Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

705

Newly disclosed

Feed last synced

8 hrs ago

Data freshness

Showing 121–150 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-10777	medium	6.9/10	ealpha072 Student-Management-System Administrative Backend config.php improper authentication	Jun 3, 2026 23d ago
CVE-2026-7888	high	8.4/10	Concrete CMS below 9.5.2 is vulnerable to PHP Object Injection via unserialize() calls in the Workflow, Form block, and File/Set components that lack the allowed_classes restriction.	Jun 3, 2026 24d ago
CVE-2026-10704	medium	6.9/10	SourceCodester Pizzafy E-Commerce System Administrative Control Panel admin_class_novo.php login sql injection	Jun 3, 2026 24d ago
CVE-2026-10694	medium	6.9/10	SourceCodester Online Food Ordering System index.php include file inclusion	Jun 3, 2026 24d ago
CVE-2026-25861	high	8.2/10	QloApps 1.7.0 Weak Password Hashing via MD5 in Tools.php	Jun 2, 2026 24d ago
CVE-2026-10624	medium	5.3/10	SourceCodester Human Resource Management Employee View detailview.php resource injection	Jun 2, 2026 24d ago
CVE-2026-10620	medium	6.9/10	code-projects Student Admission System index.php sql injection	Jun 2, 2026 24d ago
CVE-2026-10608	medium	6.9/10	DedeCMS carbuyaction.php RemoveXSS sql injection	Jun 2, 2026 25d ago
CVE-2026-10607	medium	6.9/10	DedeCMS flink.php dede_htmlspecialchars sql injection	Jun 2, 2026 25d ago
CVE-2026-10606	medium	6.9/10	DedeCMS Feedback feedback.php TrimMsg sql injection	Jun 2, 2026 25d ago
CVE-2026-32250	medium	4.3/10	NamelessMC has Reflected Cross-Site Scripting (XSS) in id parameter of /index.php?route=/queries/user/	Jun 2, 2026 25d ago
CVE-2026-39555	high	8.1/10	WordPress Askka theme <= 1.3.1 - PHP Object Injection vulnerability	Jun 2, 2026 25d ago
CVE-2026-39551	high	8.1/10	WordPress Töbel theme <= 1.8.1 - PHP Object Injection vulnerability	Jun 2, 2026 25d ago
CVE-2026-39550	high	8.1/10	WordPress Aperitif theme <= 1.6 - PHP Object Injection vulnerability	Jun 2, 2026 25d ago
CVE-2026-10581	medium	5.3/10	DedeCMS download.php base64_decode server-side request forgery	Jun 2, 2026 25d ago
CVE-2026-10568	medium	5.3/10	itsourcecode Fees Management System manage_payment.php sql injection	Jun 2, 2026 25d ago
CVE-2026-10559	medium	5.3/10	SourceCodester Pizzafy Ecommerce System index.php file inclusion	Jun 2, 2026 25d ago
CVE-2026-10558	medium	5.3/10	SourceCodester Pizzafy Ecommerce System index.php file inclusion	Jun 2, 2026 25d ago
CVE-2026-10302	medium	5.3/10	itsourcecode Fees Management System manage_fee.php sql injection	Jun 1, 2026 25d ago
CVE-2026-10301	medium	5.3/10	itsourcecode Fees Management System index.php cross site scripting	Jun 1, 2026 25d ago
CVE-2026-10299	medium	5.1/10	code-projects Online Hospital Management System viewdoctortimings.php resource injection	Jun 1, 2026 25d ago
CVE-2026-10297	medium	5.3/10	itsourcecode Fees Management System manage_course.php sql injection	Jun 1, 2026 25d ago
CVE-2026-10296	medium	5.3/10	itsourcecode Fees Management System ajax.php sql injection	Jun 1, 2026 25d ago
CVE-2026-49491	high	8.8/10	Pixa Bank 2.0 SQL Injection via agence-ajax.php API	Jun 1, 2026 25d ago
CVE-2018-25434	high	8.8/10	WP AutoSuggest 0.24 SQL Injection via autosuggest.php	Jun 1, 2026 25d ago
CVE-2026-10290	medium	6.9/10	code-projects Hotel and Tourism Reservation System GET Parameter tour.php sql injection	Jun 1, 2026 25d ago
CVE-2026-10289	medium	5.3/10	code-projects Hotel and Tourism Reservation System tour.php cross site scripting	Jun 1, 2026 25d ago
CVE-2026-10288	medium	6.9/10	code-projects Hotel and Tourism Reservation System Admin Login login.php password_verify improper authentication	Jun 1, 2026 25d ago
CVE-2026-10287	medium	6.9/10	SourceCodester SEO Meta Tag Extractor index.php get_headers server-side request forgery	Jun 1, 2026 25d ago
CVE-2026-10286	medium	5.3/10	CodeAstro Payroll System home_employee.php sql injection	Jun 1, 2026 25d ago