Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,902

All time

Critical · Active

10,568

CVSS ≥ 9.0

New · 14 days

652

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1261–1290 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2019-25453	medium	5.1/10	phpMoAdmin 1.1.5 Reflected Cross-Site Scripting via moadmin.php	Feb 20, 2026 4mo ago
CVE-2019-25451	medium	5.3/10	phpMoAdmin 1.1.5 Cross-Site Request Forgery via moadmin.php	Feb 20, 2026 4mo ago
CVE-2019-25438	high	8.8/10	LabCollector 5.423 SQL Injection via login.php	Feb 20, 2026 4mo ago
CVE-2019-25432	high	8.8/10	Part-DB 0.4 Authentication Bypass via login.php	Feb 20, 2026 4mo ago
CVE-2026-2035	medium	6.8/10	Deciso OPNsense diag_backup.php filename Command Injection Remote Code Execution Vulnerability	Feb 20, 2026 4mo ago
CVE-2019-25445	medium	5.1/10	Fiverr Clone Script 1.2.2 Cross-Site Scripting via search-results.php	Feb 20, 2026 4mo ago
CVE-2026-24891	high	7.5/10	openITCOCKPIT has Unsafe PHP Deserialization in Gearman Worker Allowing Conditional Object Injection	Feb 20, 2026 4mo ago
CVE-2026-27505	medium	5.1/10	SVXportal <= 2.5 admin/user_action.php Stored XSS	Feb 20, 2026 4mo ago
CVE-2026-27504	medium	5.1/10	SVXportal <= 2.5 radiomobile_front.php stationid Reflected XSS	Feb 20, 2026 4mo ago
CVE-2026-27503	medium	5.1/10	SVXportal <= 2.5 admin/log.php Search Reflected XSS	Feb 20, 2026 4mo ago
CVE-2026-27502	medium	5.1/10	SVXportal <= 2.5 log.php Search Reflected XSS	Feb 20, 2026 4mo ago
CVE-2025-15583	medium	5.1/10	detronetdip E-commerce function.php get_safe_value cross site scripting	Feb 20, 2026 4mo ago
CVE-2026-2848	medium	6.9/10	SourceCodester Simple Responsive Tourism Website Registration Master.php sql injection	Feb 20, 2026 4mo ago
CVE-2026-22384	critical	9.8/10	WordPress Applay - Shortcodes plugin <= 3.7 - PHP Object Injection vulnerability	Feb 20, 2026 4mo ago
CVE-2026-22354	high	8.8/10	WordPress Woocommerce Category Banner Management plugin <= 2.5.1 - PHP Object Injection vulnerability	Feb 20, 2026 4mo ago
CVE-2026-22346	high	8.8/10	WordPress Slider Responsive Slideshow – Image slider, Gallery slideshow plugin <= 1.5.4 - PHP Object Injection vulnerability	Feb 20, 2026 4mo ago
CVE-2026-22345	high	8.8/10	WordPress Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery plugin <= 1.6.0 - PHP Object Injection vulnerability	Feb 20, 2026 4mo ago
CVE-2025-69405	critical	9.8/10	WordPress Lorem Ipsum \| Books & Media Store theme <= 1.2.11 - PHP Object Injection vulnerability	Feb 20, 2026 4mo ago
CVE-2025-69404	critical	9.8/10	WordPress Extreme Store theme <= 1.5.10 - PHP Object Injection vulnerability	Feb 20, 2026 4mo ago
CVE-2025-69382	critical	9.8/10	WordPress Themesflat Elementor plugin <= 1.0.1 - PHP Object Injection vulnerability	Feb 20, 2026 4mo ago
CVE-2025-69372	critical	9.8/10	WordPress SevenHills theme <= 1.6.2 - PHP Object Injection vulnerability	Feb 20, 2026 4mo ago
CVE-2025-69371	critical	9.8/10	WordPress KindlyCare theme <= 1.6.1 - PHP Object Injection vulnerability	Feb 20, 2026 4mo ago
CVE-2025-69370	critical	9.8/10	WordPress Capella theme <= 2.5.5 - PHP Object Injection vulnerability	Feb 20, 2026 4mo ago
CVE-2025-69329	critical	9.8/10	WordPress Prestige theme < 1.4.1 - PHP Object Injection vulnerability	Feb 20, 2026 4mo ago
CVE-2025-69328	high	8.8/10	WordPress Booking and Rental Manager plugin <= 2.5.9 - PHP Object Injection vulnerability	Feb 20, 2026 4mo ago
CVE-2025-69301	critical	9.8/10	WordPress PhotoMe theme <= 5.6.11 - PHP Object Injection vulnerability	Feb 20, 2026 4mo ago
CVE-2025-69294	high	8.8/10	WordPress PeakShops theme <= 1.5.9 - PHP Object Injection vulnerability	Feb 20, 2026 4mo ago
CVE-2025-68853	high	8.8/10	WordPress Contact Manager plugin <= 9.1.1 - PHP Object Injection vulnerability	Feb 20, 2026 4mo ago
CVE-2025-68541	critical	9.8/10	WordPress Ippsum theme <= 1.2.0 - PHP Object Injection vulnerability	Feb 20, 2026 4mo ago
CVE-2025-68531	high	8.8/10	WordPress ModelTheme Addons for WPBakery and Elementor plugin < 1.5.6 - PHP Object Injection vulnerability	Feb 20, 2026 4mo ago