Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,669

All time

Critical · Active

10,549

CVSS ≥ 9.0

New · 14 days

711

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1231–1260 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-2952	medium	6.9/10	Vaelsys HTTP POST Request tree_server.php os command injection	Feb 22, 2026 4mo ago
CVE-2019-25391	high	8.8/10	Ashop Shopping Cart Software Lastest Latest SQL Injection via bannedcustomers.php	Feb 22, 2026 4mo ago
CVE-2019-25440	high	8.8/10	WebIncorp ERP Every version SQL Injection via product_detail.php	Feb 22, 2026 4mo ago
CVE-2019-25433	high	8.8/10	XOOPS CMS 2.5.9 SQL Injection via gerar_pdf.php	Feb 22, 2026 4mo ago
CVE-2019-25450	high	7.1/10	Dolibarr ERP/CRM 10.0.1 SQL Injection via card.php	Feb 22, 2026 4mo ago
CVE-2019-25443	high	8.8/10	Inventory Webapp SQL Injection via add-item.php	Feb 22, 2026 4mo ago
CVE-2026-2944	medium	6.9/10	Tosei Online Store Management System ネット店舗管理システム HTTP POST Request monitor.php system os command injection	Feb 22, 2026 4mo ago
CVE-2026-2943	medium	5.3/10	SapneshNaik Student Management System index.php cross site scripting	Feb 22, 2026 4mo ago
CVE-2026-2938	medium	6.9/10	SourceCodester Student Result Management System update_smtp.php access control	Feb 22, 2026 4mo ago
CVE-2026-2934	medium	4.8/10	YiFang CMS Extended Management D_friendLinkGroup.php update cross site scripting	Feb 22, 2026 4mo ago
CVE-2026-2933	medium	4.8/10	YiFang CMS Extended Management D_adManage.php update cross site scripting	Feb 22, 2026 4mo ago
CVE-2026-2932	medium	4.8/10	YiFang CMS Extended Management D_adPosition.php update cross site scripting	Feb 22, 2026 4mo ago
CVE-2026-2912	medium	6.9/10	code-projects Online Reviewer System studentresult-view.php sql injection	Feb 22, 2026 4mo ago
CVE-2026-2898	medium	5.1/10	funadmin Backend Endpoint AuthCloudService.php getMember deserialization	Feb 22, 2026 4mo ago
CVE-2026-2896	medium	6.9/10	funadmin Configuration Ajax.php setConfig improper authorization	Feb 21, 2026 4mo ago
CVE-2026-2895	medium	6.3/10	funadmin Member.php repass password recovery	Feb 21, 2026 4mo ago
CVE-2026-2867	medium	6.9/10	itsourcecode Vehicle Management System billaction.php sql injection	Feb 21, 2026 4mo ago
CVE-2026-2865	medium	6.9/10	itsourcecode Agri-Trading Online Shopping System HTTP POST Request productcontroller.php sql injection	Feb 21, 2026 4mo ago
CVE-2026-27206	high	8.1/10	Zumba Json Serializer has a potential PHP Object Injection via Unrestricted @type in unserialize()	Feb 21, 2026 4mo ago
CVE-2019-25454	medium	5.3/10	phpMoAdmin 1.1.5 Stored Cross-Site Scripting via collection Parameter	Feb 20, 2026 4mo ago
CVE-2019-25453	medium	5.1/10	phpMoAdmin 1.1.5 Reflected Cross-Site Scripting via moadmin.php	Feb 20, 2026 4mo ago
CVE-2019-25451	medium	5.3/10	phpMoAdmin 1.1.5 Cross-Site Request Forgery via moadmin.php	Feb 20, 2026 4mo ago
CVE-2019-25438	high	8.8/10	LabCollector 5.423 SQL Injection via login.php	Feb 20, 2026 4mo ago
CVE-2019-25432	high	8.8/10	Part-DB 0.4 Authentication Bypass via login.php	Feb 20, 2026 4mo ago
CVE-2026-2035	medium	6.8/10	Deciso OPNsense diag_backup.php filename Command Injection Remote Code Execution Vulnerability	Feb 20, 2026 4mo ago
CVE-2019-25445	medium	5.1/10	Fiverr Clone Script 1.2.2 Cross-Site Scripting via search-results.php	Feb 20, 2026 4mo ago
CVE-2026-24891	high	7.5/10	openITCOCKPIT has Unsafe PHP Deserialization in Gearman Worker Allowing Conditional Object Injection	Feb 20, 2026 4mo ago
CVE-2026-27505	medium	5.1/10	SVXportal <= 2.5 admin/user_action.php Stored XSS	Feb 20, 2026 4mo ago
CVE-2026-27504	medium	5.1/10	SVXportal <= 2.5 radiomobile_front.php stationid Reflected XSS	Feb 20, 2026 4mo ago
CVE-2026-27503	medium	5.1/10	SVXportal <= 2.5 admin/log.php Search Reflected XSS	Feb 20, 2026 4mo ago