Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

336,919

All time

Critical · Active

10,649

CVSS ≥ 9.0

New · 14 days

1,565

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1741–1770 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-14645	medium	6.9/10	code-projects Student File Management System delete_user.php sql injection	Dec 14, 2025 6mo ago
CVE-2025-14644	medium	6.9/10	itsourcecode Student Management System update_subject.php sql injection	Dec 14, 2025 6mo ago
CVE-2025-14643	medium	6.9/10	code-projects Simple Attendance Record System check.php sql injection	Dec 14, 2025 6mo ago
CVE-2025-14642	medium	5.1/10	code-projects Computer Laboratory System technical_staff_pic.php unrestricted upload	Dec 14, 2025 6mo ago
CVE-2025-14641	medium	5.1/10	code-projects Computer Laboratory System admin_pic.php unrestricted upload	Dec 14, 2025 6mo ago
CVE-2025-14640	medium	6.9/10	code-projects Student File Management System save_student.php sql injection	Dec 14, 2025 6mo ago
CVE-2025-14639	medium	6.9/10	itsourcecode Student Management System uprec.php sql injection	Dec 14, 2025 6mo ago
CVE-2025-14638	medium	6.9/10	itsourcecode Online Pet Shop Management System update_cnp.php sql injection	Dec 14, 2025 6mo ago
CVE-2025-14637	medium	6.9/10	itsourcecode Online Pet Shop Management System addcnp.php sql injection	Dec 13, 2025 6mo ago
CVE-2025-14623	medium	6.9/10	code-projects Student File Management System update_student.php sql injection	Dec 13, 2025 6mo ago
CVE-2025-14622	medium	6.9/10	code-projects Student File Management System save_user.php sql injection	Dec 13, 2025 6mo ago
CVE-2025-14621	medium	6.9/10	code-projects Student File Management System update_user.php sql injection	Dec 13, 2025 6mo ago
CVE-2025-14620	medium	6.9/10	code-projects Student File Management System login_query.php sql injection	Dec 13, 2025 6mo ago
CVE-2025-14619	medium	6.9/10	code-projects Student File Management System login_query.php sql injection	Dec 13, 2025 6mo ago
CVE-2025-14590	medium	6.9/10	code-projects Prison Management System search1.php sql injection	Dec 13, 2025 6mo ago
CVE-2025-14589	medium	5.3/10	code-projects Prison Management System search.php sql injection	Dec 13, 2025 6mo ago
CVE-2025-14588	medium	6.9/10	itsourcecode Student Management System update_program.php sql injection	Dec 13, 2025 6mo ago
CVE-2025-14587	medium	6.9/10	itsourcecode Online Pet Shop Management System available.php sql injection	Dec 13, 2025 6mo ago
CVE-2025-14476	high	8.8/10	Doubly <= 1.0.46 - Authenticated (Subscriber+) PHP Object Injection via ZIP File Import	Dec 13, 2025 6mo ago
CVE-2025-14584	medium	6.9/10	itsourcecode COVID Tracking System Admin Login login.php sql injection	Dec 12, 2025 6mo ago
CVE-2025-14583	medium	6.9/10	campcodes Online Student Enrollment System register.php unrestricted upload	Dec 12, 2025 6mo ago
CVE-2025-14582	medium	5.1/10	campcodes Online Student Enrollment System index.php unrestricted upload	Dec 12, 2025 6mo ago
CVE-2025-14580	medium	5.1/10	Qualitor viewDocumento.php cross site scripting	Dec 12, 2025 6mo ago
CVE-2025-14578	medium	6.9/10	itsourcecode Student Management System update_account.php sql injection	Dec 12, 2025 6mo ago
CVE-2025-14571	medium	6.9/10	projectworlds Advanced Library Management System borrow_book.php sql injection	Dec 12, 2025 6mo ago
CVE-2025-14570	medium	6.9/10	projectworlds Advanced Library Management System view_admin.php sql injection	Dec 12, 2025 6mo ago
CVE-2025-14568	medium	5.3/10	haxxorsid Stock-Management-System User.php sql injection	Dec 12, 2025 6mo ago
CVE-2025-14566	medium	6.9/10	kidaze CourseSelectionSystem reg.php sql injection	Dec 12, 2025 6mo ago
CVE-2025-14565	medium	6.9/10	kidaze CourseSelectionSystem login1.php sql injection	Dec 12, 2025 6mo ago
CVE-2025-14138	medium	6.1/10	WPLG Default Mail From <= 1.0.0 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']	Dec 12, 2025 6mo ago