Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,287

All time

Critical · Active

11,990

CVSS ≥ 9.0

New · 14 days

2,744

Newly disclosed

Feed last synced

57 mins ago

Data freshness

Showing 991–1020 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-35448	low	3.7/10	WWBN AVideo Provides Unauthenticated Access to Payment Order Data via BlockonomicsYPT check.php	Apr 6, 2026 4mo ago
CVE-2026-35395	high	8.8/10	WeGIA has a SQL Injection in DespachoDAO.php via id_memorando parameter	Apr 6, 2026 4mo ago
CVE-2026-5681	medium	5.3/10	itsourcecode sanitize or validate this input Parameter borrowedequip.php sql injection	Apr 6, 2026 4mo ago
CVE-2026-35181	medium	4.3/10	WWBN AVideo Affected by CSRF on Player Skin Configuration via admin/playerUpdate.json.php	Apr 6, 2026 4mo ago
CVE-2026-35179	medium	5.3/10	WWBN AVideo Unauthenticated Instagram Graph API Proxy via publishInstagram.json.php	Apr 6, 2026 4mo ago
CVE-2026-5675	medium	5.3/10	itsourcecode Construction Management System Parameter borrowed_tool.php sql injection	Apr 6, 2026 4mo ago
CVE-2026-5672	medium	6.9/10	code-projects Simple IT Discussion Forum Parameter edit-category.php sql injection	Apr 6, 2026 4mo ago
CVE-2026-5671	medium	5.3/10	Cyber-III Student-Management-System Class Schedule Deletion Endpoint delete_batch.php cross site scripting	Apr 6, 2026 4mo ago
CVE-2026-5670	medium	5.3/10	Cyber-III Student-Management-System upload.php move_uploaded_file unrestricted upload	Apr 6, 2026 4mo ago
CVE-2026-5669	medium	6.9/10	Cyber-III Student-Management-System Parameter login.php sql injection	Apr 6, 2026 4mo ago
CVE-2026-5668	medium	4.8/10	Cyber-III Student-Management-System add%20notice.php cross site scripting	Apr 6, 2026 4mo ago
CVE-2026-34951	medium	5.1/10	Reflected XSS in footer.php in Workbench Allows Attackers to Hijack Authenticated Sessions	Apr 6, 2026 4mo ago
CVE-2026-5665	medium	6.9/10	code-projects Online FIR System Login checklogin.php sql injection	Apr 6, 2026 4mo ago
CVE-2026-5660	medium	5.3/10	itsourcecode Construction Management System Parameter borrowed_equip.php sql injection	Apr 6, 2026 4mo ago
CVE-2026-5649	medium	5.3/10	code-projects Online Application System for Admission Endpoint admsnform.php sql injection	Apr 6, 2026 4mo ago
CVE-2026-5648	medium	6.9/10	code-projects Simple Laundry System Parameter userfinishregister.php sql injection	Apr 6, 2026 4mo ago
CVE-2026-5647	medium	4.8/10	code-projects Online Shoe Store Add Product admin_feature.php cross site scripting	Apr 6, 2026 4mo ago
CVE-2026-5646	medium	6.9/10	code-projects Easy Blog Site login.php sql injection	Apr 6, 2026 4mo ago
CVE-2026-5645	medium	6.9/10	projectworlds Car Rental System Parameter pay.php sql injection	Apr 6, 2026 4mo ago
CVE-2026-5644	medium	4.8/10	Cyber-III Student-Management-System batch-notice.php cross site scripting	Apr 6, 2026 4mo ago
CVE-2026-5643	medium	4.8/10	Cyber-III Student-Management-System Admin Add Endpoint notice.php cross site scripting	Apr 6, 2026 4mo ago
CVE-2026-5642	medium	6.9/10	Cyber-III Student-Management-System HTTP POST Request update.php improper authorization	Apr 6, 2026 4mo ago
CVE-2026-5641	medium	5.3/10	PHPGurukul Online Shopping Portal Project Parameter update-image1.php sql injection	Apr 6, 2026 4mo ago
CVE-2026-5640	medium	5.3/10	PHPGurukul Online Shopping Portal Project Parameter update-image2.php sql injection	Apr 6, 2026 4mo ago
CVE-2026-5639	medium	5.3/10	PHPGurukul Online Shopping Portal Project Parameter update-image3.php sql injection	Apr 6, 2026 4mo ago
CVE-2026-5637	medium	6.9/10	projectworlds Car Rental System Parameter message_admin.php sql injection	Apr 6, 2026 4mo ago
CVE-2026-5636	medium	5.3/10	PHPGurukul Online Shopping Portal Project Parameter cancelorder.php sql injection	Apr 6, 2026 4mo ago
CVE-2026-5635	medium	5.3/10	PHPGurukul Online Shopping Portal Project Parameter categorywise-products.php sql injection	Apr 6, 2026 4mo ago
CVE-2026-5634	medium	6.9/10	projectworlds Car Rental Project Parameter book_car.php sql injection	Apr 6, 2026 4mo ago
CVE-2026-5624	medium	5.3/10	ProjectSend upload.php cross-site request forgery	Apr 6, 2026 4mo ago