Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

336,916

All time

Critical · Active

10,649

CVSS ≥ 9.0

New · 14 days

1,565

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1591–1620 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-15374	medium	5.1/10	EyouCMS Ask Module Ask.php cross site scripting	Dec 31, 2025 6mo ago
CVE-2025-15373	medium	5.3/10	EyouCMS function.php saveRemote server-side request forgery	Dec 31, 2025 6mo ago
CVE-2025-15223	medium	5.3/10	Philipinho Simple-PHP-Blog login.php cross site scripting	Dec 31, 2025 6mo ago
CVE-2022-50795	high	8.5/10	SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via traceroute.php	Dec 30, 2025 6mo ago
CVE-2022-50793	high	8.7/10	SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Authenticated Command Injection via www-data-handler.php	Dec 30, 2025 6mo ago
CVE-2022-50791	high	8.5/10	SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via ping.php	Dec 30, 2025 6mo ago
CVE-2022-50789	high	8.5/10	SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via dns.php	Dec 30, 2025 6mo ago
CVE-2025-15354	medium	6.9/10	itsourcecode Society Management System add_admin.php sql injection	Dec 30, 2025 6mo ago
CVE-2025-15353	medium	6.9/10	itsourcecode Society Management System edit_admin_query.php edit_admin_query sql injection	Dec 30, 2025 6mo ago
CVE-2025-15264	medium	6.9/10	FeehiCMS TimThumb timthumb.php server-side request forgery	Dec 30, 2025 6mo ago
CVE-2025-15263	medium	6.9/10	BiggiDroid Simple PHP CMS Admin Login login.php sql injection	Dec 30, 2025 6mo ago
CVE-2025-15262	medium	5.1/10	BiggiDroid Simple PHP CMS Site Logo edit.php unrestricted upload	Dec 30, 2025 6mo ago
CVE-2025-15250	medium	5.1/10	08CMS Novel System Template mtpls.inc.php code injection	Dec 30, 2025 6mo ago
CVE-2025-14509	high	7.2/10	Lucky Wheel for WooCommerce – Spin a Sale <= 1.1.13 - Authenticated (Administrator+) PHP Code Injection via Conditional Tags	Dec 30, 2025 6mo ago
CVE-2025-15244	medium	6.3/10	PHPEMS Purchase Request race condition	Dec 30, 2025 6mo ago
CVE-2025-15243	medium	6.9/10	code-projects Simple Stock System login.php sql injection	Dec 30, 2025 6mo ago
CVE-2025-15242	low	2.3/10	PHPEMS Coupon race condition	Dec 30, 2025 6mo ago
CVE-2025-15214	medium	4.8/10	Campcodes Park Ticketing System admin_class.php save_pricing cross site scripting	Dec 30, 2025 6mo ago
CVE-2025-15213	medium	5.3/10	code-projects Student File Management System File Download download.php improper authorization	Dec 30, 2025 6mo ago
CVE-2025-15212	medium	5.3/10	code-projects Refugee Food Management System regfood.php sql injection	Dec 30, 2025 6mo ago
CVE-2025-15211	medium	5.3/10	code-projects Refugee Food Management System refugee.php sql injection	Dec 30, 2025 6mo ago
CVE-2025-15210	medium	5.3/10	code-projects Refugee Food Management System editrefugee.php sql injection	Dec 29, 2025 6mo ago
CVE-2025-15209	medium	5.3/10	code-projects Refugee Food Management System editfood.php sql injection	Dec 29, 2025 6mo ago
CVE-2025-15208	medium	6.9/10	code-projects Refugee Food Management System editrefugee.php sql injection	Dec 29, 2025 6mo ago
CVE-2025-15207	medium	6.9/10	Campcodes Supplier Management System view_products.php sql injection	Dec 29, 2025 6mo ago
CVE-2025-15206	medium	6.9/10	Campcodes Supplier Management System add_area.php sql injection	Dec 29, 2025 6mo ago
CVE-2025-15205	medium	5.3/10	code-projects Student File Management System download.php sql injection	Dec 29, 2025 6mo ago
CVE-2025-15199	medium	5.3/10	code-projects College Notes Uploading System userprofile.php unrestricted upload	Dec 29, 2025 6mo ago
CVE-2025-15198	medium	6.9/10	code-projects College Notes Uploading System login.php sql injection	Dec 29, 2025 6mo ago
CVE-2025-15197	medium	5.1/10	code-projects/anirbandutta9 Content Management System/News-Buzz editposts.php unrestricted upload	Dec 29, 2025 6mo ago