Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

336,918

All time

Critical · Active

10,649

CVSS ≥ 9.0

New · 14 days

1,564

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 1711–1740 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-53927	medium	5.1/10	PHPJabbers Simple CMS 5.0 Stored Cross-Site Scripting via Section Creation	Dec 17, 2025 6mo ago
CVE-2023-53926	high	8.7/10	PHPJabbers Simple CMS 5.0 SQL Injection via Column Parameter	Dec 17, 2025 6mo ago
CVE-2025-14833	medium	6.9/10	code-projects Online Appointment Booking System deletemanagerclinic.php sql injection	Dec 17, 2025 6mo ago
CVE-2025-68129	medium	6.8/10	Auth0-PHP SDK has Improper Audience Validation	Dec 17, 2025 6mo ago
CVE-2025-14832	medium	6.9/10	itsourcecode Online Cake Ordering System updateproduct.php sql injection	Dec 17, 2025 6mo ago
CVE-2025-68400	critical	9.3/10	ChurchCRM vulnerable to time-based blind SQL Injection in ConfirmReportEmail.php	Dec 17, 2025 6mo ago
CVE-2025-68399	low	2.0/10	ChurchCRM has Stored Cross-Site Scripting (XSS) In GroupEditor.php	Dec 17, 2025 6mo ago
CVE-2025-68112	critical	9.6/10	ChurchCRM has SQL injection in EditEventAttendees.php	Dec 17, 2025 6mo ago
CVE-2025-34288	high	8.6/10	Nagios XI Privilege Escalation via Writable PHP Include Executed with Sudo	Dec 16, 2025 6mo ago
CVE-2023-53894	critical	9.3/10	phpfm 1.7.9 Authentication Bypass via Type Juggling Vulnerability	Dec 16, 2025 6mo ago
CVE-2025-14731	medium	5.3/10	CTCMS Content Management System Frontend/Template Management CT_Parser.php special elements used in a template engine	Dec 15, 2025 6mo ago
CVE-2025-14730	medium	5.1/10	CTCMS Content Management System Backend System Configuration Ct_Config.php code injection	Dec 15, 2025 6mo ago
CVE-2025-14729	medium	5.1/10	CTCMS Content Management System Backend App Configuration Ct_App.php save code injection	Dec 15, 2025 6mo ago
CVE-2025-14722	medium	4.8/10	vion707 DMadmin Backend AddonsController.class.php add cross site scripting	Dec 15, 2025 6mo ago
CVE-2023-53883	high	8.6/10	Webedition CMS v2.9.8.8 Remote Code Execution via PHP Page Creation	Dec 15, 2025 6mo ago
CVE-2023-53872	critical	9.3/10	Wp2Fac 1.0 OS Command Injection via send.php Endpoint	Dec 15, 2025 6mo ago
CVE-2025-14711	medium	6.9/10	FantasticLBP Hotels Server hotelList.php sql injection	Dec 15, 2025 6mo ago
CVE-2025-14710	medium	6.9/10	FantasticLBP Hotels Server OrderList.php sql injection	Dec 15, 2025 6mo ago
CVE-2025-14668	medium	6.9/10	campcodes Advanced Online Examination System loginExe.php sql injection	Dec 14, 2025 6mo ago
CVE-2025-14664	medium	6.9/10	Campcodes Supplier Management System view_unit.php sql injection	Dec 14, 2025 6mo ago
CVE-2025-14663	medium	4.8/10	code-projects Student File Management System update_student.php cross site scripting	Dec 14, 2025 6mo ago
CVE-2025-14662	medium	4.8/10	code-projects Student File Management System Update User update_user.php cross site scripting	Dec 14, 2025 6mo ago
CVE-2025-14661	medium	6.9/10	itsourcecode Student Managemen System advisers.php sql injection	Dec 14, 2025 6mo ago
CVE-2025-14653	medium	6.9/10	itsourcecode Student Management System addrecord.php sql injection	Dec 14, 2025 6mo ago
CVE-2025-14652	medium	6.9/10	itsourcecode Online Cake Ordering System admindetail.php sql injection	Dec 14, 2025 6mo ago
CVE-2025-14650	medium	6.9/10	itsourcecode Online Cake Ordering System product.php sql injection	Dec 14, 2025 6mo ago
CVE-2025-14649	medium	6.9/10	itsourcecode Online Cake Ordering System supplier.php sql injection	Dec 14, 2025 6mo ago
CVE-2025-14648	medium	5.1/10	DedeBIZ catalog_add.php command injection	Dec 14, 2025 6mo ago
CVE-2025-14647	medium	6.9/10	code-projects Computer Book Store admin_delete.php sql injection	Dec 14, 2025 6mo ago
CVE-2025-14646	medium	6.9/10	code-projects Student File Management System delete_student.php sql injection	Dec 14, 2025 6mo ago