Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,126

All time

Critical · Active

11,967

CVSS ≥ 9.0

New · 14 days

2,704

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 121–150 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-16490	medium	5.3/10	itsourcecode Hospital Management System prescription.php sql injection	Jul 22, 2026 1mo ago
CVE-2026-16486	medium	5.3/10	SourceCodester Class and Exam Timetabling System BSIS.php cross site scripting	Jul 21, 2026 1mo ago
CVE-2026-16484	medium	6.9/10	SourceCodester Class and Exam Timetabling System edit_subjecta.php sql injection	Jul 21, 2026 1mo ago
CVE-2026-16447	medium	6.9/10	D-Link DNS-320 multi_uploadify.php unrestricted upload	Jul 21, 2026 1mo ago
CVE-2026-16334	medium	5.3/10	itsourcecode Hospital Management System prescriptionorder.php sql injection	Jul 21, 2026 1mo ago
CVE-2026-16329	medium	6.9/10	D-Link DNS-320 uploadify.php unrestricted upload	Jul 21, 2026 1mo ago
CVE-2026-60026	high	8.9/10	Joomla Extension - themexpert.com - Authenticated PHP code execution in Quix Page Builder < 6.2.1	Jul 20, 2026 1mo ago
CVE-2026-35048	critical	9.8/10	Piwigo RCE via PHP Code Injection into Config File in Installer	Jul 20, 2026 1mo ago
CVE-2026-16229	medium	5.3/10	itsourcecode Courier Management System index.php cross site scripting	Jul 19, 2026 1mo ago
CVE-2026-16228	medium	6.9/10	SourceCodester Class and Exam Timetabling System edit_schoolyr.php sql injection	Jul 19, 2026 1mo ago
CVE-2026-16227	medium	6.9/10	SourceCodester Class and Exam Timetabling System edit_subject.php sql injection	Jul 19, 2026 1mo ago
CVE-2026-16226	medium	5.1/10	SourceCodester Pizzafy Ecommerce System admin_class_novo.php save_settings unrestricted upload	Jul 19, 2026 1mo ago
CVE-2026-16219	medium	5.3/10	Croogo CMS Admin File Manager FileManager.php isEditable path traversal	Jul 19, 2026 1mo ago
CVE-2026-16203	medium	5.1/10	SourceCodester Class and Exam Timetabling System forCYS.php cross site scripting	Jul 19, 2026 1mo ago
CVE-2026-16202	medium	5.1/10	SourceCodester Class and Exam Timetabling System CYS.php cross site scripting	Jul 19, 2026 1mo ago
CVE-2026-16156	medium	5.1/10	SourceCodester Class and Exam Timetabling System forexam.php cross site scripting	Jul 18, 2026 1mo ago
CVE-2026-16131	medium	5.3/10	itsourcecode Hospital Management System prescriptionrecord.php sql injection	Jul 18, 2026 1mo ago
CVE-2026-49284	high	7.1/10	SimpleSAMLphp SP accepts a response from an unexpected IdP when unsigned `Response/InResponseTo` is combined with a signed assertion lacking `SubjectConfirmationData/InResponseTo`	Jul 17, 2026 1mo ago
CVE-2026-45162	high	8.0/10	Pimcore: Unsafe PHP Deserialization in Multiple Locations Without allowed_classes Restriction	Jul 17, 2026 1mo ago
CVE-2026-16009	medium	5.3/10	itsourcecode Hospital Management System prescriptionorderdetail.php sql injection	Jul 17, 2026 1mo ago
CVE-2026-44177	high	8.8/10	Kirby: Pre-authentication path traversal and PHP file inclusion during user lookup	Jul 16, 2026 1mo ago
CVE-2026-15909	medium	5.3/10	RafyMrX TOKO-ONLINE-ROTI add.php authorization	Jul 16, 2026 1mo ago
CVE-2026-57996	high	8.7/10	phpMyFAQ - Privilege Escalation via Missing SuperAdmin Guard in user/add Endpoint	Jul 15, 2026 1mo ago
CVE-2026-15715	medium	5.3/10	SourceCodester Class and Exam Timetabling System exam.php cross site scripting	Jul 14, 2026 1mo ago
CVE-2026-15703	medium	6.9/10	SourceCodester Simple and Nice Shopping Cart Script userproductdeletequery.php sql injection	Jul 14, 2026 1mo ago
CVE-2026-15596	medium	5.3/10	SourceCodester Class and Exam Timetabling System subject.php cross site scripting	Jul 13, 2026 1mo ago
CVE-2026-61498	critical	9.3/10	Vitec Flamingo 4.12.2 Unauthenticated OS Command Injection via gen_graphs.php	Jul 13, 2026 1mo ago
CVE-2026-60121	critical	9.3/10	Vitec Flamingo 4.12.2 Unauthenticated OS Command Injection via ping.php	Jul 13, 2026 1mo ago
CVE-2026-15559	medium	5.3/10	CodeAstro Simple Online Leave Management System POST accept.php sql injection	Jul 13, 2026 1mo ago
CVE-2026-15558	medium	5.3/10	CodeAstro Simple Online Leave Management System deletemp.php sql injection	Jul 13, 2026 1mo ago