Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,348

All time

Critical · Active

12,003

CVSS ≥ 9.0

New · 14 days

2,238

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1471–1500 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-1542	—	—	Super Stage WP <= 1.0.1 - Unauthenticated PHP Object Injection	Feb 28, 2026 5mo ago
CVE-2026-28515	critical	9.3/10	openDCIM <= 23.04 Missing Authorization in install.php	Feb 27, 2026 5mo ago
CVE-2026-28408	critical	9.8/10	WeGIA lacks authentication verification in adicionar_tipo_docs_atendido.php	Feb 27, 2026 5mo ago
CVE-2026-27836	high	7.5/10	phpMyFAQ Allows Unauthenticated Account Creation via WebAuthn Prepare Endpoint	Feb 27, 2026 5mo ago
CVE-2019-25493	high	8.8/10	Homey BNB V4 SQL Injection via getrecord.php	Feb 27, 2026 5mo ago
CVE-2019-25492	high	8.8/10	Homey BNB V4 SQL Injection via getcmsdata.php	Feb 27, 2026 5mo ago
CVE-2019-25491	high	8.8/10	Homey BNB V4 SQL Injection via cms_getpagetitle.php	Feb 27, 2026 5mo ago
CVE-2019-25490	high	8.8/10	Homey BNB V4 SQL Injection via admin edit.php	Feb 27, 2026 5mo ago
CVE-2026-3302	medium	5.3/10	SourceCodester Doctor Appointment System Sign Up register.php cross site scripting	Feb 27, 2026 5mo ago
CVE-2026-3292	medium	5.3/10	jizhiCMS Batch Model.php findAll sql injection	Feb 27, 2026 5mo ago
CVE-2026-3261	medium	6.9/10	itsourcecode School Management System Setting index.php sql injection	Feb 26, 2026 5mo ago
CVE-2026-22205	high	8.7/10	SPIP < 4.4.10 Authentication Bypass via PHP Type Juggling	Feb 26, 2026 5mo ago
CVE-2026-22206	high	8.7/10	SPIP < 4.4.10 SQL Injection RCE via Union & PHP Tags	Feb 26, 2026 5mo ago
CVE-2026-28138	high	7.2/10	WordPress uListing plugin <= 2.2.0 - PHP Object Injection vulnerability	Feb 26, 2026 6mo ago
CVE-2026-3171	medium	5.1/10	SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System queue.php cross site scripting	Feb 25, 2026 6mo ago
CVE-2026-3170	medium	4.8/10	SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System patient-search.php cross site scripting	Feb 25, 2026 6mo ago
CVE-2026-3164	medium	6.9/10	itsourcecode News Portal Project contactus.php sql injection	Feb 25, 2026 6mo ago
CVE-2026-3153	medium	6.9/10	itsourcecode Document Management System register.php sql injection	Feb 25, 2026 6mo ago
CVE-2026-3152	medium	6.9/10	itsourcecode College Management System teacher-salary.php sql injection	Feb 25, 2026 6mo ago
CVE-2026-3151	medium	6.9/10	itsourcecode College Management System login.php sql injection	Feb 25, 2026 6mo ago
CVE-2026-3150	medium	5.3/10	itsourcecode College Management System display-teacher.php sql injection	Feb 25, 2026 6mo ago
CVE-2026-3149	medium	5.3/10	itsourcecode College Management System asign-single-student-subjects.php sql injection	Feb 25, 2026 6mo ago
CVE-2026-3148	medium	6.9/10	SourceCodester Simple and Nice Shopping Cart Script signup.php sql injection	Feb 25, 2026 6mo ago
CVE-2026-3135	medium	6.9/10	itsourcecode News Portal Project add-category.php sql injection	Feb 25, 2026 6mo ago
CVE-2026-3134	medium	6.9/10	itsourcecode News Portal Project edit-category.php sql injection	Feb 24, 2026 6mo ago
CVE-2026-3133	medium	6.9/10	itsourcecode Document Management System Login loging.php sql injection	Feb 24, 2026 6mo ago
CVE-2026-26351	medium	4.8/10	GetSimpleCMS-CE < 3.3.22 Stored XSS via components.php	Feb 24, 2026 6mo ago
CVE-2026-27732	high	8.6/10	AVideo has Authenticated Server-Side Request Forgery via downloadURL in aVideoEncoder.json.php	Feb 24, 2026 6mo ago
CVE-2025-14577	critical	9.3/10	PHP Function Injection in Slican NPC/IPL/IPM/IPU	Feb 24, 2026 6mo ago
CVE-2025-15589	medium	5.1/10	MuYuCMS Template Management Template.php delete_dir_file path traversal	Feb 24, 2026 6mo ago