Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

706

Newly disclosed

Feed last synced

7 hrs ago

Data freshness

Showing 91–120 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-11472	medium	6.9/10	SourceCodester Class and Exam Timetabling System index1.php sql injection	Jun 8, 2026 19d ago
CVE-2026-11471	medium	6.9/10	SourceCodester Class and Exam Timetabling System index2.php sql injection	Jun 8, 2026 19d ago
CVE-2026-11462	medium	6.9/10	Chengdu Everbrite Network Technology BeikeShop Stripe Plugin StripeController.php callback improper authorization	Jun 7, 2026 19d ago
CVE-2026-11456	medium	6.9/10	Chanjet CRM HTTP GET Request jxf_dump_systable.php sql injection	Jun 7, 2026 20d ago
CVE-2026-7566	medium	6.6/10	LearnPress – Backup & Migration Tool <= 4.1.4 - Authenticated (Administrator+) PHP Object Injection via WXR XML File Upload	Jun 6, 2026 21d ago
CVE-2026-7654	high	8.8/10	Admin Columns <= 7.0.18 - Authenticated (Contributor+) PHP Object Injection to Remote Code Execution via Custom Field Meta Value	Jun 5, 2026 21d ago
CVE-2026-46493	high	7.5/10	haxtheweb/haxcms-php uses insecure method for generating salt	Jun 5, 2026 21d ago
CVE-2026-46401	medium	5.3/10	HAX CMS PHP has Insufficient Session Expiration	Jun 5, 2026 21d ago
CVE-2026-46400	high	8.7/10	HAXCMS PHP has a File Upload Validation Bypass	Jun 5, 2026 21d ago
CVE-2026-46397	medium	6.5/10	haxcms-php Local File Inclusion via saveOutline API Location Parameter v2.0	Jun 5, 2026 21d ago
CVE-2026-46394	high	7.7/10	HAX CMS Vulnerable to Command Injection using Git.php	Jun 5, 2026 21d ago
CVE-2026-46392	high	8.7/10	HAX CMS PHP Has a Stored XSS via Case-Sensitivity Mismatch in HTML Upload Validation	Jun 5, 2026 21d ago
CVE-2026-11344	medium	6.9/10	code-projects Vehicle Management System New Driver Registration Form newdriver.php unrestricted upload	Jun 5, 2026 21d ago
CVE-2026-11342	medium	6.9/10	code-projects Hotel and Tourism Reservation System details.php sql injection	Jun 5, 2026 21d ago
CVE-2026-11337	medium	5.3/10	tittuvarghese CollegeManagementSystem fetch.php cross site scripting	Jun 5, 2026 22d ago
CVE-2026-11336	medium	5.3/10	tittuvarghese CollegeManagementSystem Admin admin_page.php improper authorization	Jun 5, 2026 22d ago
CVE-2026-11335	medium	5.3/10	tittuvarghese CollegeManagementSystem login-form.php session_start session fixiation	Jun 5, 2026 22d ago
CVE-2026-11334	medium	6.9/10	tittuvarghese CollegeManagementSystem fetch.php sql injection	Jun 5, 2026 22d ago
CVE-2026-11333	medium	5.3/10	tittuvarghese CollegeManagementSystem Student Data Upload Endpoint upload_student_data.php unrestricted upload	Jun 5, 2026 22d ago
CVE-2026-10877	medium	6.9/10	SourceCodester Ship Ferry Ticket Reservation System Admin Login login.php sql injection	Jun 4, 2026 22d ago
CVE-2026-10874	medium	5.3/10	projectworlds Online Art Gallery Shop Project adminHome.php sql injection	Jun 4, 2026 22d ago
CVE-2026-10815	medium	5.3/10	LakshayD02 Hostel-Management-System-PHP Admin Dashboard index.php authorization	Jun 4, 2026 23d ago
CVE-2026-10811	medium	5.3/10	itsourcecode Fees Management System receipt.php sql injection	Jun 4, 2026 23d ago
CVE-2019-25732	high	8.8/10	PHP EI-Tube Script 3 SQL Injection via search parameter	Jun 4, 2026 23d ago
CVE-2019-25730	high	8.8/10	Listing Hub CMS 1.0 SQL Injection via pages.php id	Jun 4, 2026 23d ago
CVE-2026-10810	medium	5.3/10	itsourcecode Fees Management System navbar.php cross site scripting	Jun 4, 2026 23d ago
CVE-2026-10809	medium	5.3/10	itsourcecode Fees Management System manage_user.php sql injection	Jun 4, 2026 23d ago
CVE-2026-10808	medium	5.3/10	itsourcecode Fees Management System manage_student.php sql injection	Jun 4, 2026 23d ago
CVE-2026-10807	medium	5.3/10	mjperpinosa stumasy change_profile_image.php unrestricted upload	Jun 4, 2026 23d ago
CVE-2026-10806	medium	5.3/10	mjperpinosa stumasy add_post.php unrestricted upload	Jun 4, 2026 23d ago