Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,282

All time

Critical · Active

11,988

CVSS ≥ 9.0

New · 14 days

2,741

Newly disclosed

Feed last synced

34 mins ago

Data freshness

Showing 901–930 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-39940	medium	5.3/10	ChurchCRM has an Open Redirect via the ‘linkBack’ URL Parameter in DonatedItemEditor.php	Apr 13, 2026 4mo ago
CVE-2026-6191	medium	5.3/10	itsourcecode Construction Management System equipments.php sql injection	Apr 13, 2026 4mo ago
CVE-2026-6190	medium	5.3/10	itsourcecode Construction Management System employees.php sql injection	Apr 13, 2026 4mo ago
CVE-2026-6189	medium	6.9/10	SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection	Apr 13, 2026 4mo ago
CVE-2026-6188	medium	6.9/10	SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection	Apr 13, 2026 4mo ago
CVE-2026-6187	medium	6.9/10	SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection	Apr 13, 2026 4mo ago
CVE-2026-6184	medium	4.8/10	code-projects Simple Content Management System welcome.php cross site scripting	Apr 13, 2026 4mo ago
CVE-2026-6183	medium	6.9/10	code-projects Simple Content Management System index.php sql injection	Apr 13, 2026 4mo ago
CVE-2026-6182	medium	6.9/10	code-projects Simple Content Management System login.php sql injection	Apr 13, 2026 4mo ago
CVE-2026-6167	medium	6.9/10	code-projects Faculty Management System subject-print.php sql injection	Apr 13, 2026 4mo ago
CVE-2026-6166	medium	6.9/10	code-projects Vehicle Showroom Management System UpdateVehicleFunction.php sql injection	Apr 13, 2026 4mo ago
CVE-2026-6165	medium	6.9/10	code-projects Vehicle Showroom Management System Login_check.php sql injection	Apr 13, 2026 4mo ago
CVE-2026-6164	medium	6.9/10	code-projects Lost and Found Thing Management addcat.php sql injection	Apr 13, 2026 4mo ago
CVE-2026-6163	medium	6.9/10	code-projects Lost and Found Thing Management catageory.php sql injection	Apr 13, 2026 4mo ago
CVE-2026-6162	medium	5.1/10	PHPGurukul Company Visitor Management System bwdates-reports-details.php cross site scripting	Apr 13, 2026 4mo ago
CVE-2026-6161	medium	6.9/10	code-projects Simple ChatBox Endpoint insert.php sql injection	Apr 13, 2026 4mo ago
CVE-2026-6160	medium	6.9/10	code-projects Simple ChatBox Endpoint chatbox.sql SimpleChatbox_PHP file information disclosure	Apr 13, 2026 4mo ago
CVE-2026-6159	medium	5.3/10	code-projects Simple ChatBox Endpoint insert.php cross site scripting	Apr 13, 2026 4mo ago
CVE-2026-6153	medium	6.9/10	code-projects Vehicle Showroom Management System StaffDetailsFunction.php sql injection	Apr 13, 2026 4mo ago
CVE-2026-6152	medium	6.9/10	code-projects Vehicle Showroom Management System StaffAddingFunction.php sql injection	Apr 13, 2026 4mo ago
CVE-2026-6151	medium	6.9/10	code-projects Vehicle Showroom Management System PaymentStatusFunction.php sql injection	Apr 13, 2026 4mo ago
CVE-2026-6150	medium	5.3/10	code-projects Simple Laundry System checkupdatestatus.php cross site scripting	Apr 13, 2026 4mo ago
CVE-2026-6149	medium	6.9/10	code-projects Vehicle Showroom Management System BookVehicleFunction.php sql injection	Apr 13, 2026 4mo ago
CVE-2026-6148	medium	6.9/10	code-projects Vehicle Showroom Management System MonthTotalReportUpdateFunction.php sql injection	Apr 13, 2026 4mo ago
CVE-2026-6142	medium	6.9/10	tushar-2223 Hotel Management System roomdelete.php sql injection	Apr 13, 2026 4mo ago
CVE-2019-25707	high	7.1/10	eBrigade ERP 4.5 SQL Injection via pdf.php	Apr 12, 2026 4mo ago
CVE-2019-25697	high	8.8/10	CMSsite 1.0 SQL Injection via category.php	Apr 12, 2026 4mo ago
CVE-2019-25693	high	7.1/10	ResourceSpace 8.6 SQL Injection via collection_edit.php	Apr 12, 2026 4mo ago
CVE-2026-40194	low	3.7/10	phpseclib has a variable-time HMAC comparison in SSH2::get_binary_packet() using != instead of hash_equals()	Apr 10, 2026 4mo ago
CVE-2026-6038	medium	6.9/10	code-projects Vehicle Showroom Management System RegisterCustomerFunction.php sql injection	Apr 10, 2026 4mo ago