Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,509

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

698

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 841–870 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-32502	critical	9.8/10	WordPress Borgholm theme < 1.6 - PHP Object Injection vulnerability	Mar 25, 2026 3mo ago
CVE-2026-32484	high	8.8/10	WordPress weForms plugin <= 1.6.26 - PHP Object Injection vulnerability	Mar 25, 2026 3mo ago
CVE-2026-27095	critical	9.8/10	WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.6.0 - PHP Object Injection vulnerability	Mar 25, 2026 3mo ago
CVE-2026-27084	critical	9.8/10	WordPress Buisson theme <= 1.1.11 - PHP Object Injection vulnerability	Mar 25, 2026 3mo ago
CVE-2026-27083	critical	9.8/10	WordPress Work & Travel Company theme <= 1.2 - PHP Object Injection vulnerability	Mar 25, 2026 3mo ago
CVE-2026-27082	critical	9.8/10	WordPress Love Story theme <= 1.3.12 - PHP Object Injection vulnerability	Mar 25, 2026 3mo ago
CVE-2026-27045	high	8.8/10	WordPress WooCommerce Infinite Scroll plugin <= 1.6.2 - PHP Object Injection vulnerability	Mar 25, 2026 3mo ago
CVE-2026-25429	critical	9.8/10	WordPress Nexa Blocks plugin <= 1.1.1 - PHP Object Injection vulnerability	Mar 25, 2026 3mo ago
CVE-2026-25400	high	8.8/10	WordPress Apicona theme <= 24.1.0 - PHP Object Injection vulnerability	Mar 25, 2026 3mo ago
CVE-2026-25360	high	8.8/10	WordPress Vex theme < 1.2.9 - PHP Object Injection vulnerability	Mar 25, 2026 3mo ago
CVE-2026-25359	high	8.8/10	WordPress Pendulum theme < 3.1.5 - PHP Object Injection vulnerability	Mar 25, 2026 3mo ago
CVE-2026-25358	high	8.8/10	WordPress Meloo theme < 2.8.2 - PHP Object Injection vulnerability	Mar 25, 2026 3mo ago
CVE-2026-25032	critical	9.8/10	WordPress Ricky theme < 2.31 - PHP Object Injection vulnerability	Mar 25, 2026 3mo ago
CVE-2026-25031	critical	9.8/10	WordPress Tasty Daily theme < 1.27 - PHP Object Injection vulnerability	Mar 25, 2026 3mo ago
CVE-2026-25030	critical	9.8/10	WordPress Goldish theme < 3.47 - PHP Object Injection vulnerability	Mar 25, 2026 3mo ago
CVE-2026-25029	critical	9.8/10	WordPress KIDZ theme <= 5.24 - PHP Object Injection vulnerability	Mar 25, 2026 3mo ago
CVE-2026-24989	critical	9.8/10	WordPress SUMO Affiliates Pro plugin < 11.4.0 - PHP Object Injection vulnerability	Mar 25, 2026 3mo ago
CVE-2026-24981	high	8.8/10	WordPress Visionary Core plugin <= 1.4.9 - PHP Object Injection vulnerability	Mar 25, 2026 3mo ago
CVE-2026-24978	high	8.8/10	WordPress Jobica Core plugin <= 1.4.1 - PHP Object Injection vulnerability	Mar 25, 2026 3mo ago
CVE-2026-24976	high	8.8/10	WordPress Organici Library plugin <= 2.1.2 - PHP Object Injection vulnerability	Mar 25, 2026 3mo ago
CVE-2026-24974	high	8.8/10	WordPress CitiLights theme <= 3.7.1 - PHP Object Injection vulnerability	Mar 25, 2026 3mo ago
CVE-2026-24378	critical	9.8/10	WordPress EventPrime plugin <= 4.2.8.0 - PHP Object Injection vulnerability	Mar 25, 2026 3mo ago
CVE-2026-23971	high	8.1/10	WordPress WoodMart theme <= 8.3.8 - PHP Object Injection vulnerability	Mar 25, 2026 3mo ago
CVE-2026-22510	high	8.1/10	WordPress Melody theme <= 1.6.3 - PHP Object Injection vulnerability	Mar 25, 2026 3mo ago
CVE-2026-22507	critical	9.8/10	WordPress Beelove theme <= 1.2.6 - PHP Object Injection vulnerability	Mar 25, 2026 3mo ago
CVE-2026-22505	high	8.1/10	WordPress Morning Records theme <= 1.2 - PHP Object Injection vulnerability	Mar 25, 2026 3mo ago
CVE-2026-22500	critical	9.8/10	WordPress m2 \| Construction and Tools Store theme <= 1.1.2 - PHP Object Injection vulnerability	Mar 25, 2026 3mo ago
CVE-2026-22480	high	7.2/10	WordPress Product Feed for WooCommerce plugin <= 2.3.3 - PHP Object Injection vulnerability	Mar 25, 2026 3mo ago
CVE-2026-4784	medium	6.9/10	code-projects Simple Laundry System Parameter checkcheckout.php sql injection	Mar 25, 2026 3mo ago
CVE-2026-4783	medium	5.3/10	itsourcecode College Management System Parameter add-single-student-results.php sql injection	Mar 25, 2026 3mo ago