Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,227

All time

Critical · Active

11,982

CVSS ≥ 9.0

New · 14 days

2,687

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 811–840 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-7194	medium	6.9/10	SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection	Apr 27, 2026 3mo ago
CVE-2026-7145	medium	5.3/10	mettle sendportal Invitation WorkspaceInvitationsController.php destroy authorization	Apr 27, 2026 3mo ago
CVE-2026-7144	medium	5.3/10	1000 Projects Portfolio Management System MCA update_passwd_process.php authorization	Apr 27, 2026 3mo ago
CVE-2026-7143	medium	5.3/10	1000 Projects Portfolio Management System MCA block_status.php sql injection	Apr 27, 2026 3mo ago
CVE-2026-41465	high	7.1/10	ProjeQtor < 12.4.4 Path Traversal via dynamicDialog.php	Apr 27, 2026 3mo ago
CVE-2026-41464	high	7.1/10	ProjeQtor < 12.4.4 Missing Authorization via objectDetail.php	Apr 27, 2026 3mo ago
CVE-2026-41463	high	8.7/10	ProjeQtor < 12.4.4 ZipSlip Path Traversal via uploadPlugin.php	Apr 27, 2026 3mo ago
CVE-2026-7134	medium	5.1/10	code-projects Online Lot Reservation System edithousepic.php unrestricted upload	Apr 27, 2026 3mo ago
CVE-2026-7133	medium	5.1/10	code-projects Online Lot Reservation System activity.php unrestricted upload	Apr 27, 2026 3mo ago
CVE-2026-7132	medium	6.9/10	code-projects Online Lot Reservation System download.php readfile path traversal	Apr 27, 2026 3mo ago
CVE-2026-7131	medium	6.9/10	code-projects Online Lot Reservation System loginuser.php sql injection	Apr 27, 2026 3mo ago
CVE-2026-7130	medium	6.9/10	SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection	Apr 27, 2026 3mo ago
CVE-2026-7129	medium	5.3/10	SourceCodester Pharmacy Sales and Inventory System index.php cross site scripting	Apr 27, 2026 3mo ago
CVE-2026-7128	medium	6.9/10	SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection	Apr 27, 2026 3mo ago
CVE-2026-7127	medium	6.9/10	SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection	Apr 27, 2026 3mo ago
CVE-2026-7126	medium	6.9/10	SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection	Apr 27, 2026 3mo ago
CVE-2026-7118	medium	5.3/10	code-projects Employee Management System cancel.php sql injection	Apr 27, 2026 3mo ago
CVE-2026-7117	medium	5.3/10	code-projects Employee Management System approve.php sql injection	Apr 27, 2026 3mo ago
CVE-2026-7116	medium	5.3/10	code-projects Employee Management System mark.php cross site scripting	Apr 27, 2026 3mo ago
CVE-2026-7115	medium	5.3/10	code-projects Employee Management System delete.php sql injection	Apr 27, 2026 3mo ago
CVE-2026-7114	medium	5.3/10	code-projects Employee Management System edit.php sql injection	Apr 27, 2026 3mo ago
CVE-2026-7103	medium	6.3/10	code-projects Chat System MD5 Hash update_user.php weak hash	Apr 27, 2026 3mo ago
CVE-2026-7095	medium	5.3/10	code-projects Employee Management System edit.php cross site scripting	Apr 27, 2026 3mo ago
CVE-2026-7090	medium	4.8/10	code-projects Chat System send_message.php cross site scripting	Apr 27, 2026 3mo ago
CVE-2026-7089	medium	5.3/10	code-projects Home Service System Appointment Booking booking.php cross site scripting	Apr 27, 2026 3mo ago
CVE-2026-7088	medium	6.9/10	SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection	Apr 27, 2026 3mo ago
CVE-2026-7087	medium	6.9/10	SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection	Apr 27, 2026 3mo ago
CVE-2026-7083	medium	5.1/10	likeadmin-likeshop likeadmin_php dataTable Admin API DataTableLists.php queryResult sql injection	Apr 27, 2026 3mo ago
CVE-2026-7077	medium	6.9/10	itsourcecode Courier Management System edit_parcel.php sql injection	Apr 27, 2026 3mo ago
CVE-2026-7076	medium	6.9/10	itsourcecode Courier Management System edit_branch.php sql injection	Apr 27, 2026 3mo ago