Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

336,846

All time

Critical · Active

10,645

CVSS ≥ 9.0

New · 14 days

1,496

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1411–1440 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2020-37152	medium	5.1/10	PHP-Fusion 9.03.50 panels.php - Cross-Site Scripting (XSS)	Feb 5, 2026 4mo ago
CVE-2020-37137	high	8.6/10	PHP-Fusion 9.03.50 - 'panels.php' Eval Injection	Feb 5, 2026 4mo ago
CVE-2020-37151	high	8.8/10	phpMyChat Plus 1.98 'deluser.php' SQL Injection	Feb 5, 2026 4mo ago
CVE-2026-1654	medium	6.1/10	Peter's Date Countdown <= 2.0.0 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']	Feb 5, 2026 4mo ago
CVE-2026-1884	medium	5.1/10	ZenTao Webhook model.php fetchHook server-side request forgery	Feb 4, 2026 4mo ago
CVE-2025-69213	high	8.7/10	OpenSTAManager has a SQL Injection in ajax_complete.php (get_sedi endpoint)	Feb 4, 2026 4mo ago
CVE-2026-25237	critical	9.2/10	PEAR is Vulnerable to PHP Code Execution via preg_replace /e in Bug Update Emails	Feb 3, 2026 5mo ago
CVE-2020-37116	high	8.7/10	GUnet OpenEclass 1.7.3 E-learning platform - phpMyAdmin Remote Access	Feb 3, 2026 5mo ago
CVE-2020-37111	medium	5.1/10	60CycleCMS 2.5.2 - 'news.php' Cross-site Scripting (XSS) Vulnerability	Feb 3, 2026 5mo ago
CVE-2020-37110	high	8.8/10	60CycleCMS 2.5.2 - 'news.php' SQL Injection Vulnerability	Feb 3, 2026 5mo ago
CVE-2020-37108	high	7.1/10	PhpIX 2012 Professional - 'id' SQL Injection	Feb 3, 2026 5mo ago
CVE-2026-1734	medium	6.9/10	Zhong Bang CRMEB crontab Endpoint CrontabController.php authorization	Feb 1, 2026 5mo ago
CVE-2022-50940	medium	5.1/10	Knap Advanced PHP Login 3.1.3 Persistent Cross-Site Scripting via Name Parameter	Feb 1, 2026 5mo ago
CVE-2020-37035	high	8.8/10	e-learning Php Script 0.1.0 - 'search' SQL Injection	Jan 30, 2026 5mo ago
CVE-2026-25129	medium	6.7/10	PsySH has Local Privilege Escalation via CWD .psysh.php auto-load	Jan 30, 2026 5mo ago
CVE-2026-1702	medium	5.3/10	SourceCodester Pet Grooming Management Software User Management user.php improper authorization	Jan 30, 2026 5mo ago
CVE-2026-1701	medium	6.9/10	itsourcecode School Management System index.php sql injection	Jan 30, 2026 5mo ago
CVE-2026-1700	medium	5.1/10	projectworlds House Rental and Property Listing sms.php cross site scripting	Jan 30, 2026 5mo ago
CVE-2020-36996	medium	5.1/10	PHPFusion 9.03.50 - Persistent Cross-Site Scripting	Jan 30, 2026 5mo ago
CVE-2020-36966	medium	5.1/10	Dolibarr 11.0.3 - 'ldap.php' - Persistent Cross-Site Scripting	Jan 30, 2026 5mo ago
CVE-2026-1688	medium	6.9/10	itsourcecode Directory Management System index.php sql injection	Jan 30, 2026 5mo ago
CVE-2026-24854	high	8.8/10	Church CRM has SQL injection in PaddleNumEditor.php	Jan 30, 2026 5mo ago
CVE-2026-1595	medium	6.9/10	itsourcecode Society Management System edit_student_query.php sql injection	Jan 29, 2026 5mo ago
CVE-2025-7714	high	7.5/10	Time Based SQLi in Global Medya's PHP CMS	Jan 29, 2026 5mo ago
CVE-2025-7713	high	7.5/10	Reflected XSS in Global Medya's PHP CMS	Jan 29, 2026 5mo ago
CVE-2026-1594	medium	6.9/10	itsourcecode Society Management System add_expenses.php sql injection	Jan 29, 2026 5mo ago
CVE-2026-1593	medium	6.9/10	itsourcecode Society Management System edit_expenses_query.php sql injection	Jan 29, 2026 5mo ago
CVE-2026-1590	medium	6.9/10	itsourcecode School Management System index.php sql injection	Jan 29, 2026 5mo ago
CVE-2026-1589	medium	6.9/10	itsourcecode School Management System index.php sql injection	Jan 29, 2026 5mo ago
CVE-2026-1552	medium	5.3/10	SEMCMS SEMCMS_Info.php sql injection	Jan 29, 2026 5mo ago