Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,401

All time

Critical · Active

12,220

CVSS ≥ 9.0

New · 14 days

3,619

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 8611–8640 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2021-24384	—	—	JoomSport < 5.1.8 - Unauthenticated PHP Object Injection	Jul 6, 2021 5y ago
CVE-2021-32644	medium	6.4/10	Cross-site Scripting in Random.php	Jun 22, 2021 5y ago
CVE-2021-3603	high	8.1/10	Inclusion of Functionality from Untrusted Control Sphere in PHPMailer/PHPMailer	Jun 17, 2021 5y ago
CVE-2021-24280	—	—	Redirection for Contact Form 7 < 2.3.4 - Authenticated PHP Object Injection	May 14, 2021 5y ago
CVE-2021-24248	—	—	Business Directory Plugin < 5.11.1 - Authenticated PHP4 Upload to RCE	May 5, 2021 5y ago
CVE-2021-29447	high	7.1/10	WordPress Authenticated XXE attack when installation is running PHP 8	Apr 15, 2021 5y ago
CVE-2021-29440	high	8.4/10	Twig allowing dangerous PHP functions by default	Apr 13, 2021 5y ago
CVE-2021-24217	—	—	Facebook for WordPress < 3.0.0 - PHP Object Injection with POP Chain	Apr 12, 2021 5y ago
CVE-2021-21064	medium	4.9/10	Magento UPWARD-php Path traversal vulnerability via UPWARD Connector	Feb 25, 2021 5y ago
CVE-2020-26255	medium	6.8/10	PHP Phar archives could be uploaded and executed in Kirby	Dec 8, 2020 5y ago
CVE-2020-7070	medium	4.3/10	PHP parses encoded cookie names so malicious `__Host-` cookies can be sent	Oct 2, 2020 5y ago
CVE-2020-4043	high	7.7/10	Phar unserialization vulnerability in phpMussel	Jun 10, 2020 6y ago
CVE-2020-1993	low	3.7/10	PAN-OS: GlobalProtect Portal PHP session fixation vulnerability	May 13, 2020 6y ago
CVE-2020-11011	critical	9.9/10	RCE via file upload in Phproject	Apr 22, 2020 6y ago
CVE-2020-5301	low	3.0/10	Information disclosure of source code in SimpleSAMLphp	Apr 21, 2020 6y ago
CVE-2020-7065	high	7.4/10	mb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full	Apr 1, 2020 6y ago
CVE-2020-7062	high	7.5/10	Null Pointer Dereference in PHP Session Upload Progress	Feb 27, 2020 6y ago
CVE-2020-7059	medium	6.5/10	OOB read in php_strip_tags_ex	Feb 10, 2020 6y ago
CVE-2020-5226	medium	4.4/10	Cross-site scripting in SimpleSAMLphp	Jan 24, 2020 6y ago
CVE-2020-5225	medium	4.4/10	Log injection in SimpleSAMLphp	Jan 24, 2020 6y ago
CVE-2019-11043	high	8.7/10	Underflow in PHP-FPM can lead to RCE	Oct 28, 2019 6y ago
CVE-2019-11037	medium	4.9/10	Out of bounds memory write in PHP Imagick extension	May 3, 2019 7y ago
CVE-2019-11036	medium	4.8/10	Heap over-read in PHP EXIF extension	May 3, 2019 7y ago
CVE-2019-11035	medium	4.8/10	Heap over-read in PHP EXIF extension	Apr 18, 2019 7y ago
CVE-2019-11034	medium	4.8/10	Heap over-read in PHP EXIF extension	Apr 18, 2019 7y ago
CVE-2019-6339	—	—	PHAR stream wrapper Arbitrary PHP code execution	Jan 22, 2019 7y ago
CVE-2016-9493	—	—	PHP forms generated using the PHP FormMail Generator are vulnerable to stored cross-site scripting	Jul 13, 2018 8y ago
CVE-2016-9492	—	—	PHP forms generated using the PHP FormMail Generator are vulnerable to unrestricted upload of dangerous file types	Jul 13, 2018 8y ago
CVE-2016-9484	—	—	PHP FormMail Generator generates PHP code for standard web forms, and the code generated does not properly validate user input folder directories and is vulnerable to path traversal	Jul 13, 2018 8y ago
CVE-2016-9483	—	—	PHP FormMail Generator generates PHP code for standard web forms, and the code generated is vulnerable to unsafe deserialization of untrusted data	Jul 13, 2018 8y ago