Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,295

All time

Critical · Active

12,000

CVSS ≥ 9.0

New · 14 days

2,724

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1141–1170 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-4826	medium	5.3/10	SourceCodester Sales and Inventory System HTTP GET Parameter update_stock.php sql injection	Mar 25, 2026 5mo ago
CVE-2026-33912	medium	5.4/10	OpenEMR has reflected XSS in ajax_download.php via reportID parameter	Mar 25, 2026 5mo ago
CVE-2026-33911	medium	5.4/10	OpenEMR vulnerable to reflected XSS in graphs.php via title parameter	Mar 25, 2026 5mo ago
CVE-2026-4825	medium	5.3/10	SourceCodester Sales and Inventory System HTTP GET Parameter update_sales.php sql injection	Mar 25, 2026 5mo ago
CVE-2026-29187	high	8.1/10	OpenEMR Vulnerable to Authenticated Blind Boolean-Based SQL Injection in new_search_popup.php	Mar 25, 2026 5mo ago
CVE-2026-32513	high	8.8/10	WordPress JS Archive List plugin <= 6.1.7 - PHP Object Injection vulnerability	Mar 25, 2026 5mo ago
CVE-2026-32512	critical	9.8/10	WordPress Pelicula theme < 1.10 - PHP Object Injection vulnerability	Mar 25, 2026 5mo ago
CVE-2026-32502	critical	9.8/10	WordPress Borgholm theme < 1.6 - PHP Object Injection vulnerability	Mar 25, 2026 5mo ago
CVE-2026-32484	high	8.8/10	WordPress weForms plugin <= 1.6.26 - PHP Object Injection vulnerability	Mar 25, 2026 5mo ago
CVE-2026-27095	critical	9.8/10	WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.6.0 - PHP Object Injection vulnerability	Mar 25, 2026 5mo ago
CVE-2026-27084	critical	9.8/10	WordPress Buisson theme <= 1.1.11 - PHP Object Injection vulnerability	Mar 25, 2026 5mo ago
CVE-2026-27083	critical	9.8/10	WordPress Work & Travel Company theme <= 1.2 - PHP Object Injection vulnerability	Mar 25, 2026 5mo ago
CVE-2026-27082	critical	9.8/10	WordPress Love Story theme <= 1.3.12 - PHP Object Injection vulnerability	Mar 25, 2026 5mo ago
CVE-2026-27045	high	8.8/10	WordPress WooCommerce Infinite Scroll plugin <= 1.6.2 - PHP Object Injection vulnerability	Mar 25, 2026 5mo ago
CVE-2026-25429	critical	9.8/10	WordPress Nexa Blocks plugin <= 1.1.1 - PHP Object Injection vulnerability	Mar 25, 2026 5mo ago
CVE-2026-25400	high	8.8/10	WordPress Apicona theme <= 24.1.0 - PHP Object Injection vulnerability	Mar 25, 2026 5mo ago
CVE-2026-25360	high	8.8/10	WordPress Vex theme < 1.2.9 - PHP Object Injection vulnerability	Mar 25, 2026 5mo ago
CVE-2026-25359	high	8.8/10	WordPress Pendulum theme < 3.1.5 - PHP Object Injection vulnerability	Mar 25, 2026 5mo ago
CVE-2026-25358	high	8.8/10	WordPress Meloo theme < 2.8.2 - PHP Object Injection vulnerability	Mar 25, 2026 5mo ago
CVE-2026-25032	critical	9.8/10	WordPress Ricky theme < 2.31 - PHP Object Injection vulnerability	Mar 25, 2026 5mo ago
CVE-2026-25031	critical	9.8/10	WordPress Tasty Daily theme < 1.27 - PHP Object Injection vulnerability	Mar 25, 2026 5mo ago
CVE-2026-25030	critical	9.8/10	WordPress Goldish theme < 3.47 - PHP Object Injection vulnerability	Mar 25, 2026 5mo ago
CVE-2026-25029	critical	9.8/10	WordPress KIDZ theme <= 5.24 - PHP Object Injection vulnerability	Mar 25, 2026 5mo ago
CVE-2026-24989	critical	9.8/10	WordPress SUMO Affiliates Pro plugin < 11.4.0 - PHP Object Injection vulnerability	Mar 25, 2026 5mo ago
CVE-2026-24981	high	8.8/10	WordPress Visionary Core plugin <= 1.4.9 - PHP Object Injection vulnerability	Mar 25, 2026 5mo ago
CVE-2026-24978	high	8.8/10	WordPress Jobica Core plugin <= 1.4.1 - PHP Object Injection vulnerability	Mar 25, 2026 5mo ago
CVE-2026-24976	high	8.8/10	WordPress Organici Library plugin <= 2.1.2 - PHP Object Injection vulnerability	Mar 25, 2026 5mo ago
CVE-2026-24974	high	8.8/10	WordPress CitiLights theme <= 3.7.1 - PHP Object Injection vulnerability	Mar 25, 2026 5mo ago
CVE-2026-24378	critical	9.8/10	WordPress EventPrime plugin <= 4.2.8.0 - PHP Object Injection vulnerability	Mar 25, 2026 5mo ago
CVE-2026-23971	high	8.1/10	WordPress WoodMart theme <= 8.3.8 - PHP Object Injection vulnerability	Mar 25, 2026 5mo ago