Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

336,916

All time

Critical · Active

10,649

CVSS ≥ 9.0

New · 14 days

1,565

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 1621–1650 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-15196	medium	6.9/10	code-projects Assessment Management login.php sql injection	Dec 29, 2025 6mo ago
CVE-2025-15195	medium	6.9/10	code-projects Assessment Management add-module.php sql injection	Dec 29, 2025 6mo ago
CVE-2025-69200	high	7.5/10	phpMyFAQ has unauthenticated config backup download via /api/setup/backup	Dec 29, 2025 6mo ago
CVE-2025-68951	medium	5.4/10	phpMyFAQ has stored XSS in admin "List of users" via display_name HTML entity decoding (html_entity_decode) + Twig \|raw	Dec 29, 2025 6mo ago
CVE-2025-15188	medium	4.8/10	Campcodes Complete Online Beauty Parlor Management System search-invoices.php cross site scripting	Dec 29, 2025 6mo ago
CVE-2025-15187	medium	5.1/10	GreenCMS File DataController.class.php path traversal	Dec 29, 2025 6mo ago
CVE-2025-15186	medium	6.9/10	code-projects Refugee Food Management System addusers.php sql injection	Dec 29, 2025 6mo ago
CVE-2025-15185	medium	6.9/10	code-projects Refugee Food Management System refugeesreport.php sql injection	Dec 29, 2025 6mo ago
CVE-2025-15184	medium	6.9/10	code-projects Refugee Food Management System refugeesreport2.php sql injection	Dec 29, 2025 6mo ago
CVE-2025-15183	medium	6.9/10	code-projects Refugee Food Management System viewtakenfd.php sql injection	Dec 29, 2025 6mo ago
CVE-2025-15182	medium	6.9/10	code-projects Refugee Food Management System served.php sql injection	Dec 29, 2025 6mo ago
CVE-2025-15181	medium	6.9/10	code-projects Refugee Food Management System pagenateRefugeesList.php sql injection	Dec 29, 2025 6mo ago
CVE-2025-15169	medium	5.1/10	BiggiDroid Simple PHP CMS editsite.php sql injection	Dec 29, 2025 6mo ago
CVE-2025-15168	medium	6.9/10	itsourcecode Student Management System statistical.php sql injection	Dec 29, 2025 6mo ago
CVE-2025-15167	medium	6.9/10	itsourcecode Online Cake Ordering System detailtransac.php sql injection	Dec 29, 2025 6mo ago
CVE-2025-15166	medium	6.9/10	itsourcecode Online Cake Ordering System updatesupplier.php sql injection	Dec 29, 2025 6mo ago
CVE-2025-15165	medium	6.9/10	itsourcecode Online Cake Ordering System updatecustomer.php sql injection	Dec 29, 2025 6mo ago
CVE-2025-15154	medium	6.9/10	PbootCMS Header handle.php get_user_ip less trusted source	Dec 28, 2025 6mo ago
CVE-2025-15148	medium	5.1/10	CmsEasy Backend Template Management template_admin.php savetemp_action code injection	Dec 28, 2025 6mo ago
CVE-2025-15144	medium	5.3/10	dayrui XunRuiCMS JSONP Callback Init.php dr_exit_msg cross site scripting	Dec 28, 2025 6mo ago
CVE-2025-15143	medium	5.1/10	EyouCMS Backend Template Management FilemanagerLogic.php sql injection	Dec 28, 2025 6mo ago
CVE-2025-15142	medium	6.9/10	9786 phpok3w show.php sql injection	Dec 28, 2025 6mo ago
CVE-2025-15140	medium	6.9/10	saiftheboss7 onlinemcqexam quesadd.php sql injection	Dec 28, 2025 6mo ago
CVE-2025-15138	medium	5.1/10	prasathmani TinyFileManager tinyfilemanager.php path traversal	Dec 28, 2025 6mo ago
CVE-2025-15130	medium	5.1/10	shanyu SyCms Administrative Panel FileManageController.class.php addPost code injection	Dec 28, 2025 6mo ago
CVE-2025-15129	medium	5.3/10	ChenJinchuang Lin-CMS-TP5 File Upload LocalUploader.php upload code injection	Dec 28, 2025 6mo ago
CVE-2025-15127	medium	6.9/10	FantasticLBP Hotels_Server Room.php sql injection	Dec 28, 2025 6mo ago
CVE-2025-15110	medium	5.1/10	jackq XCMS Backend ProductImageController.class.php upload unrestricted upload	Dec 27, 2025 6mo ago
CVE-2025-15109	medium	6.9/10	jackq XCMS upload.php unrestricted upload	Dec 27, 2025 6mo ago
CVE-2025-15078	medium	6.9/10	itsourcecode Student Management System list_report.php sql injection	Dec 25, 2025 6mo ago