Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

336,916

All time

Critical · Active

10,649

CVSS ≥ 9.0

New · 14 days

1,565

Newly disclosed

Feed last synced

7 hrs ago

Data freshness

Showing 1681–1710 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-14960	medium	6.9/10	code-projects Simple Blood Donor Management System editeddonor.php sql injection	Dec 19, 2025 6mo ago
CVE-2025-14959	medium	6.9/10	code-projects Simple Stock System signup.php sql injection	Dec 19, 2025 6mo ago
CVE-2025-14952	medium	6.9/10	Campcodes Supplier Management System add_category.php sql injection	Dec 19, 2025 6mo ago
CVE-2025-14951	medium	6.9/10	code-projects Scholars Tracking System home.php sql injection	Dec 19, 2025 6mo ago
CVE-2025-14950	medium	6.9/10	code-projects Scholars Tracking System delete_post.php sql injection	Dec 19, 2025 6mo ago
CVE-2025-14940	medium	6.9/10	code-projects Scholars Tracking System delete_user.php sql injection	Dec 19, 2025 6mo ago
CVE-2025-14939	medium	5.1/10	code-projects Online Appointment Booking System deletemanager.php sql injection	Dec 19, 2025 6mo ago
CVE-2025-14900	medium	5.1/10	CodeAstro Real Estate Management System Administrator Endpoint userdelete.php sql injection	Dec 19, 2025 6mo ago
CVE-2025-14899	medium	5.1/10	CodeAstro Real Estate Management System Administrator Endpoint stateadd.php sql injection	Dec 19, 2025 6mo ago
CVE-2025-14898	medium	5.1/10	CodeAstro Real Estate Management System Administrator Endpoint userbuilderdelete.php sql injection	Dec 18, 2025 6mo ago
CVE-2025-14897	medium	5.1/10	CodeAstro Real Estate Management System Administrator Endpoint useragentdelete.php sql injection	Dec 18, 2025 6mo ago
CVE-2025-14889	medium	5.3/10	Campcodes Advanced Voting Management System Password voters_edit.php improper authorization	Dec 18, 2025 6mo ago
CVE-2023-53944	high	7.1/10	EasyPHP Webserver 14.1 Path Traversal via Directory Traversal Sequences	Dec 18, 2025 6mo ago
CVE-2023-53941	critical	9.3/10	EasyPHP Webserver 14.1 Remote Code Execution	Dec 18, 2025 6mo ago
CVE-2023-53935	medium	5.3/10	WBiz Desk 1.2 SQL Injection Vulnerability via ticket.php Parameter	Dec 18, 2025 6mo ago
CVE-2025-14885	medium	5.3/10	SourceCodester Client Database Management System Leads Generation user_leads.php unrestricted upload	Dec 18, 2025 6mo ago
CVE-2025-14877	medium	6.9/10	Campcodes Supplier Management System add_retailer.php sql injection	Dec 18, 2025 6mo ago
CVE-2025-64266	high	8.8/10	WordPress Booking and Rental Manager plugin <= 2.5.4 - PHP Object Injection vulnerability	Dec 18, 2025 6mo ago
CVE-2025-64233	critical	9.8/10	WordPress Codiqa theme < 1.2.8 - PHP Object Injection vulnerability	Dec 18, 2025 6mo ago
CVE-2025-64227	critical	9.8/10	WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - PHP Object Injection vulnerability	Dec 18, 2025 6mo ago
CVE-2025-64206	critical	9.8/10	WordPress Jannah theme <= 7.6.0 - PHP Object Injection vulnerability	Dec 18, 2025 6mo ago
CVE-2025-60180	critical	9.8/10	WordPress WP Gravity Forms Salesforce plugin <= 1.5.1 - PHP Object Injection vulnerability	Dec 18, 2025 6mo ago
CVE-2025-60084	high	8.8/10	WordPress PDF for Elementor Forms + Drag And Drop Template Builder plugin <= 6.5.0 - PHP Object Injection vulnerability	Dec 18, 2025 6mo ago
CVE-2025-60080	high	7.5/10	WordPress PDF for Gravity Forms + Drag And Drop Template Builder plugin <= 6.5.0 - PHP Object Injection vulnerability	Dec 18, 2025 6mo ago
CVE-2025-54723	critical	9.8/10	WordPress DentiCare Theme < 1.4.3 - PHP Object Injection Vulnerability	Dec 18, 2025 6mo ago
CVE-2025-14837	medium	5.1/10	ZZCMS Backend Website Settings siteconfig.php stripfxg code injection	Dec 17, 2025 6mo ago
CVE-2025-14836	medium	5.1/10	ZZCMS User Data Storage user_save.php cleartext storage in file	Dec 17, 2025 6mo ago
CVE-2025-14834	medium	5.3/10	code-projects Simple Stock System checkuser.php sql injection	Dec 17, 2025 6mo ago
CVE-2023-53929	medium	6.2/10	phpMyFAQ 3.1.12 CSV Injection via User Profile Export	Dec 17, 2025 6mo ago
CVE-2023-53928	medium	5.1/10	PHPFusion 9.10.30 Stored Cross-Site Scripting via File Manager Upload	Dec 17, 2025 6mo ago