Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,401

All time

Critical · Active

12,220

CVSS ≥ 9.0

New · 14 days

3,619

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 8581–8610 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-1191	high	8.7/10	SSRF on index.php/cobrowse/proxycss/ in livehelperchat/livehelperchat	Mar 31, 2022 4y ago
CVE-2022-1086	low	3.5/10	DolphinPHP User Management Page cross site scripting	Mar 29, 2022 4y ago
CVE-2022-1085	low	3.5/10	CLTPHP POST Parameter cross site scripting	Mar 29, 2022 4y ago
CVE-2022-1084	high	7.3/10	SourceCodester One Church Management System Session userregister.php improper authentication	Mar 29, 2022 4y ago
CVE-2022-1082	high	7.3/10	SourceCodester Microfinance Management System Login Page login.php sql injection	Mar 29, 2022 4y ago
CVE-2022-1081	medium	4.3/10	SourceCodester Microfinance Management System addcustomerHandler.php cross site scripting	Mar 29, 2022 4y ago
CVE-2022-1080	high	7.3/10	SourceCodester One Church Management System attendancy.php sql injection	Mar 29, 2022 4y ago
CVE-2022-1079	medium	4.3/10	SourceCodester One Church Management System churchprofile.php cross site scripting	Mar 29, 2022 4y ago
CVE-2022-1076	medium	4.3/10	Automatic Question Paper Generator System My Account Page login.php cross site scripting	Mar 29, 2022 4y ago
CVE-2021-24950	—	—	Insight Core <= 1.0 - Subscriber+ PHP Object Injection & Stored XSS	Mar 14, 2022 4y ago
CVE-2022-0813	medium	5.3/10	PhpMyAdmin exposure of sensitive information	Mar 9, 2022 4y ago
CVE-2021-21708	high	8.2/10	UAF due to php_filter_float() failing	Feb 27, 2022 4y ago
CVE-2022-0323	medium	5.3/10	Improper Neutralization of Special Elements Used in a Template Engine in bobthecow/mustache.php	Jan 21, 2022 4y ago
CVE-2021-23227	medium	5.4/10	WordPress PHP Everywhere Plugin <= 2.0.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 13, 2022 4y ago
CVE-2022-21666	high	7.2/10	SQL Injection in useredit.php	Jan 10, 2022 4y ago
CVE-2021-21408	high	8.8/10	Access to restricted PHP code by dynamic static class access in smarty	Jan 10, 2022 4y ago
CVE-2021-43836	high	8.5/10	PHP file inclusion in the Sulu admin panel	Dec 15, 2021 4y ago
CVE-2021-24857	—	—	ToTop Link <= 1.7.1 - Unauthenticated PHP Object Injection	Dec 13, 2021 4y ago
CVE-2021-24721	—	—	Loco Translate < 2.5.4 - Authenticated PHP Code Injection	Nov 8, 2021 4y ago
CVE-2021-24537	—	—	Similar Posts <= 3.1.5 - Admin+ Arbitrary PHP Code Execution	Nov 8, 2021 4y ago
CVE-2021-21703	high	7.8/10	PHP-FPM memory access in root process leading to privilege escalation	Oct 25, 2021 4y ago
CVE-2021-39321	high	8.8/10	Sassy Social Share 3.3.23 PHP Object Injection	Oct 21, 2021 4y ago
CVE-2021-41139	high	8.1/10	Reflected XSS vulnerability in time.php	Oct 13, 2021 4y ago
CVE-2021-24546	—	—	EditorsKit < 1.31.6 - Contributor+ Arbitrary PHP Code Execution	Oct 11, 2021 4y ago
CVE-2021-38320	medium	6.1/10	simpleSAMLphp Authentication <= 0.7.0 Reflected Cross-Site Scripting	Sep 9, 2021 4y ago
CVE-2021-24579	—	—	Bold Page Builder < 3.1.6 - PHP Object Injection	Aug 30, 2021 4y ago
CVE-2021-37704	medium	5.4/10	Exposed phpinfo() in PhpFastCache	Aug 12, 2021 5y ago
CVE-2021-37626	high	7.2/10	PHP file inclusion via insert tags	Aug 11, 2021 5y ago
CVE-2021-36800	high	8.7/10	Akaunting OS Command Injection in 'Money.php'	Aug 4, 2021 5y ago
CVE-2021-31867	medium	6.5/10	Pimcore Customer Data Framework 'SegmentAssignmentController.php' Blind SQL Injection	Aug 4, 2021 5y ago