Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,126

All time

Critical · Active

11,967

CVSS ≥ 9.0

New · 14 days

2,707

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 61–90 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-65579	critical	9.8/10	WordPress Agricola theme <= 1.21.0 - PHP Object Injection vulnerability	Aug 6, 2026 17d ago
CVE-2026-65578	critical	9.8/10	WordPress Agora theme <= 1.9 - PHP Object Injection vulnerability	Aug 6, 2026 17d ago
CVE-2026-65577	critical	9.8/10	WordPress Advice theme <= 1.18.0 - PHP Object Injection vulnerability	Aug 6, 2026 17d ago
CVE-2026-65576	critical	9.8/10	WordPress Adrena theme <= 1.2.14 - PHP Object Injection vulnerability	Aug 6, 2026 17d ago
CVE-2026-65575	critical	9.8/10	WordPress Accalia theme <= 1.5.3 - PHP Object Injection vulnerability	Aug 6, 2026 17d ago
CVE-2026-65574	critical	9.8/10	WordPress Abogado theme <= 1.18 - PHP Object Injection vulnerability	Aug 6, 2026 17d ago
CVE-2026-65573	critical	9.8/10	WordPress Abelle theme <= 1.22 - PHP Object Injection vulnerability	Aug 6, 2026 17d ago
CVE-2026-65572	critical	9.8/10	WordPress A.Williams theme <= 1.3.1 - PHP Object Injection vulnerability	Aug 6, 2026 17d ago
CVE-2026-65571	critical	9.8/10	WordPress 69 Clothing theme <= 1.2.11.1 - PHP Object Injection vulnerability	Aug 6, 2026 17d ago
CVE-2026-65556	critical	9.8/10	WordPress WPBruiser {no- Captcha anti-Spam} plugin <= 3.1.43 - PHP Object Injection vulnerability	Aug 6, 2026 17d ago
CVE-2026-65552	critical	9.8/10	WordPress Export User Data plugin <= 2.2.6 - PHP Object Injection vulnerability	Aug 6, 2026 17d ago
CVE-2026-65549	high	7.2/10	WordPress Jeg Elementor Kit plugin <= 3.2.10 - PHP Object Injection vulnerability	Aug 6, 2026 17d ago
CVE-2026-28139	critical	9.8/10	WordPress Ajax Search Lite plugin <= 4.14.4 - PHP Object Injection vulnerability	Aug 6, 2026 17d ago
CVE-2026-19020	medium	5.3/10	itsourcecode Hospital Management System servicetype.php sql injection	Aug 6, 2026 18d ago
CVE-2026-18968	medium	5.3/10	ttttonyhe OBlog tags.php cross site scripting	Aug 5, 2026 18d ago
CVE-2026-18959	medium	5.3/10	yushine InnoShop Files Endpoint panel-api.php destroyFiles path traversal	Aug 5, 2026 18d ago
CVE-2026-18958	medium	6.9/10	imranrisal-dev Student-Management-System Login loginCheckTest.php sql injection	Aug 5, 2026 18d ago
CVE-2026-53992	medium	5.1/10	Reflected XSS in ProjectSend thumbnails-regenerate.php via start_date / end_date Parameters	Aug 5, 2026 18d ago
CVE-2026-71294	high	7.7/10	Cotonti CMS Comments Plugin PHP Object Injection via Unrestricted unserialize() in Create/Edit Actions	Aug 5, 2026 18d ago
CVE-2026-71248	critical	9.8/10	Inventory-Management-System-PHP - Unauthenticated SQL Injection in Login and Product Deletion	Aug 5, 2026 18d ago
CVE-2026-71237	critical	9.8/10	Miantang IoT-PHP - Unauthenticated SQL Injection in /userlogin	Aug 5, 2026 18d ago
CVE-2026-71207	critical	9.8/10	Stock-Inventory-Management-System - Unauthenticated SQL Injection and Hardcoded Credentials in login.php Enable Full Authentication Bypass	Aug 5, 2026 19d ago
CVE-2026-54416	high	7.2/10	Pluck CMS - Unrestricted File Upload via Missing .php8 Extension in Upload Blacklist	Aug 5, 2026 19d ago
CVE-2026-18896	medium	5.3/10	lavkush-maurya Student-Registration-System changepass.php sql injection	Aug 5, 2026 19d ago
CVE-2026-18856	medium	5.1/10	Poesis Rhymix CMS Data Import importer.admin.controller.php procImporterAdminCheckXmlFile server-side request forgery	Aug 5, 2026 19d ago
CVE-2026-18788	medium	6.9/10	Trippo ResponsiveFilemanager dialog.php unrestricted upload	Aug 4, 2026 19d ago
CVE-2026-18766	medium	5.3/10	chetans9 core-php-admin-panel customers.php sql injection	Aug 4, 2026 19d ago
CVE-2026-16623	—	—	Create Block Theme < 2.10.0 - Admin+ PHP Code Injection via Pattern Save (Multisite)	Aug 4, 2026 20d ago
CVE-2026-18645	medium	5.3/10	danpros HTMLy Admin Content Endpoint admin.php add_content path traversal	Aug 3, 2026 20d ago
CVE-2026-67598	critical	9.1/10	Emlog Pro 2.6.23 TLS Certificate Validation Disabled in ai.php	Aug 3, 2026 20d ago