Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,295

All time

Critical · Active

12,000

CVSS ≥ 9.0

New · 14 days

2,724

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1171–1200 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-22510	high	8.1/10	WordPress Melody theme <= 1.6.3 - PHP Object Injection vulnerability	Mar 25, 2026 5mo ago
CVE-2026-22507	critical	9.8/10	WordPress Beelove theme <= 1.2.6 - PHP Object Injection vulnerability	Mar 25, 2026 5mo ago
CVE-2026-22505	high	8.1/10	WordPress Morning Records theme <= 1.2 - PHP Object Injection vulnerability	Mar 25, 2026 5mo ago
CVE-2026-22500	critical	9.8/10	WordPress m2 \| Construction and Tools Store theme <= 1.1.2 - PHP Object Injection vulnerability	Mar 25, 2026 5mo ago
CVE-2026-22480	high	7.2/10	WordPress Product Feed for WooCommerce plugin <= 2.3.3 - PHP Object Injection vulnerability	Mar 25, 2026 5mo ago
CVE-2026-4784	medium	6.9/10	code-projects Simple Laundry System Parameter checkcheckout.php sql injection	Mar 25, 2026 5mo ago
CVE-2026-4783	medium	5.3/10	itsourcecode College Management System Parameter add-single-student-results.php sql injection	Mar 25, 2026 5mo ago
CVE-2026-4781	medium	5.3/10	SourceCodester Sales and Inventory System HTTP GET Parameter update_purchase.php sql injection	Mar 24, 2026 5mo ago
CVE-2026-4780	medium	5.3/10	SourceCodester Sales and Inventory System HTTP GET Parameter update_out_standing.php sql injection	Mar 24, 2026 5mo ago
CVE-2026-4779	medium	5.3/10	SourceCodester Sales and Inventory System HTTP GET Parameter update_customer_details.php sql injection	Mar 24, 2026 5mo ago
CVE-2026-4778	medium	5.3/10	SourceCodester Sales and Inventory System HTTP GET Parameter update_category.php sql injection	Mar 24, 2026 5mo ago
CVE-2026-4777	medium	5.3/10	SourceCodester Sales and Inventory System POST Parameter view_supplier.php sql injection	Mar 24, 2026 5mo ago
CVE-2026-23923	medium	6.9/10	Unauthenticated arbitrary PHP class instantiation	Mar 24, 2026 5mo ago
CVE-2026-33401	high	7.1/10	Wallos: Incomplete fix for CVE-2026-30840 - SSRF in AI and notification endpoints bypass ssrf_helper.php	Mar 24, 2026 5mo ago
CVE-2019-25643	high	8.8/10	eNdonesia Portal v8.7 SQL Injection via banners.php	Mar 24, 2026 5mo ago
CVE-2019-25640	high	8.8/10	Inout Article Base CMS Lastest SQL Injection via portalLogin.php	Mar 24, 2026 5mo ago
CVE-2019-25638	high	7.1/10	Meeplace Business Review Script Lastest SQL Injection via addclick.php	Mar 24, 2026 5mo ago
CVE-2019-25632	medium	6.9/10	phpFileManager 1.7.8 Local File Inclusion via index.php	Mar 24, 2026 5mo ago
CVE-2026-4632	medium	6.9/10	itsourcecode Online Enrollment System Parameter index.php sql injection	Mar 24, 2026 5mo ago
CVE-2026-4626	medium	5.1/10	projectworlds Lawyer Management System lawyer_booking.php cross site scripting	Mar 24, 2026 5mo ago
CVE-2026-4625	medium	6.9/10	SourceCodester Online Admission System programmes.php sql injection	Mar 24, 2026 5mo ago
CVE-2026-4624	medium	6.9/10	SourceCodester Online Library Management System Parameter home.php sql injection	Mar 24, 2026 5mo ago
CVE-2026-4623	medium	6.9/10	DefaultFuction Jeson-Customer-Relationship-Management-System API Module System.php server-side request forgery	Mar 24, 2026 5mo ago
CVE-2026-4617	medium	6.9/10	SourceCodester Patients Waiting Area Queue Management System Patient Check-In api_patient_checkin.php ValidateToken improper authorization	Mar 24, 2026 5mo ago
CVE-2026-4615	medium	6.9/10	SourceCodester Online Catering Reservation search.php sql injection	Mar 23, 2026 5mo ago
CVE-2026-4614	medium	5.3/10	itsourcecode sanitize or validate this input Parameter subjects.php sql injection	Mar 23, 2026 5mo ago
CVE-2026-4613	medium	6.9/10	SourceCodester E-Commerce Site products.php sql injection	Mar 23, 2026 5mo ago
CVE-2026-4612	medium	6.9/10	itsourcecode Free Hotel Reservation System Parameter index.php sql injection	Mar 23, 2026 5mo ago
CVE-2026-4596	medium	5.1/10	projectworlds Lawyer Management System lawyers.php cross site scripting	Mar 23, 2026 5mo ago
CVE-2026-33723	high	7.1/10	AVideo Vulnerable to SQL Injection in Subscribe Endpoint via Unsanitized user_id Parameter in subscribe.php	Mar 23, 2026 5mo ago