Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,367

All time

Critical · Active

12,003

CVSS ≥ 9.0

New · 14 days

2,225

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1651–1680 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-2083	medium	6.9/10	code-projects Social Networking Site delete_post.php sql injection	Feb 7, 2026 6mo ago
CVE-2026-1634	medium	6.1/10	Subitem AL Slider <= 1.0.0 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']	Feb 7, 2026 6mo ago
CVE-2026-2073	medium	6.9/10	itsourcecode School Management System index.php sql injection	Feb 7, 2026 6mo ago
CVE-2026-2064	medium	5.1/10	Portabilis i-Educar User Data meusdadod.php cross site scripting	Feb 6, 2026 6mo ago
CVE-2025-69214	high	8.7/10	OpenSTAManager has a SQL Injection in ajax_select.php (componenti endpoint)	Feb 6, 2026 6mo ago
CVE-2026-2060	medium	6.9/10	code-projects Simple Blood Donor Management System editcampaignform.php sql injection	Feb 6, 2026 6mo ago
CVE-2026-2059	medium	6.9/10	SourceCodester Medical Center Portal Management System emp_edit1.php sql injection	Feb 6, 2026 6mo ago
CVE-2026-2058	medium	6.9/10	mathurvishal CloudClassroom-PHP-Project Post Query Details postquerypublic.php sql injection	Feb 6, 2026 6mo ago
CVE-2026-2057	medium	6.9/10	SourceCodester Medical Center Portal Management System login.php sql injection	Feb 6, 2026 6mo ago
CVE-2026-2018	medium	6.9/10	itsourcecode School Management System controller.php sql injection	Feb 6, 2026 6mo ago
CVE-2026-2015	medium	5.3/10	Portabilis i-Educar Final Status Import FinalStatusImportService.php improper authorization	Feb 6, 2026 6mo ago
CVE-2026-2014	medium	6.9/10	itsourcecode Student Management System index.php sql injection	Feb 6, 2026 6mo ago
CVE-2026-2013	medium	6.9/10	itsourcecode Student Management System index.php sql injection	Feb 6, 2026 6mo ago
CVE-2026-2012	medium	6.9/10	itsourcecode Student Management System index.php sql injection	Feb 6, 2026 6mo ago
CVE-2026-2011	medium	6.9/10	itsourcecode Student Management System controller.php sql injection	Feb 6, 2026 6mo ago
CVE-2026-2009	medium	5.3/10	SourceCodester Gas Agency Management System createUser.php access control	Feb 6, 2026 6mo ago
CVE-2026-2000	medium	5.1/10	DCN DCME-320 Web Management Backend bridge_cfg.php apply_config command injection	Feb 6, 2026 6mo ago
CVE-2020-37152	medium	5.1/10	PHP-Fusion 9.03.50 panels.php - Cross-Site Scripting (XSS)	Feb 5, 2026 6mo ago
CVE-2020-37137	high	8.6/10	PHP-Fusion 9.03.50 - 'panels.php' Eval Injection	Feb 5, 2026 6mo ago
CVE-2020-37151	high	8.8/10	phpMyChat Plus 1.98 'deluser.php' SQL Injection	Feb 5, 2026 6mo ago
CVE-2026-1654	medium	6.1/10	Peter's Date Countdown <= 2.0.0 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']	Feb 5, 2026 6mo ago
CVE-2026-1884	medium	5.1/10	ZenTao Webhook model.php fetchHook server-side request forgery	Feb 4, 2026 6mo ago
CVE-2025-69213	high	8.7/10	OpenSTAManager has a SQL Injection in ajax_complete.php (get_sedi endpoint)	Feb 4, 2026 6mo ago
CVE-2026-25237	critical	9.2/10	PEAR is Vulnerable to PHP Code Execution via preg_replace /e in Bug Update Emails	Feb 3, 2026 6mo ago
CVE-2020-37116	high	8.7/10	GUnet OpenEclass 1.7.3 E-learning platform - phpMyAdmin Remote Access	Feb 3, 2026 6mo ago
CVE-2020-37111	medium	5.1/10	60CycleCMS 2.5.2 - 'news.php' Cross-site Scripting (XSS) Vulnerability	Feb 3, 2026 6mo ago
CVE-2020-37110	high	8.8/10	60CycleCMS 2.5.2 - 'news.php' SQL Injection Vulnerability	Feb 3, 2026 6mo ago
CVE-2020-37108	high	7.1/10	PhpIX 2012 Professional - 'id' SQL Injection	Feb 3, 2026 6mo ago
CVE-2026-1734	medium	6.9/10	Zhong Bang CRMEB crontab Endpoint CrontabController.php authorization	Feb 1, 2026 6mo ago
CVE-2022-50940	medium	5.1/10	Knap Advanced PHP Login 3.1.3 Persistent Cross-Site Scripting via Name Parameter	Feb 1, 2026 6mo ago