Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,348

All time

Critical · Active

12,003

CVSS ≥ 9.0

New · 14 days

2,238

Newly disclosed

Feed last synced

22 mins ago

Data freshness

Showing 1441–1470 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-22417	critical	9.8/10	WordPress Grand Wedding theme < 3.1.11 - PHP Object Injection vulnerability	Mar 5, 2026 5mo ago
CVE-2025-54001	critical	9.8/10	WordPress Classter theme <= 2.5 - PHP Object Injection vulnerability	Mar 5, 2026 5mo ago
CVE-2019-25507	high	8.8/10	Ashop Shopping Cart Software Lastest SQL Injection via index.php	Mar 4, 2026 5mo ago
CVE-2019-25503	high	7.1/10	PHPads 2.0 SQL Injection via click.php3 bannerID	Mar 4, 2026 5mo ago
CVE-2019-25501	high	8.8/10	Simple Job Script SQL Injection via delete_application_ajax.php	Mar 4, 2026 5mo ago
CVE-2019-25499	high	8.8/10	Simple Job Script SQL Injection via get_job_applications_ajax.php	Mar 4, 2026 5mo ago
CVE-2026-27012	critical	9.8/10	Unauthenticated privilege escalation in OpenSTAManager via modules/utenti/actions.php	Mar 3, 2026 5mo ago
CVE-2026-24415	medium	5.1/10	OpenSTAManager affected by reflected XSS in modifica_iva.php via righe parameter	Mar 3, 2026 5mo ago
CVE-2026-3487	medium	5.1/10	itsourcecode College Management System class-result.php sql injection	Mar 3, 2026 5mo ago
CVE-2026-3486	medium	5.1/10	itsourcecode College Management System student-fee.php sql injection	Mar 3, 2026 5mo ago
CVE-2025-50198	high	8.8/10	Chamilo: Deserialization of untrusted data in /plugin/vchamilo/views/import.php via POST configuration_file; POST course_path; POST home_path parameters	Mar 2, 2026 5mo ago
CVE-2025-50197	high	7.1/10	Chamilo: OS Command Injection in /main/admin/sub_language_ajax.inc.php via POST new_language parameter	Mar 2, 2026 5mo ago
CVE-2025-50196	high	7.1/10	Chamilo: OS Command Injection in /plugin/vchamilo/views/editinstance.php via POST main_database parameter	Mar 2, 2026 5mo ago
CVE-2025-50195	high	7.1/10	Chamilo: OS Command Injection in /plugin/vchamilo/views/manage.controller.php	Mar 2, 2026 5mo ago
CVE-2025-50194	high	7.1/10	Chamilo: OS Command Injection in /main/cron/lang/check_parse_lang.php	Mar 2, 2026 5mo ago
CVE-2025-50193	high	7.1/10	Chamilo: OS command Injection in /plugin/vchamilo/views/import.php with the POST to_main_database parameter	Mar 2, 2026 5mo ago
CVE-2025-50192	high	8.8/10	Chamilo: Time-based SQL Injection in /main/webservices/registration.soap.php	Mar 2, 2026 5mo ago
CVE-2025-50191	high	7.0/10	Chamilo: Error-based SQL Injection via POST userFile with the /main/exercise/hotpotatoes.php script	Mar 2, 2026 5mo ago
CVE-2025-50190	high	8.8/10	Chamilo: Error-based SQL Injection via GET openid.assoc_handle with the /index.php script	Mar 2, 2026 5mo ago
CVE-2025-52482	high	8.3/10	Chamilo: Stored XSS in glossary function via /main/glossary/index.php trigger in /main/tracking/course_log_resources.php	Mar 2, 2026 5mo ago
CVE-2025-50186	medium	4.8/10	Chamilo: Stored XSS via Malicious CSV Filename in user_import.php	Mar 2, 2026 5mo ago
CVE-2026-3413	medium	6.9/10	itsourcecode University Management System admin_single_student.php sql injection	Mar 2, 2026 5mo ago
CVE-2026-3412	medium	5.3/10	itsourcecode University Management System att_single_view.php cross site scripting	Mar 2, 2026 5mo ago
CVE-2026-3411	medium	6.9/10	itsourcecode University Management System admin_single_student_update.php sql injection	Mar 2, 2026 5mo ago
CVE-2026-3410	medium	6.9/10	itsourcecode Society Management System check_studid.php sql injection	Mar 2, 2026 5mo ago
CVE-2026-3406	medium	6.9/10	projectworlds Online Art Gallery Shop Registration registration.php sql injection	Mar 2, 2026 5mo ago
CVE-2026-3403	medium	4.8/10	PHPGurukul Student Record Management System edit-subject.php cross site scripting	Mar 2, 2026 5mo ago
CVE-2026-3402	medium	4.8/10	PHPGurukul Student Record Management System edit-course.php cross site scripting	Mar 2, 2026 5mo ago
CVE-2026-3395	medium	6.9/10	MaxSite CMS MarkItUp Preview AJAX Endpoint preview-ajax.php eval code injection	Mar 1, 2026 5mo ago
CVE-2026-2471	high	7.5/10	WP Mail Logging <= 1.15.0 - Unauthenticated PHP Object Injection via Email Log Message Field	Feb 28, 2026 5mo ago