Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,561

All time

Critical · Active

10,540

CVSS ≥ 9.0

New · 14 days

639

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 1171–1200 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-3413	medium	6.9/10	itsourcecode University Management System admin_single_student.php sql injection	Mar 2, 2026 3mo ago
CVE-2026-3412	medium	5.3/10	itsourcecode University Management System att_single_view.php cross site scripting	Mar 2, 2026 3mo ago
CVE-2026-3411	medium	6.9/10	itsourcecode University Management System admin_single_student_update.php sql injection	Mar 2, 2026 3mo ago
CVE-2026-3410	medium	6.9/10	itsourcecode Society Management System check_studid.php sql injection	Mar 2, 2026 3mo ago
CVE-2026-3406	medium	6.9/10	projectworlds Online Art Gallery Shop Registration registration.php sql injection	Mar 2, 2026 3mo ago
CVE-2026-3403	medium	4.8/10	PHPGurukul Student Record Management System edit-subject.php cross site scripting	Mar 2, 2026 3mo ago
CVE-2026-3402	medium	4.8/10	PHPGurukul Student Record Management System edit-course.php cross site scripting	Mar 2, 2026 3mo ago
CVE-2026-3395	medium	6.9/10	MaxSite CMS MarkItUp Preview AJAX Endpoint preview-ajax.php eval code injection	Mar 1, 2026 3mo ago
CVE-2026-2471	high	7.5/10	WP Mail Logging <= 1.15.0 - Unauthenticated PHP Object Injection via Email Log Message Field	Feb 28, 2026 4mo ago
CVE-2026-1542	—	—	Super Stage WP <= 1.0.1 - Unauthenticated PHP Object Injection	Feb 28, 2026 4mo ago
CVE-2026-28515	critical	9.3/10	openDCIM <= 23.04 Missing Authorization in install.php	Feb 27, 2026 4mo ago
CVE-2026-28408	critical	9.8/10	WeGIA lacks authentication verification in adicionar_tipo_docs_atendido.php	Feb 27, 2026 4mo ago
CVE-2026-27836	high	7.5/10	phpMyFAQ Allows Unauthenticated Account Creation via WebAuthn Prepare Endpoint	Feb 27, 2026 4mo ago
CVE-2019-25493	high	8.8/10	Homey BNB V4 SQL Injection via getrecord.php	Feb 27, 2026 4mo ago
CVE-2019-25492	high	8.8/10	Homey BNB V4 SQL Injection via getcmsdata.php	Feb 27, 2026 4mo ago
CVE-2019-25491	high	8.8/10	Homey BNB V4 SQL Injection via cms_getpagetitle.php	Feb 27, 2026 4mo ago
CVE-2019-25490	high	8.8/10	Homey BNB V4 SQL Injection via admin edit.php	Feb 27, 2026 4mo ago
CVE-2026-3302	medium	5.3/10	SourceCodester Doctor Appointment System Sign Up register.php cross site scripting	Feb 27, 2026 4mo ago
CVE-2026-3292	medium	5.3/10	jizhiCMS Batch Model.php findAll sql injection	Feb 27, 2026 4mo ago
CVE-2026-3261	medium	6.9/10	itsourcecode School Management System Setting index.php sql injection	Feb 26, 2026 4mo ago
CVE-2026-22205	high	8.7/10	SPIP < 4.4.10 Authentication Bypass via PHP Type Juggling	Feb 26, 2026 4mo ago
CVE-2026-22206	high	8.7/10	SPIP < 4.4.10 SQL Injection RCE via Union & PHP Tags	Feb 26, 2026 4mo ago
CVE-2026-28138	high	7.2/10	WordPress uListing plugin <= 2.2.0 - PHP Object Injection vulnerability	Feb 26, 2026 4mo ago
CVE-2026-3171	medium	5.1/10	SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System queue.php cross site scripting	Feb 25, 2026 4mo ago
CVE-2026-3170	medium	4.8/10	SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System patient-search.php cross site scripting	Feb 25, 2026 4mo ago
CVE-2026-3164	medium	6.9/10	itsourcecode News Portal Project contactus.php sql injection	Feb 25, 2026 4mo ago
CVE-2026-3153	medium	6.9/10	itsourcecode Document Management System register.php sql injection	Feb 25, 2026 4mo ago
CVE-2026-3152	medium	6.9/10	itsourcecode College Management System teacher-salary.php sql injection	Feb 25, 2026 4mo ago
CVE-2026-3151	medium	6.9/10	itsourcecode College Management System login.php sql injection	Feb 25, 2026 4mo ago
CVE-2026-3150	medium	5.3/10	itsourcecode College Management System display-teacher.php sql injection	Feb 25, 2026 4mo ago