Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,348

All time

Critical · Active

12,003

CVSS ≥ 9.0

New · 14 days

2,237

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1501–1530 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-3070	medium	5.3/10	SourceCodester Modern Image Gallery App upload.php cross site scripting	Feb 24, 2026 6mo ago
CVE-2026-3069	medium	6.9/10	itsourcecode Document Management System edtlbls.php sql injection	Feb 24, 2026 6mo ago
CVE-2026-3068	medium	6.9/10	itsourcecode Document Management System deluser.php sql injection	Feb 24, 2026 6mo ago
CVE-2026-3057	medium	5.3/10	a54552239 pearProjectApi Backend Task.php dateTotalForProject sql injection	Feb 24, 2026 6mo ago
CVE-2026-3046	medium	6.9/10	itsourcecode E-Logbook with Health Monitoring System for COVID-19 check_profile_old.php sql injection	Feb 24, 2026 6mo ago
CVE-2026-3043	medium	5.3/10	itsourcecode Event Management System navbar.php cross site scripting	Feb 23, 2026 6mo ago
CVE-2026-3042	medium	6.9/10	itsourcecode Event Management System index.php sql injection	Feb 23, 2026 6mo ago
CVE-2026-2984	medium	6.9/10	SourceCodester Student Result Management System drop_user.php denial of service	Feb 23, 2026 6mo ago
CVE-2026-2983	medium	6.9/10	SourceCodester Student Result Management System Bulk Import import_users.php access control	Feb 23, 2026 6mo ago
CVE-2026-2952	medium	6.9/10	Vaelsys HTTP POST Request tree_server.php os command injection	Feb 22, 2026 6mo ago
CVE-2019-25391	high	8.8/10	Ashop Shopping Cart Software Lastest Latest SQL Injection via bannedcustomers.php	Feb 22, 2026 6mo ago
CVE-2019-25440	high	8.8/10	WebIncorp ERP Every version SQL Injection via product_detail.php	Feb 22, 2026 6mo ago
CVE-2019-25433	high	8.8/10	XOOPS CMS 2.5.9 SQL Injection via gerar_pdf.php	Feb 22, 2026 6mo ago
CVE-2019-25450	high	7.1/10	Dolibarr ERP/CRM 10.0.1 SQL Injection via card.php	Feb 22, 2026 6mo ago
CVE-2019-25443	high	8.8/10	Inventory Webapp SQL Injection via add-item.php	Feb 22, 2026 6mo ago
CVE-2026-2944	medium	6.9/10	Tosei Online Store Management System ネット店舗管理システム HTTP POST Request monitor.php system os command injection	Feb 22, 2026 6mo ago
CVE-2026-2943	medium	5.3/10	SapneshNaik Student Management System index.php cross site scripting	Feb 22, 2026 6mo ago
CVE-2026-2938	medium	6.9/10	SourceCodester Student Result Management System update_smtp.php access control	Feb 22, 2026 6mo ago
CVE-2026-2934	medium	4.8/10	YiFang CMS Extended Management D_friendLinkGroup.php update cross site scripting	Feb 22, 2026 6mo ago
CVE-2026-2933	medium	4.8/10	YiFang CMS Extended Management D_adManage.php update cross site scripting	Feb 22, 2026 6mo ago
CVE-2026-2932	medium	4.8/10	YiFang CMS Extended Management D_adPosition.php update cross site scripting	Feb 22, 2026 6mo ago
CVE-2026-2912	medium	6.9/10	code-projects Online Reviewer System studentresult-view.php sql injection	Feb 22, 2026 6mo ago
CVE-2026-2898	medium	5.1/10	funadmin Backend Endpoint AuthCloudService.php getMember deserialization	Feb 22, 2026 6mo ago
CVE-2026-2896	medium	6.9/10	funadmin Configuration Ajax.php setConfig improper authorization	Feb 21, 2026 6mo ago
CVE-2026-2895	medium	6.3/10	funadmin Member.php repass password recovery	Feb 21, 2026 6mo ago
CVE-2026-2867	medium	6.9/10	itsourcecode Vehicle Management System billaction.php sql injection	Feb 21, 2026 6mo ago
CVE-2026-2865	medium	6.9/10	itsourcecode Agri-Trading Online Shopping System HTTP POST Request productcontroller.php sql injection	Feb 21, 2026 6mo ago
CVE-2026-27206	high	8.1/10	Zumba Json Serializer has a potential PHP Object Injection via Unrestricted @type in unserialize()	Feb 21, 2026 6mo ago
CVE-2019-25454	medium	5.3/10	phpMoAdmin 1.1.5 Stored Cross-Site Scripting via collection Parameter	Feb 20, 2026 6mo ago
CVE-2019-25453	medium	5.1/10	phpMoAdmin 1.1.5 Reflected Cross-Site Scripting via moadmin.php	Feb 20, 2026 6mo ago