Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,368

All time

Critical · Active

12,003

CVSS ≥ 9.0

New · 14 days

2,217

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1681–1710 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2020-37035	high	8.8/10	e-learning Php Script 0.1.0 - 'search' SQL Injection	Jan 30, 2026 6mo ago
CVE-2026-25129	medium	6.7/10	PsySH has Local Privilege Escalation via CWD .psysh.php auto-load	Jan 30, 2026 6mo ago
CVE-2026-1702	medium	5.3/10	SourceCodester Pet Grooming Management Software User Management user.php improper authorization	Jan 30, 2026 6mo ago
CVE-2026-1701	medium	6.9/10	itsourcecode School Management System index.php sql injection	Jan 30, 2026 6mo ago
CVE-2026-1700	medium	5.1/10	projectworlds House Rental and Property Listing sms.php cross site scripting	Jan 30, 2026 6mo ago
CVE-2020-36996	medium	5.1/10	PHPFusion 9.03.50 - Persistent Cross-Site Scripting	Jan 30, 2026 6mo ago
CVE-2020-36966	medium	5.1/10	Dolibarr 11.0.3 - 'ldap.php' - Persistent Cross-Site Scripting	Jan 30, 2026 6mo ago
CVE-2026-1688	medium	6.9/10	itsourcecode Directory Management System index.php sql injection	Jan 30, 2026 6mo ago
CVE-2026-24854	high	8.8/10	Church CRM has SQL injection in PaddleNumEditor.php	Jan 30, 2026 6mo ago
CVE-2026-1595	medium	6.9/10	itsourcecode Society Management System edit_student_query.php sql injection	Jan 29, 2026 6mo ago
CVE-2025-7714	high	7.5/10	Time Based SQLi in Global Medya's PHP CMS	Jan 29, 2026 6mo ago
CVE-2025-7713	high	7.5/10	Reflected XSS in Global Medya's PHP CMS	Jan 29, 2026 6mo ago
CVE-2026-1594	medium	6.9/10	itsourcecode Society Management System add_expenses.php sql injection	Jan 29, 2026 6mo ago
CVE-2026-1593	medium	6.9/10	itsourcecode Society Management System edit_expenses_query.php sql injection	Jan 29, 2026 6mo ago
CVE-2026-1590	medium	6.9/10	itsourcecode School Management System index.php sql injection	Jan 29, 2026 6mo ago
CVE-2026-1589	medium	6.9/10	itsourcecode School Management System index.php sql injection	Jan 29, 2026 6mo ago
CVE-2026-1552	medium	5.3/10	SEMCMS SEMCMS_Info.php sql injection	Jan 29, 2026 6mo ago
CVE-2026-1551	medium	5.3/10	itsourcecode School Management System controller.php sql injection	Jan 28, 2026 6mo ago
CVE-2026-1550	medium	5.3/10	PHPGurukul Hospital Management System Admin Dashboard adminviews.py improper authorization	Jan 28, 2026 6mo ago
CVE-2026-1545	medium	6.9/10	itsourcecode School Management System index.php sql injection	Jan 28, 2026 6mo ago
CVE-2026-1535	medium	6.9/10	code-projects Online Music Site AdminReply.php sql injection	Jan 28, 2026 6mo ago
CVE-2026-1534	medium	6.9/10	code-projects Online Music Site AdminEditUser.php sql injection	Jan 28, 2026 6mo ago
CVE-2026-1533	medium	5.1/10	code-projects Online Music Site AdminAddCategory.php sql injection	Jan 28, 2026 6mo ago
CVE-2026-1391	medium	5.3/10	Vzaar Media Management <= 1.2 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']	Jan 28, 2026 6mo ago
CVE-2026-1506	high	8.6/10	D-Link DIR-615 MAC Filter Configuration adv_mac_filter.php os command injection	Jan 28, 2026 6mo ago
CVE-2026-1505	high	8.6/10	D-Link DIR-615 URL Filter set_temp_nodes.php os command injection	Jan 28, 2026 6mo ago
CVE-2026-24765	high	7.8/10	PHPUnit Vulnerable to Unsafe Deserialization in PHPT Code Coverage Handling	Jan 27, 2026 7mo ago
CVE-2020-36951	high	8.8/10	Phpscript-sgh 0.1.0 - Time Based Blind SQL Injection	Jan 27, 2026 7mo ago
CVE-2026-1448	high	8.6/10	D-Link DIR-615 Web Management wiz_policy_3_machine.php os command injection	Jan 26, 2026 7mo ago
CVE-2026-1445	medium	5.1/10	iJason-Liu Books_Manager upload_bookCover.php unrestricted upload	Jan 26, 2026 7mo ago