Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

336,898

All time

Critical · Active

10,649

CVSS ≥ 9.0

New · 14 days

1,547

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 1531–1560 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-14131	medium	6.1/10	WP Widget Changer <= 1.2.5 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']	Jan 7, 2026 5mo ago
CVE-2025-14130	medium	6.1/10	Post Like Dislike <= 1.0 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']	Jan 7, 2026 5mo ago
CVE-2025-14118	medium	6.1/10	Starred Review <= 1.4.2 - Reflected Cross-Site Scripting via PHP_SELF Variable	Jan 7, 2026 5mo ago
CVE-2025-14128	medium	6.1/10	Stumble! for WordPress <= 1.1.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']	Jan 7, 2026 5mo ago
CVE-2025-14127	medium	6.1/10	Testimonial Master <= 0.2.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']	Jan 7, 2026 5mo ago
CVE-2026-0649	medium	5.1/10	invoiceninja Migration Import Import.php copy server-side request forgery	Jan 7, 2026 5mo ago
CVE-2026-0643	medium	6.9/10	projectworlds House Rental and Property Listing Signup register.php unrestricted upload	Jan 6, 2026 5mo ago
CVE-2026-0642	medium	4.8/10	projectworlds House Rental and Property Listing complaint.php cross site scripting	Jan 6, 2026 5mo ago
CVE-2025-47553	high	8.8/10	WordPress DZS Video Gallery plugin <= 12.25 - PHP Object Injection vulnerability	Jan 6, 2026 5mo ago
CVE-2026-0607	medium	6.9/10	code-projects Online Music Site AdminViewSongs.php sql injection	Jan 5, 2026 5mo ago
CVE-2026-0606	medium	6.9/10	code-projects Online Music Site Albums.php sql injection	Jan 5, 2026 5mo ago
CVE-2026-0605	medium	6.9/10	code-projects Online Music Site login.php sql injection	Jan 5, 2026 5mo ago
CVE-2026-0597	medium	5.3/10	Campcodes Supplier Management System edit_profile.php sql injection	Jan 5, 2026 5mo ago
CVE-2026-0592	medium	6.9/10	code-projects Online Product Reservation System User Registration register_code.php sql injection	Jan 5, 2026 5mo ago
CVE-2026-0591	medium	5.3/10	code-projects Online Product Reservation System Cart Update update.php sql injection	Jan 5, 2026 5mo ago
CVE-2026-0590	medium	5.3/10	code-projects Online Product Reservation System POST Parameter delete.php sql injection	Jan 5, 2026 5mo ago
CVE-2026-0588	medium	5.1/10	Xinhu Rainrock RockOA API rockfun.php cross site scripting	Jan 5, 2026 5mo ago
CVE-2026-0587	medium	5.1/10	Xinhu Rainrock RockOA Cover Image rock_page_gong.php cross site scripting	Jan 5, 2026 5mo ago
CVE-2026-0586	medium	5.3/10	code-projects Online Product Reservation System prod.php cross site scripting	Jan 5, 2026 5mo ago
CVE-2025-31047	high	8.8/10	WordPress Themify Edmin theme <= 2.0.0 - PHP Object Injection Vulnerability	Jan 5, 2026 5mo ago
CVE-2026-0585	medium	6.9/10	code-projects Online Product Reservation System GET Parameter order_view.php sql injection	Jan 5, 2026 5mo ago
CVE-2026-0584	medium	5.3/10	code-projects Online Product Reservation System left_cart.php sql injection	Jan 5, 2026 5mo ago
CVE-2026-0583	medium	6.9/10	code-projects Online Product Reservation System User Login login.php sql injection	Jan 5, 2026 5mo ago
CVE-2026-0582	medium	5.3/10	itsourcecode Society Management System edit_activity_query.php sql injection	Jan 5, 2026 5mo ago
CVE-2025-15458	medium	6.9/10	bg5sbk MiniCMS Article post-edit.php improper authentication	Jan 5, 2026 5mo ago
CVE-2025-15457	medium	6.9/10	bg5sbk MiniCMS Trash File Restore post.php improper authentication	Jan 5, 2026 5mo ago
CVE-2025-15456	medium	6.9/10	bg5sbk MiniCMS Publish page-edit.php improper authentication	Jan 5, 2026 5mo ago
CVE-2025-15455	medium	6.9/10	bg5sbk MiniCMS File Recovery Request page.php delete_page improper authentication	Jan 5, 2026 5mo ago
CVE-2026-0579	medium	6.9/10	code-projects Online Product Reservation System POST Parameter edit.php sql injection	Jan 4, 2026 6mo ago
CVE-2026-0578	medium	6.9/10	code-projects Online Product Reservation System delete.php sql injection	Jan 4, 2026 6mo ago