Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,287

All time

Critical · Active

11,990

CVSS ≥ 9.0

New · 14 days

2,743

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1021–1050 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-5620	medium	5.3/10	itsourcecode Construction Management System Parameter borrowed_equip_report.php sql injection	Apr 6, 2026 4mo ago
CVE-2026-5615	medium	5.3/10	givanz Vvvebjs File Upload Endpoint upload.php cross site scripting	Apr 6, 2026 4mo ago
CVE-2026-5606	medium	5.3/10	PHPGurukul Online Shopping Portal Project Parameter order-details.php sql injection	Apr 6, 2026 4mo ago
CVE-2019-25687	critical	9.3/10	Pegasus CMS 1.0 Remote Code Execution via extra_fields.php	Apr 5, 2026 4mo ago
CVE-2019-25682	medium	5.3/10	CMSsite 1.0 Cross-Site Request Forgery via users.php	Apr 5, 2026 4mo ago
CVE-2019-25678	high	8.8/10	C4G BLIS 3.4 SQL Injection via users_select.php	Apr 5, 2026 4mo ago
CVE-2019-25671	high	8.7/10	VA MAX 8.3.4 Remote Code Execution via changeip.php	Apr 5, 2026 4mo ago
CVE-2019-25668	high	8.8/10	News Website Script 2.0.5 SQL Injection via index.php	Apr 5, 2026 4mo ago
CVE-2019-25662	high	8.8/10	ResourceSpace 8.6 SQL Injection via watched_searches.php	Apr 5, 2026 4mo ago
CVE-2026-5583	medium	5.3/10	PHPGurukul Online Shopping Portal Project Parameter my-profile.php sql injection	Apr 5, 2026 4mo ago
CVE-2026-5580	medium	5.3/10	CodeAstro Online Classroom Parameter addvideos.php sql injection	Apr 5, 2026 4mo ago
CVE-2026-5579	medium	5.3/10	CodeAstro Online Classroom Parameter updatedetailsfromfaculty.php sql injection	Apr 5, 2026 4mo ago
CVE-2026-5578	medium	5.3/10	CodeAstro Online Classroom Parameter addassessment.php sql injection	Apr 5, 2026 4mo ago
CVE-2026-5576	medium	5.1/10	SourceCodester/jkev Record Management System Add Employee save_emp.php unrestricted upload	Apr 5, 2026 4mo ago
CVE-2026-5575	medium	6.9/10	SourceCodester/jkev Record Management System Login index.php sql injection	Apr 5, 2026 4mo ago
CVE-2026-5565	medium	6.9/10	code-projects Simple Laundry System Parameter delmemberinfo.php sql injection	Apr 5, 2026 4mo ago
CVE-2026-5564	medium	6.9/10	code-projects Simple Laundry System Parameter searchguest.php sql injection	Apr 5, 2026 4mo ago
CVE-2026-5561	medium	5.3/10	Campcodes Complete POS Management and Inventory System Environment Variable SettingsController.php injection	Apr 5, 2026 4mo ago
CVE-2026-5560	medium	5.3/10	PHPGurukul Online Shopping Portal Project Parameter payment-method.php sql injection	Apr 5, 2026 4mo ago
CVE-2026-5558	medium	5.3/10	PHPGurukul PHPGurukul Online Shopping Portal Project Parameter pending-orders.php sql injection	Apr 5, 2026 4mo ago
CVE-2026-5555	medium	6.9/10	code-projects Concert Ticket Reservation System Parameter login.php sql injection	Apr 5, 2026 4mo ago
CVE-2026-5554	medium	6.9/10	code-projects Concert Ticket Reservation System Parameter process_search.php sql injection	Apr 5, 2026 4mo ago
CVE-2026-5553	medium	5.3/10	itsourcecode Online Cellphone System Parameter available.php sql injection	Apr 5, 2026 4mo ago
CVE-2026-5552	medium	5.3/10	PHPGurukul Online Shopping Portal Project Parameter sub-category.php sql injection	Apr 5, 2026 4mo ago
CVE-2026-5551	medium	6.9/10	itsourcecode Free Hotel Reservation System Parameter login.php sql injection	Apr 5, 2026 4mo ago
CVE-2026-5546	medium	5.3/10	Campcodes Complete Online Learning Management System Crud_model.php add_lesson unrestricted upload	Apr 5, 2026 4mo ago
CVE-2026-5543	medium	5.3/10	PHPGurukul User Registration & Login and User Management System yesterday-reg-users.php sql injection	Apr 5, 2026 4mo ago
CVE-2026-5542	medium	5.3/10	code-projects Simple Laundry System Parameter modstaffinfo.php cross site scripting	Apr 5, 2026 4mo ago
CVE-2026-5541	medium	5.3/10	code-projects Simple Laundry System Parameter modmemberinfo.php cross site scripting	Apr 5, 2026 4mo ago
CVE-2026-5540	medium	6.9/10	code-projects Simple Laundry System Parameter modifymember.php sql injection	Apr 5, 2026 4mo ago