Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

336,849

All time

Critical · Active

10,645

CVSS ≥ 9.0

New · 14 days

1,498

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1441–1470 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-1551	medium	5.3/10	itsourcecode School Management System controller.php sql injection	Jan 28, 2026 5mo ago
CVE-2026-1550	medium	5.3/10	PHPGurukul Hospital Management System Admin Dashboard adminviews.py improper authorization	Jan 28, 2026 5mo ago
CVE-2026-1545	medium	6.9/10	itsourcecode School Management System index.php sql injection	Jan 28, 2026 5mo ago
CVE-2026-1535	medium	6.9/10	code-projects Online Music Site AdminReply.php sql injection	Jan 28, 2026 5mo ago
CVE-2026-1534	medium	6.9/10	code-projects Online Music Site AdminEditUser.php sql injection	Jan 28, 2026 5mo ago
CVE-2026-1533	medium	5.1/10	code-projects Online Music Site AdminAddCategory.php sql injection	Jan 28, 2026 5mo ago
CVE-2026-1391	medium	5.3/10	Vzaar Media Management <= 1.2 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']	Jan 28, 2026 5mo ago
CVE-2026-1506	high	8.6/10	D-Link DIR-615 MAC Filter Configuration adv_mac_filter.php os command injection	Jan 28, 2026 5mo ago
CVE-2026-1505	high	8.6/10	D-Link DIR-615 URL Filter set_temp_nodes.php os command injection	Jan 28, 2026 5mo ago
CVE-2026-24765	high	7.8/10	PHPUnit Vulnerable to Unsafe Deserialization in PHPT Code Coverage Handling	Jan 27, 2026 5mo ago
CVE-2020-36951	high	8.8/10	Phpscript-sgh 0.1.0 - Time Based Blind SQL Injection	Jan 27, 2026 5mo ago
CVE-2026-1448	high	8.6/10	D-Link DIR-615 Web Management wiz_policy_3_machine.php os command injection	Jan 26, 2026 5mo ago
CVE-2026-1445	medium	5.1/10	iJason-Liu Books_Manager upload_bookCover.php unrestricted upload	Jan 26, 2026 5mo ago
CVE-2026-1444	medium	4.8/10	iJason-Liu Books_Manager add_book_check.php cross site scripting	Jan 26, 2026 5mo ago
CVE-2026-1443	medium	6.9/10	code-projects Online Music Site AdminDeleteUser.php sql injection	Jan 26, 2026 5mo ago
CVE-2026-1424	medium	5.1/10	PHPGurukul News Portal Profile Pic unrestricted upload	Jan 26, 2026 5mo ago
CVE-2026-1423	medium	5.3/10	code-projects Online Examination System admin_pic.php unrestricted upload	Jan 26, 2026 5mo ago
CVE-2026-1422	medium	6.9/10	code-projects Online Examination System Login Page index.php sql injection	Jan 26, 2026 5mo ago
CVE-2025-6461	medium	4.3/10	CubeWP – All-in-One Dynamic Content Framework <= 1.1.27 - Unauthenticated Post Disclosure in class-cubewp-search-ajax-hooks.php	Jan 25, 2026 5mo ago
CVE-2025-13676	medium	6.1/10	JustClick registration plugin <= 0.1 - Reflected Cross-Site Scripting via PHP_SELF	Jan 24, 2026 5mo ago
CVE-2026-24422	medium	5.3/10	phpMyFAQ: Public API endpoints expose emails and invisible questions	Jan 24, 2026 5mo ago
CVE-2026-24420	medium	6.5/10	phpMyFAQ: Attachment download allowed without dlattachment right (broken access control)	Jan 24, 2026 5mo ago
CVE-2026-24421	medium	6.5/10	phpMyFAQ missing authorization exposes /api/setup/backup to any authenticated user	Jan 24, 2026 5mo ago
CVE-2026-24138	high	7.5/10	FOG vulnerable to unauthenticated SSRF via `/fog/service/getversion.php`	Jan 23, 2026 5mo ago
CVE-2025-69099	high	8.8/10	WordPress North theme <= 5.7.5 - PHP Object Injection vulnerability	Jan 22, 2026 5mo ago
CVE-2025-69036	high	8.8/10	WordPress Tech Life CPT plugin <= 16.4 - PHP Object Injection vulnerability	Jan 22, 2026 5mo ago
CVE-2025-69035	high	8.8/10	WordPress Dental Care CPT plugin <= 20.2 - PHP Object Injection vulnerability	Jan 22, 2026 5mo ago
CVE-2025-69002	high	8.8/10	WordPress OneLife theme <= 3.9 - PHP Object Injection vulnerability	Jan 22, 2026 5mo ago
CVE-2025-68903	high	8.8/10	WordPress Anona theme <= 8.0 - PHP Object Injection vulnerability	Jan 22, 2026 5mo ago
CVE-2025-68899	high	8.8/10	WordPress Vivagh theme <= 2.4 - PHP Object Injection vulnerability	Jan 22, 2026 5mo ago