Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,561

All time

Critical · Active

10,540

CVSS ≥ 9.0

New · 14 days

640

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1141–1170 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-22474	critical	9.8/10	WordPress Equestrian Centre theme <= 1.5 - PHP Object Injection vulnerability	Mar 5, 2026 3mo ago
CVE-2026-22473	high	8.8/10	WordPress Dental Clinic theme <= 3.7 - PHP Object Injection vulnerability	Mar 5, 2026 3mo ago
CVE-2026-22471	high	8.8/10	WordPress Secudeal Payments for Ecommerce plugin <= 1.1 - PHP Object Injection vulnerability	Mar 5, 2026 3mo ago
CVE-2026-22454	critical	9.8/10	WordPress Solaris theme <= 2.5 - PHP Object Injection vulnerability	Mar 5, 2026 3mo ago
CVE-2026-22453	critical	9.8/10	WordPress Pets Club theme <= 2.3 - PHP Object Injection vulnerability	Mar 5, 2026 3mo ago
CVE-2026-22451	critical	9.8/10	WordPress Handyman theme <= 1.4.7 - PHP Object Injection vulnerability	Mar 5, 2026 3mo ago
CVE-2026-22417	critical	9.8/10	WordPress Grand Wedding theme < 3.1.11 - PHP Object Injection vulnerability	Mar 5, 2026 3mo ago
CVE-2025-54001	critical	9.8/10	WordPress Classter theme <= 2.5 - PHP Object Injection vulnerability	Mar 5, 2026 3mo ago
CVE-2019-25507	high	8.8/10	Ashop Shopping Cart Software Lastest SQL Injection via index.php	Mar 4, 2026 3mo ago
CVE-2019-25503	high	7.1/10	PHPads 2.0 SQL Injection via click.php3 bannerID	Mar 4, 2026 3mo ago
CVE-2019-25501	high	8.8/10	Simple Job Script SQL Injection via delete_application_ajax.php	Mar 4, 2026 3mo ago
CVE-2019-25499	high	8.8/10	Simple Job Script SQL Injection via get_job_applications_ajax.php	Mar 4, 2026 3mo ago
CVE-2026-27012	critical	9.8/10	Unauthenticated privilege escalation in OpenSTAManager via modules/utenti/actions.php	Mar 3, 2026 3mo ago
CVE-2026-24415	medium	5.1/10	OpenSTAManager affected by reflected XSS in modifica_iva.php via righe parameter	Mar 3, 2026 3mo ago
CVE-2026-3487	medium	5.1/10	itsourcecode College Management System class-result.php sql injection	Mar 3, 2026 3mo ago
CVE-2026-3486	medium	5.1/10	itsourcecode College Management System student-fee.php sql injection	Mar 3, 2026 3mo ago
CVE-2025-50198	high	8.8/10	Chamilo: Deserialization of untrusted data in /plugin/vchamilo/views/import.php via POST configuration_file; POST course_path; POST home_path parameters	Mar 2, 2026 3mo ago
CVE-2025-50197	high	7.1/10	Chamilo: OS Command Injection in /main/admin/sub_language_ajax.inc.php via POST new_language parameter	Mar 2, 2026 3mo ago
CVE-2025-50196	high	7.1/10	Chamilo: OS Command Injection in /plugin/vchamilo/views/editinstance.php via POST main_database parameter	Mar 2, 2026 3mo ago
CVE-2025-50195	high	7.1/10	Chamilo: OS Command Injection in /plugin/vchamilo/views/manage.controller.php	Mar 2, 2026 3mo ago
CVE-2025-50194	high	7.1/10	Chamilo: OS Command Injection in /main/cron/lang/check_parse_lang.php	Mar 2, 2026 3mo ago
CVE-2025-50193	high	7.1/10	Chamilo: OS command Injection in /plugin/vchamilo/views/import.php with the POST to_main_database parameter	Mar 2, 2026 3mo ago
CVE-2025-50192	high	8.8/10	Chamilo: Time-based SQL Injection in /main/webservices/registration.soap.php	Mar 2, 2026 3mo ago
CVE-2025-50191	high	7.0/10	Chamilo: Error-based SQL Injection via POST userFile with the /main/exercise/hotpotatoes.php script	Mar 2, 2026 3mo ago
CVE-2025-50190	high	8.8/10	Chamilo: Error-based SQL Injection via GET openid.assoc_handle with the /index.php script	Mar 2, 2026 3mo ago
CVE-2025-52482	high	8.3/10	Chamilo: Stored XSS in glossary function via /main/glossary/index.php trigger in /main/tracking/course_log_resources.php	Mar 2, 2026 3mo ago
CVE-2025-50186	medium	4.8/10	Chamilo: Stored XSS via Malicious CSV Filename in user_import.php	Mar 2, 2026 3mo ago
CVE-2026-3413	medium	6.9/10	itsourcecode University Management System admin_single_student.php sql injection	Mar 2, 2026 3mo ago
CVE-2026-3412	medium	5.3/10	itsourcecode University Management System att_single_view.php cross site scripting	Mar 2, 2026 3mo ago
CVE-2026-3411	medium	6.9/10	itsourcecode University Management System admin_single_student_update.php sql injection	Mar 2, 2026 3mo ago