Nov 17, 2022 3y ago