Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,287

All time

Critical · Active

11,999

CVSS ≥ 9.0

New · 14 days

2,733

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1081–1110 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-5238	medium	6.9/10	itsourcecode Payroll Management System Parameter view_employee.php sql injection	Mar 31, 2026 4mo ago
CVE-2026-5237	medium	6.9/10	itsourcecode Payroll Management System Parameter manage_user.php sql injection	Mar 31, 2026 4mo ago
CVE-2026-34739	medium	6.1/10	AVideo: Reflected XSS via Unescaped ip Parameter in User_Location testIP.php	Mar 31, 2026 4mo ago
CVE-2026-34733	medium	6.5/10	AVideo: Unauthenticated File Deletion via PHP Operator Precedence Bug in CLI Guard	Mar 31, 2026 4mo ago
CVE-2026-34732	medium	5.3/10	AVideo: Missing Authentication in CreatePlugin list.json.php Template Affects 21 Endpoints	Mar 31, 2026 4mo ago
CVE-2026-34731	high	7.5/10	AVideo: Unauthenticated Live Stream Termination via RTMP Callback on_publish_done.php	Mar 31, 2026 4mo ago
CVE-2026-34611	medium	6.5/10	AVideo: CSRF on emailAllUsers.json.php Enables Mass Phishing Email to All Users	Mar 31, 2026 4mo ago
CVE-2026-34395	medium	6.5/10	AVideo: Mass User PII Disclosure via Missing Authorization in YPTWallet users.json.php	Mar 31, 2026 4mo ago
CVE-2026-34382	medium	4.6/10	Admidio: Missing CSRF Protection on Custom List Deletion in mylist_function.php	Mar 31, 2026 4mo ago
CVE-2026-5203	medium	5.1/10	CMS Made Simple UserGuide Module XML Import class.UserGuideImporterExporter.php _copyFilesToFolder path traversal	Mar 31, 2026 4mo ago
CVE-2026-5198	medium	6.9/10	code-projects Student Membership System Admin Login index.php sql injection	Mar 31, 2026 4mo ago
CVE-2026-5197	medium	5.3/10	code-projects Student Membership System delete_user.php sql injection	Mar 31, 2026 4mo ago
CVE-2026-5196	medium	5.3/10	code-projects Student Membership System delete_member.php sql injection	Mar 31, 2026 4mo ago
CVE-2026-5181	medium	5.3/10	SourceCodester Simple Doctors Appointment System ajax.php unrestricted upload	Mar 31, 2026 4mo ago
CVE-2026-5180	medium	6.9/10	SourceCodester Simple Doctors Appointment System ajax.php sql injection	Mar 31, 2026 4mo ago
CVE-2026-5179	medium	6.9/10	SourceCodester Simple Doctors Appointment System login.php sql injection	Mar 31, 2026 4mo ago
CVE-2026-34036	medium	6.5/10	Dolibarr Core Discloses Sensitive Data via Authenticated Local File Inclusion in selectobject.php	Mar 31, 2026 4mo ago
CVE-2026-5157	medium	5.3/10	code-projects Online Food Ordering System Order order.php cross site scripting	Mar 30, 2026 4mo ago
CVE-2026-5150	medium	6.9/10	code-projects Accounting System Parameter viewin_costumer.php sql injection	Mar 30, 2026 4mo ago
CVE-2026-5106	medium	4.8/10	code-projects Exam Form Submission update_fst.php cross site scripting	Mar 30, 2026 4mo ago
CVE-2026-5041	medium	5.1/10	code-projects Chamber of Commerce Membership Management System pageMail.php fwrite command injection	Mar 29, 2026 4mo ago
CVE-2026-5035	medium	6.9/10	code-projects Accounting System Parameter view_work.php sql injection	Mar 29, 2026 4mo ago
CVE-2026-5034	medium	6.9/10	code-projects Accounting System Parameter edit_costumer.php sql injection	Mar 29, 2026 4mo ago
CVE-2026-5033	medium	6.9/10	code-projects Accounting System Parameter view_costumer.php sql injection	Mar 29, 2026 4mo ago
CVE-2026-5019	medium	6.9/10	code-projects Simple Food Order System Parameter all-orders.php sql injection	Mar 28, 2026 4mo ago
CVE-2026-5018	medium	6.9/10	code-projects Simple Food Order System Parameter register-router.php sql injection	Mar 28, 2026 4mo ago
CVE-2026-5017	medium	6.9/10	code-projects Simple Food Order System Parameter all-tickets.php sql injection	Mar 28, 2026 4mo ago
CVE-2026-33991	high	8.8/10	WeGIA has SQL Injection in deletar_tag.php	Mar 27, 2026 5mo ago
CVE-2026-4973	medium	5.1/10	SourceCodester Online Quiz System add-question.php cross site scripting	Mar 27, 2026 5mo ago
CVE-2026-4972	medium	4.8/10	code-projects Online Reviewer System btn_functions.php cross site scripting	Mar 27, 2026 5mo ago