Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,548

All time

Critical · Active

10,540

CVSS ≥ 9.0

New · 14 days

640

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 1111–1140 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2018-25173	high	8.8/10	Rmedia SMS 1.0 SQL Injection via editgrp.php	Mar 6, 2026 3mo ago
CVE-2018-25172	high	8.8/10	Pedidos 1.0 SQL Injection via load_proveedores.php	Mar 6, 2026 3mo ago
CVE-2018-25170	high	8.8/10	DoceboLMS 1.2 SQL Injection via lesson.php	Mar 6, 2026 3mo ago
CVE-2018-25167	high	8.8/10	Net-Billetterie 2.9 SQL Injection via login.inc.php	Mar 6, 2026 3mo ago
CVE-2018-25165	high	7.1/10	Galaxy Forces MMORPG 0.5.8 SQL Injection via ads.php	Mar 6, 2026 3mo ago
CVE-2018-25162	high	7.1/10	2-Plan Team 1.0.4 Arbitrary File Upload via managefile.php	Mar 6, 2026 3mo ago
CVE-2018-25161	high	8.8/10	Warranty Tracking System 11.06.3 SQL Injection via SearchCustomer.php	Mar 6, 2026 3mo ago
CVE-2026-29058	critical	9.8/10	AVideo: Unauthenticated OS Command Injection via base64Url in objects/getImage.php	Mar 6, 2026 3mo ago
CVE-2026-28501	critical	9.8/10	WWBN AVideo: Unauthenticated SQL Injection via JSON Request Bypass in objects/videos.json.php	Mar 6, 2026 3mo ago
CVE-2026-29093	high	8.1/10	WWBN AVideo: Unauthenticated PHP session store exposed to host network via published memcached port	Mar 6, 2026 3mo ago
CVE-2026-3616	medium	5.3/10	DefaultFuction Jeson Customer Relationship Management System edit.php sql injection	Mar 6, 2026 3mo ago
CVE-2026-3610	medium	5.3/10	HSC Cybersecurity Mailinspector URL mliUserValidation.php cross site scripting	Mar 6, 2026 3mo ago
CVE-2026-2599	critical	9.8/10	Database for Contact Form 7, WPforms, Elementor forms <= 1.4.7 - Unauthenticated PHP Object Injection via 'download_csv'	Mar 5, 2026 3mo ago
CVE-2026-28105	critical	9.8/10	WordPress Good Energy theme <= 1.7.7 - PHP Object Injection vulnerability	Mar 5, 2026 3mo ago
CVE-2026-28074	critical	9.8/10	WordPress Pizza House theme <= 1.4.0 - PHP Object Injection vulnerability	Mar 5, 2026 3mo ago
CVE-2026-27439	critical	9.8/10	WordPress Dentario theme <= 1.5 - PHP Object Injection vulnerability	Mar 5, 2026 3mo ago
CVE-2026-27438	critical	9.8/10	WordPress Kingler theme <= 1.7 - PHP Object Injection vulnerability	Mar 5, 2026 3mo ago
CVE-2026-27437	critical	9.8/10	WordPress Tennis Club theme <= 1.2.3 - PHP Object Injection vulnerability	Mar 5, 2026 3mo ago
CVE-2026-27417	critical	9.8/10	WordPress Sweet Date theme < 4.0.1 - PHP Object Injection vulnerability	Mar 5, 2026 3mo ago
CVE-2026-27379	high	8.8/10	WordPress NextScripts plugin <= 4.4.7 - PHP Object Injection vulnerability	Mar 5, 2026 3mo ago
CVE-2026-27369	high	8.1/10	WordPress Celeste theme <= 1.3.6 - PHP Object Injection vulnerability	Mar 5, 2026 3mo ago
CVE-2026-24385	high	7.5/10	WordPress Podlove Web Player plugin <= 5.9.1 - PHP Object Injection vulnerability	Mar 5, 2026 3mo ago
CVE-2026-23798	high	8.8/10	WordPress PowerPress Podcasting plugin <= 11.15.10 - PHP Object Injection vulnerability	Mar 5, 2026 3mo ago
CVE-2026-22501	critical	9.8/10	WordPress Mounthood theme <= 1.3.2 - PHP Object Injection vulnerability	Mar 5, 2026 3mo ago
CVE-2026-22497	critical	9.8/10	WordPress Jardi theme <= 1.7.2 - PHP Object Injection vulnerability	Mar 5, 2026 3mo ago
CVE-2026-22475	critical	9.8/10	WordPress Estate theme <= 1.3.4 - PHP Object Injection vulnerability	Mar 5, 2026 3mo ago
CVE-2026-22474	critical	9.8/10	WordPress Equestrian Centre theme <= 1.5 - PHP Object Injection vulnerability	Mar 5, 2026 3mo ago
CVE-2026-22473	high	8.8/10	WordPress Dental Clinic theme <= 3.7 - PHP Object Injection vulnerability	Mar 5, 2026 3mo ago
CVE-2026-22471	high	8.8/10	WordPress Secudeal Payments for Ecommerce plugin <= 1.1 - PHP Object Injection vulnerability	Mar 5, 2026 3mo ago
CVE-2026-22454	critical	9.8/10	WordPress Solaris theme <= 2.5 - PHP Object Injection vulnerability	Mar 5, 2026 3mo ago