Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,519

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

617

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1021–1050 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2019-25511	high	8.8/10	Jettweb PHP Hazir Haber Sitesi Scripti V3 SQL Injection	Mar 12, 2026 3mo ago
CVE-2019-25510	high	8.8/10	Jettweb PHP Hazir Haber Sitesi Scripti V2 Authentication Bypass	Mar 12, 2026 3mo ago
CVE-2019-25509	high	8.8/10	XooDigital Lastest Latest SQL Injection via results.php	Mar 12, 2026 3mo ago
CVE-2019-25508	high	8.8/10	Jettweb Php Hazir Ilan Sitesi Scripti V2 SQL Injection via katgetir.php	Mar 12, 2026 3mo ago
CVE-2019-25482	high	8.8/10	Jettweb PHP Hazir Rent A Car Sitesi Scripti V2 SQL Injection	Mar 12, 2026 3mo ago
CVE-2026-4044	medium	5.1/10	projectsend Delete import-orphans.php realpath path traversal	Mar 12, 2026 3mo ago
CVE-2026-4014	medium	6.9/10	itsourcecode Cafe Reservation System Registration signup.php sql injection	Mar 12, 2026 3mo ago
CVE-2026-4013	medium	5.3/10	SourceCodester Web-based Pharmacy Product Management System add_admin.php improper authorization	Mar 12, 2026 3mo ago
CVE-2026-3993	medium	5.3/10	itsourcecode Payroll Management System manage_employee_deductions.php cross site scripting	Mar 12, 2026 3mo ago
CVE-2026-3984	medium	5.1/10	Campcodes Division Regional Athletic Meet Game Result Matrix System save_up_athlete.php cross site scripting	Mar 12, 2026 3mo ago
CVE-2026-3983	medium	5.1/10	Campcodes Division Regional Athletic Meet Game Result Matrix System save-games.php cross site scripting	Mar 12, 2026 3mo ago
CVE-2026-3982	medium	5.3/10	itsourcecode University Management System view_result.php cross site scripting	Mar 12, 2026 3mo ago
CVE-2026-3981	medium	6.9/10	itsourcecode Online Doctor Appointment System doctor_action.php sql injection	Mar 12, 2026 3mo ago
CVE-2026-3980	medium	6.9/10	itsourcecode Online Doctor Appointment System patient_action.php sql injection	Mar 12, 2026 3mo ago
CVE-2026-3969	medium	6.9/10	FeMiner wms Basic Organizational Structure depart_add_bg.php sql injection	Mar 12, 2026 3mo ago
CVE-2026-31896	critical	9.8/10	WeGIA has a Time-Based Blind SQL Injection in remover_produto_ocultar.php	Mar 11, 2026 3mo ago
CVE-2026-31895	high	8.8/10	WeGIA has a SQL Injection via Direct Query Interpolation in restaurar_produto.php	Mar 11, 2026 3mo ago
CVE-2019-25480	high	8.7/10	ARMBot Unrestricted File Upload via upload.php	Mar 11, 2026 3mo ago
CVE-2019-25471	critical	9.3/10	FileThingie 2.5.7 Arbitrary File Upload via ft2.php	Mar 11, 2026 3mo ago
CVE-2026-3946	medium	5.1/10	PHPEMS index.php cross site scripting	Mar 11, 2026 3mo ago
CVE-2026-3944	medium	6.9/10	itsourcecode University Management System att_add.php sql injection	Mar 11, 2026 3mo ago
CVE-2026-2626	—	—	Divi Booster < 5.0.2 - Unauthenticated PHP Object Injection	Mar 11, 2026 3mo ago
CVE-2025-13067	high	8.8/10	Royal Addons for Elementor <= 1.7.1049 - Authenticated (Author+) Arbitrary File Upload via main.php Upload Bypass	Mar 11, 2026 3mo ago
CVE-2026-28495	critical	9.7/10	GetSimple CMS has CSRF to Remote Code Execution via Arbitrary PHP Write in gsconfig.php	Mar 10, 2026 3mo ago
CVE-2026-3817	medium	6.9/10	SourceCodester Patients Waiting Area Queue Management System patient-search.php improper authorization	Mar 9, 2026 3mo ago
CVE-2026-3812	medium	5.3/10	itsourcecode Payroll Management System manage_employee_allowances.php cross site scripting	Mar 9, 2026 3mo ago
CVE-2026-3806	medium	5.3/10	SourceCodester/janobe Resort Reservation System room_rates.php sql injection	Mar 9, 2026 3mo ago
CVE-2026-3800	medium	5.3/10	SourceCodester/janobe Resort Reservation System controller.php doInsert unrestricted upload	Mar 9, 2026 3mo ago
CVE-2026-3793	medium	5.3/10	SourceCodester Sales and Inventory System GET Parameter sales_invoice1.php sql injection	Mar 9, 2026 3mo ago
CVE-2026-3792	medium	5.3/10	SourceCodester Sales and Inventory System GET Parameter purchase_invoice.php sql injection	Mar 9, 2026 3mo ago