Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,575

All time

Critical · Active

10,540

CVSS ≥ 9.0

New · 14 days

622

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1201–1230 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-3292	medium	5.3/10	jizhiCMS Batch Model.php findAll sql injection	Feb 27, 2026 4mo ago
CVE-2026-3261	medium	6.9/10	itsourcecode School Management System Setting index.php sql injection	Feb 26, 2026 4mo ago
CVE-2026-22205	high	8.7/10	SPIP < 4.4.10 Authentication Bypass via PHP Type Juggling	Feb 26, 2026 4mo ago
CVE-2026-22206	high	8.7/10	SPIP < 4.4.10 SQL Injection RCE via Union & PHP Tags	Feb 26, 2026 4mo ago
CVE-2026-28138	high	7.2/10	WordPress uListing plugin <= 2.2.0 - PHP Object Injection vulnerability	Feb 26, 2026 4mo ago
CVE-2026-3171	medium	5.1/10	SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System queue.php cross site scripting	Feb 25, 2026 4mo ago
CVE-2026-3170	medium	4.8/10	SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System patient-search.php cross site scripting	Feb 25, 2026 4mo ago
CVE-2026-3164	medium	6.9/10	itsourcecode News Portal Project contactus.php sql injection	Feb 25, 2026 4mo ago
CVE-2026-3153	medium	6.9/10	itsourcecode Document Management System register.php sql injection	Feb 25, 2026 4mo ago
CVE-2026-3152	medium	6.9/10	itsourcecode College Management System teacher-salary.php sql injection	Feb 25, 2026 4mo ago
CVE-2026-3151	medium	6.9/10	itsourcecode College Management System login.php sql injection	Feb 25, 2026 4mo ago
CVE-2026-3150	medium	5.3/10	itsourcecode College Management System display-teacher.php sql injection	Feb 25, 2026 4mo ago
CVE-2026-3149	medium	5.3/10	itsourcecode College Management System asign-single-student-subjects.php sql injection	Feb 25, 2026 4mo ago
CVE-2026-3148	medium	6.9/10	SourceCodester Simple and Nice Shopping Cart Script signup.php sql injection	Feb 25, 2026 4mo ago
CVE-2026-3135	medium	6.9/10	itsourcecode News Portal Project add-category.php sql injection	Feb 25, 2026 4mo ago
CVE-2026-3134	medium	6.9/10	itsourcecode News Portal Project edit-category.php sql injection	Feb 24, 2026 4mo ago
CVE-2026-3133	medium	6.9/10	itsourcecode Document Management System Login loging.php sql injection	Feb 24, 2026 4mo ago
CVE-2026-26351	medium	4.8/10	GetSimpleCMS-CE < 3.3.22 Stored XSS via components.php	Feb 24, 2026 4mo ago
CVE-2026-27732	high	8.6/10	AVideo has Authenticated Server-Side Request Forgery via downloadURL in aVideoEncoder.json.php	Feb 24, 2026 4mo ago
CVE-2025-14577	critical	9.3/10	PHP Function Injection in Slican NPC/IPL/IPM/IPU	Feb 24, 2026 4mo ago
CVE-2025-15589	medium	5.1/10	MuYuCMS Template Management Template.php delete_dir_file path traversal	Feb 24, 2026 4mo ago
CVE-2026-3070	medium	5.3/10	SourceCodester Modern Image Gallery App upload.php cross site scripting	Feb 24, 2026 4mo ago
CVE-2026-3069	medium	6.9/10	itsourcecode Document Management System edtlbls.php sql injection	Feb 24, 2026 4mo ago
CVE-2026-3068	medium	6.9/10	itsourcecode Document Management System deluser.php sql injection	Feb 24, 2026 4mo ago
CVE-2026-3057	medium	5.3/10	a54552239 pearProjectApi Backend Task.php dateTotalForProject sql injection	Feb 24, 2026 4mo ago
CVE-2026-3046	medium	6.9/10	itsourcecode E-Logbook with Health Monitoring System for COVID-19 check_profile_old.php sql injection	Feb 24, 2026 4mo ago
CVE-2026-3043	medium	5.3/10	itsourcecode Event Management System navbar.php cross site scripting	Feb 23, 2026 4mo ago
CVE-2026-3042	medium	6.9/10	itsourcecode Event Management System index.php sql injection	Feb 23, 2026 4mo ago
CVE-2026-2984	medium	6.9/10	SourceCodester Student Result Management System drop_user.php denial of service	Feb 23, 2026 4mo ago
CVE-2026-2983	medium	6.9/10	SourceCodester Student Result Management System Bulk Import import_users.php access control	Feb 23, 2026 4mo ago