Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,359

All time

Critical · Active

12,003

CVSS ≥ 9.0

New · 14 days

2,218

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1591–1620 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2019-25369	medium	5.1/10	OPNsense 19.1 Stored XSS via system_advanced_sysctl.php	Feb 15, 2026 6mo ago
CVE-2019-25368	medium	4.8/10	OPNsense 19.1 Reflected XSS via diag_backup.php	Feb 15, 2026 6mo ago
CVE-2026-24895	high	8.9/10	FrankenPHP affected by Path Confusion via Unicode casing in CGI path splitting allows execution of arbitrary files	Feb 12, 2026 6mo ago
CVE-2026-24894	high	8.7/10	FrankenPHP leaks session data between requests in worker mode	Feb 12, 2026 6mo ago
CVE-2026-0910	high	8.8/10	wpForo Forum <= 2.4.13 - Authenticated (Subscriber+) PHP Object Injection	Feb 11, 2026 6mo ago
CVE-2026-1235	—	—	WP eCommerce <= 3.15.1 - Unauthenticated PHP Object Injection	Feb 11, 2026 6mo ago
CVE-2026-2226	medium	5.1/10	DouPHP ZIP File file.php unrestricted upload	Feb 9, 2026 6mo ago
CVE-2026-2225	medium	6.9/10	itsourcecode News Portal Project Administrator Login index.php sql injection	Feb 9, 2026 6mo ago
CVE-2026-2224	medium	5.1/10	code-projects Online Reviewer System btn_functions.php cross site scripting	Feb 9, 2026 6mo ago
CVE-2026-2223	medium	6.9/10	code-projects Online Reviewer System index.php sql injection	Feb 9, 2026 6mo ago
CVE-2026-2222	medium	4.8/10	code-projects Online Reviewer System btn_functions.php cross site scripting	Feb 9, 2026 6mo ago
CVE-2026-2221	medium	6.9/10	code-projects Online Reviewer System Login index.php sql injection	Feb 9, 2026 6mo ago
CVE-2026-2220	medium	6.9/10	code-projects Online Reviewer System btn_functions.php sql injection	Feb 9, 2026 6mo ago
CVE-2026-2217	medium	6.9/10	itsourcecode Event Management System manage_user.php sql injection	Feb 9, 2026 6mo ago
CVE-2026-2214	medium	4.8/10	code-projects for Plugin AdminAddAlbum.php cross site scripting	Feb 9, 2026 6mo ago
CVE-2026-2213	medium	5.1/10	code-projects Online Music Site AdminAddAlbum.php unrestricted upload	Feb 9, 2026 6mo ago
CVE-2026-2212	medium	6.9/10	code-projects Online Music Site AdminEditCategory.php sql injection	Feb 9, 2026 6mo ago
CVE-2026-2211	medium	6.9/10	code-projects Online Music Site AdminDeleteCategory.php sql injection	Feb 9, 2026 6mo ago
CVE-2026-2199	medium	6.9/10	code-projects Online Reviewer System user-delete.php sql injection	Feb 9, 2026 6mo ago
CVE-2026-2198	medium	6.9/10	code-projects Online Reviewer System loaddata.php sql injection	Feb 9, 2026 6mo ago
CVE-2026-2197	medium	6.9/10	code-projects Online Reviewer System exam-delete.php sql injection	Feb 9, 2026 6mo ago
CVE-2026-2196	medium	6.9/10	code-projects Online Reviewer System exam-update.php sql injection	Feb 9, 2026 6mo ago
CVE-2026-2195	medium	6.9/10	code-projects Online Reviewer System questions-view.php sql injection	Feb 8, 2026 6mo ago
CVE-2026-2190	medium	6.9/10	itsourcecode School Management System controller.php sql injection	Feb 8, 2026 6mo ago
CVE-2026-2189	medium	6.9/10	itsourcecode School Management System index.php sql injection	Feb 8, 2026 6mo ago
CVE-2026-2184	medium	6.9/10	Great Developers Certificate Generation System csv.php os command injection	Feb 8, 2026 6mo ago
CVE-2026-2183	medium	5.3/10	Great Developers Certificate Generation System csv.php unrestricted upload	Feb 8, 2026 6mo ago
CVE-2026-2179	medium	5.1/10	PHPGurukul Hospital Management System manage-users.php sql injection	Feb 8, 2026 6mo ago
CVE-2026-2173	medium	6.9/10	code-projects Online Examination System login.php sql injection	Feb 8, 2026 6mo ago
CVE-2026-2172	medium	6.9/10	code-projects Online Application System for Admission Login Endpoint index.php sql injection	Feb 8, 2026 6mo ago