Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

707

Newly disclosed

Feed last synced

6 hrs ago

Data freshness

Showing 61–90 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-11532	medium	5.3/10	imvks786 student_management_system Student Record add.php access control	Jun 8, 2026 18d ago
CVE-2026-11531	medium	6.9/10	imvks786 student_management_system Administrator Login Endpoint admin_login.php sql injection	Jun 8, 2026 18d ago
CVE-2026-48488	low	2.7/10	phpMyFAQ has Weak Cryptography - SHA1 for Password Hashing	Jun 8, 2026 19d ago
CVE-2026-11520	medium	5.1/10	SourceCodester Inventory System header.php cross site scripting	Jun 8, 2026 19d ago
CVE-2026-11519	medium	5.3/10	SourceCodester Inventory System Account Creation users_handler.php improper authorization	Jun 8, 2026 19d ago
CVE-2026-11518	medium	5.3/10	SourceCodester Inventory System User Management users.php cross site scripting	Jun 8, 2026 19d ago
CVE-2026-11515	medium	6.9/10	SourceCodester Barangay Resident Profiling and Information Management System Password Reset passsword_reset.php hard-coded password	Jun 8, 2026 19d ago
CVE-2026-11514	medium	5.3/10	itsourcecode Hospital Management System addpatient.php sql injection	Jun 8, 2026 19d ago
CVE-2026-11513	medium	5.3/10	itsourcecode Hospital Management System adminaccount.php sql injection	Jun 8, 2026 19d ago
CVE-2026-11512	medium	5.3/10	itsourcecode Hospital Management System billing.php cross site scripting	Jun 8, 2026 19d ago
CVE-2026-11511	medium	5.1/10	Bolt CMS HTML Attribute TextType.php HTML injection	Jun 8, 2026 19d ago
CVE-2026-11510	medium	5.3/10	CodeAstro Leave Management System add_leave.php sql injection	Jun 8, 2026 19d ago
CVE-2026-11509	medium	5.3/10	CodeAstro Leave Management System search_staff_for_updation.php sql injection	Jun 8, 2026 19d ago
CVE-2026-11508	medium	5.3/10	CodeAstro Leave Management System search_staff_to_assign_pc.php sql injection	Jun 8, 2026 19d ago
CVE-2026-11507	medium	5.3/10	CodeAstro Leave Management System delete_leave_type.php sql injection	Jun 8, 2026 19d ago
CVE-2026-11506	medium	5.3/10	CodeAstro Leave Management System search_staff_for_deletion.php sql injection	Jun 8, 2026 19d ago
CVE-2026-11501	medium	6.9/10	SourceCodester Hospitals Patient Records Management System Master.php save_patient sql injection	Jun 8, 2026 19d ago
CVE-2026-11495	medium	5.3/10	CodeAstro Ingredients Stock Management System add_stock.php sql injection	Jun 8, 2026 19d ago
CVE-2026-11490	medium	6.9/10	code-projects Online Music Site Search.php sql injection	Jun 8, 2026 19d ago
CVE-2026-11489	medium	6.9/10	code-projects Online Music Site AdminDeleteAlbum.php sql injection	Jun 8, 2026 19d ago
CVE-2026-11488	medium	6.9/10	code-projects Simple Flight Ticket Booking System POST Parameter checkUser.php sql injection	Jun 8, 2026 19d ago
CVE-2026-11486	medium	6.9/10	SourceCodester Class and Exam Timetabling System archive1.php sql injection	Jun 8, 2026 19d ago
CVE-2026-11485	medium	6.9/10	SourceCodester Class and Exam Timetabling System archive2.php sql injection	Jun 8, 2026 19d ago
CVE-2026-11484	medium	6.9/10	SourceCodester Class and Exam Timetabling System archive3.php sql injection	Jun 8, 2026 19d ago
CVE-2026-11483	medium	6.9/10	SourceCodester Class and Exam Timetabling System archive4.php sql injection	Jun 8, 2026 19d ago
CVE-2026-11482	medium	6.9/10	SourceCodester Class and Exam Timetabling System archive5.php sql injection	Jun 8, 2026 19d ago
CVE-2026-11480	medium	5.3/10	Chengdu Everbrite Network Technology BeikeShop Admin Design Builder Endpoint admin.php sql injection	Jun 8, 2026 19d ago
CVE-2026-11476	medium	5.3/10	Kushan2k student-management-system Profile Update Endpoint AdminController.php edit-admin improper authorization	Jun 8, 2026 19d ago
CVE-2026-11475	medium	5.3/10	Kushan2k student-management-system Certificate Verification Endpoint GradeController.php getStatus sql injection	Jun 8, 2026 19d ago
CVE-2026-11474	medium	6.9/10	Kushan2k student-management-system Registration Endpoint RegisterService.php unrestricted upload	Jun 8, 2026 19d ago