Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,548

All time

Critical · Active

10,540

CVSS ≥ 9.0

New · 14 days

640

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1081–1110 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-3740	medium	6.9/10	itsourcecode University Management System admin_search_student.php sql injection	Mar 8, 2026 3mo ago
CVE-2026-3737	medium	5.3/10	SourceCodester Pet Grooming Management Software User Creation add_user.php improper authorization	Mar 8, 2026 3mo ago
CVE-2026-3736	medium	6.9/10	code-projects Simple Flight Ticket Booking System SearchResultRoundtrip.php sql injection	Mar 8, 2026 3mo ago
CVE-2026-3735	medium	6.9/10	code-projects Simple Flight Ticket Booking System SearchResultOneway.php sql injection	Mar 8, 2026 3mo ago
CVE-2026-3734	medium	6.9/10	SourceCodester Client Database Management System Endpoint fetch_manager_details.php improper authorization	Mar 8, 2026 3mo ago
CVE-2026-3730	medium	6.9/10	itsourcecode Free Hotel Reservation System index.php sql injection	Mar 8, 2026 3mo ago
CVE-2026-3724	medium	5.3/10	SourceCodester Patients Waiting Area Queue Management System checkin.php improper authorization	Mar 8, 2026 3mo ago
CVE-2026-3723	medium	6.9/10	code-projects Simple Flight Ticket Booking System Admindelete.php sql injection	Mar 8, 2026 3mo ago
CVE-2026-3714	medium	5.1/10	OpenCart Incomplete Fix CVE-2024-36694 template.php save special elements used in a template engine	Mar 8, 2026 3mo ago
CVE-2026-3711	medium	5.1/10	code-projects Simple Flight Ticket Booking System Adminupdate.php sql injection	Mar 8, 2026 3mo ago
CVE-2026-3710	medium	5.1/10	code-projects Simple Flight Ticket Booking System Adminadd.php sql injection	Mar 8, 2026 3mo ago
CVE-2026-3709	medium	6.9/10	code-projects Simple Flight Ticket Booking System register.php sql injection	Mar 8, 2026 3mo ago
CVE-2026-3708	medium	6.9/10	code-projects Simple Flight Ticket Booking System login.php sql injection	Mar 8, 2026 3mo ago
CVE-2026-3705	medium	6.9/10	code-projects Simple Flight Ticket Booking System Adminsearch.php sql injection	Mar 8, 2026 3mo ago
CVE-2026-3702	medium	5.3/10	SourceCodester Loan Management System index.php cross site scripting	Mar 8, 2026 3mo ago
CVE-2026-3695	medium	6.9/10	SourceCodester Modern Image Gallery App delete.php path traversal	Mar 8, 2026 3mo ago
CVE-2026-30841	medium	6.9/10	Wallos: Reflected XSS via unescaped token and email parameters in passwordreset.php	Mar 7, 2026 3mo ago
CVE-2026-3352	high	7.2/10	Easy PHP Settings <= 1.0.4 - Authenticated (Administrator+) PHP Code Injection via 'wp_memory_limit' Setting	Mar 7, 2026 3mo ago
CVE-2026-2020	high	7.5/10	JS Archive List <= 6.1.7 - Authenticated (Contributor+) PHP Object Injection via 'included' Shortcode Attribute	Mar 7, 2026 3mo ago
CVE-2026-30237	low	2.1/10	Group-Office: Self XSS in GroupOffice Installer License Page (install/license.php)	Mar 6, 2026 3mo ago
CVE-2018-25200	medium	6.9/10	OOP CMS BLOG 1.0 Cross-Site Request Forgery via addUser.php	Mar 6, 2026 3mo ago
CVE-2018-25191	high	7.1/10	Facturation System 1.0 SQL Injection via editar_producto.php	Mar 6, 2026 3mo ago
CVE-2018-25190	medium	6.9/10	Easyndexer 1.0 Cross-Site Request Forgery via createuser.php	Mar 6, 2026 3mo ago
CVE-2018-25188	high	8.8/10	Webiness Inventory 2.3 SQL Injection via WsModelGrid.php	Mar 6, 2026 3mo ago
CVE-2018-25184	medium	6.9/10	Surreal ToDo 0.6.1.2 Local File Inclusion via index.php	Mar 6, 2026 3mo ago
CVE-2018-25182	high	8.8/10	Silurus Classifieds Script 2.0 SQL Injection via wcategory.php	Mar 6, 2026 3mo ago
CVE-2018-25178	high	8.7/10	Easyndexer 1.0 Arbitrary File Download via showtif.php	Mar 6, 2026 3mo ago
CVE-2018-25177	medium	6.9/10	Data Center Audit 2.6.2 Cross-Site Request Forgery via dca_resetpw.php	Mar 6, 2026 3mo ago
CVE-2018-25175	high	8.8/10	Alienor Web Libre 2.0 SQL Injection via index.php	Mar 6, 2026 3mo ago
CVE-2018-25174	medium	6.9/10	ABC ERP 0.6.4 Cross-Site Request Forgery via _configurar_perfil.php	Mar 6, 2026 3mo ago