Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,367

All time

Critical · Active

12,003

CVSS ≥ 9.0

New · 14 days

2,225

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1621–1650 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-2171	medium	6.9/10	code-projects Online Student Management System Login accounts.php sql injection	Feb 8, 2026 6mo ago
CVE-2026-2166	medium	6.9/10	code-projects Online Reviewer System Login index.php sql injection	Feb 8, 2026 6mo ago
CVE-2026-2165	medium	6.9/10	detronetdip E-commerce Account Creation Endpoint add_seller.php missing authentication	Feb 8, 2026 6mo ago
CVE-2026-2164	medium	6.9/10	detronetdip E-commerce addadhar.php unrestricted upload	Feb 8, 2026 6mo ago
CVE-2026-2162	medium	5.1/10	itsourcecode News Portal Project aboutus.php sql injection	Feb 8, 2026 6mo ago
CVE-2026-2161	medium	6.9/10	itsourcecode Directory Management System forget-password.php sql injection	Feb 8, 2026 6mo ago
CVE-2026-2160	medium	5.3/10	SourceCodester Simple Responsive Tourism Website Master.php cross site scripting	Feb 8, 2026 6mo ago
CVE-2026-2159	medium	5.3/10	SourceCodester Simple Responsive Tourism Website Registration Master.php cross site scripting	Feb 8, 2026 6mo ago
CVE-2026-2158	medium	6.9/10	code-projects Student Web Portal check_user.php sql injection	Feb 8, 2026 6mo ago
CVE-2026-2156	medium	4.8/10	code-projects Online Student Management System Announcement Management index.php cross site scripting	Feb 8, 2026 6mo ago
CVE-2026-2154	medium	5.3/10	SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System Patient Registration registration.php cross site scripting	Feb 8, 2026 6mo ago
CVE-2026-2152	high	8.6/10	D-Link DIR-615 Web Configuration adv_routing.php os command injection	Feb 8, 2026 6mo ago
CVE-2026-2151	high	8.6/10	D-Link DIR-615 DMZ Host Feature adv_firewall.php os command injection	Feb 8, 2026 6mo ago
CVE-2026-2150	medium	5.3/10	SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System checkin.php cross site scripting	Feb 8, 2026 6mo ago
CVE-2026-2149	medium	5.3/10	SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System appointments.php cross site scripting	Feb 8, 2026 6mo ago
CVE-2026-2136	medium	6.9/10	projectworlds Online Food Ordering System view-ticket.php sql injection	Feb 8, 2026 6mo ago
CVE-2026-2134	medium	5.1/10	PHPGurukul Hospital Management System manage-doctors.php sql injection	Feb 8, 2026 6mo ago
CVE-2026-2133	medium	6.9/10	code-projects Online Music Site AdminUpdateCategory.php unrestricted upload	Feb 8, 2026 6mo ago
CVE-2026-2132	medium	6.9/10	code-projects Online Music Site AdminUpdateCategory.php sql injection	Feb 8, 2026 6mo ago
CVE-2026-2122	medium	5.3/10	Xiaopi Panel WAF Firewall demo.php sql injection	Feb 8, 2026 6mo ago
CVE-2026-2117	medium	6.9/10	itsourcecode Society Management System edit_activity.php sql injection	Feb 7, 2026 6mo ago
CVE-2026-2116	medium	6.9/10	itsourcecode Society Management System edit_expenses.php sql injection	Feb 7, 2026 6mo ago
CVE-2026-2115	medium	6.9/10	itsourcecode Society Management System delete_expenses.php sql injection	Feb 7, 2026 6mo ago
CVE-2026-2114	medium	6.9/10	itsourcecode Society Management System edit_admin.php sql injection	Feb 7, 2026 6mo ago
CVE-2026-2113	medium	6.9/10	yuan1994 tpadmin WebUploader preview.php deserialization	Feb 7, 2026 6mo ago
CVE-2026-2110	medium	6.3/10	Tasin1025 SwiftBuy login.php excessive authentication	Feb 7, 2026 6mo ago
CVE-2026-2090	medium	6.9/10	SourceCodester Online Class Record System search.php sql injection	Feb 7, 2026 6mo ago
CVE-2026-2089	medium	6.9/10	SourceCodester Online Class Record System controller.php sql injection	Feb 7, 2026 6mo ago
CVE-2026-2088	medium	6.9/10	PHPGurukul Beauty Parlour Management System accepted-appointment.php sql injection	Feb 7, 2026 6mo ago
CVE-2026-2087	medium	6.9/10	SourceCodester Online Class Record System login.php sql injection	Feb 7, 2026 6mo ago