Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,369

All time

Critical · Active

12,003

CVSS ≥ 9.0

New · 14 days

2,211

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1741–1770 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-1147	medium	5.1/10	SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System api_patient_schedule.php cross site scripting	Jan 19, 2026 7mo ago
CVE-2026-1146	medium	5.1/10	SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System api_register_patient.php cross site scripting	Jan 19, 2026 7mo ago
CVE-2026-1142	medium	5.3/10	PHPGurukul News Portal cross-site request forgery	Jan 19, 2026 7mo ago
CVE-2026-1141	medium	5.3/10	PHPGurukul News Portal Add Sub-Admin add-subadmins.php improper authorization	Jan 19, 2026 7mo ago
CVE-2026-1135	medium	5.3/10	itsourcecode Society Management System activity.php cross site scripting	Jan 19, 2026 7mo ago
CVE-2026-1134	medium	5.3/10	itsourcecode Society Management System expenses.php cross site scripting	Jan 19, 2026 7mo ago
CVE-2026-1119	medium	6.9/10	itsourcecode Society Management System delete_activity.php sql injection	Jan 18, 2026 7mo ago
CVE-2026-1118	medium	5.3/10	itsourcecode Society Management System add_activity.php sql injection	Jan 18, 2026 7mo ago
CVE-2026-1107	medium	5.3/10	EyouCMS Member Avatar Diyajax.php check_userinfo unrestricted upload	Jan 18, 2026 7mo ago
CVE-2026-1106	medium	5.3/10	Chamilo LMS Legal Consent SocialController.php deleteLegal improper authorization	Jan 18, 2026 7mo ago
CVE-2026-1105	medium	6.9/10	EasyCMS UserAction.class.php sql injection	Jan 17, 2026 7mo ago
CVE-2026-1059	medium	6.9/10	FeMiner wms chkuser.php sql injection	Jan 17, 2026 7mo ago
CVE-2026-23643	medium	5.4/10	CakePHP PaginatorHelper::limitControl() vulnerable to reflected cross-site-scripting	Jan 16, 2026 7mo ago
CVE-2026-23730	medium	4.8/10	WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=ProdutoControle)	Jan 16, 2026 7mo ago
CVE-2026-23729	medium	4.8/10	WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarDescricao, nomeClasse=ProdutoControle)	Jan 16, 2026 7mo ago
CVE-2026-23728	medium	4.8/10	WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=DestinoControle)	Jan 16, 2026 7mo ago
CVE-2026-23727	medium	4.8/10	WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoSaidaControle)	Jan 16, 2026 7mo ago
CVE-2026-23726	medium	4.8/10	WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoEntradaControle)	Jan 16, 2026 7mo ago
CVE-2021-47783	medium	5.3/10	Phpwcms 1.9.30 - Arbitrary File Upload	Jan 15, 2026 7mo ago
CVE-2021-47753	critical	9.3/10	phpKF CMS 3.00 Beta y6 - Remote Code Execution (RCE) (Unauthenticated)	Jan 15, 2026 7mo ago
CVE-2025-71165	medium	4.8/10	Typesetter CMS Reflected XSS via Status.php	Jan 14, 2026 7mo ago
CVE-2025-71164	medium	4.8/10	Typesetter CMS Reflected XSS via Editing.php	Jan 14, 2026 7mo ago
CVE-2022-50894	high	7.1/10	VIAVIWEB Wallpaper Admin 1.0 SQL Injection via edit_gallery_image.php	Jan 13, 2026 7mo ago
CVE-2021-47750	medium	5.1/10	YouPHPTube <= 7.8 - Cross-Site Scripting	Jan 13, 2026 7mo ago
CVE-2021-47751	medium	5.3/10	CuteEditor for PHP 6.6 - Directory Traversal	Jan 13, 2026 7mo ago
CVE-2021-47749	high	8.7/10	YouPHPTube <= 7.8 - Directory Traversal	Jan 13, 2026 7mo ago
CVE-2026-0852	medium	6.9/10	code-projects Online Music Site AdminUpdateUser.php sql injection	Jan 12, 2026 7mo ago
CVE-2026-0851	medium	6.9/10	code-projects Online Music Site AdminAddUser.php sql injection	Jan 11, 2026 7mo ago
CVE-2026-0850	medium	5.1/10	code-projects Intern Membership Management System delete_activity.php sql injection	Jan 11, 2026 7mo ago
CVE-2025-15495	medium	5.1/10	BiggiDroid Simple PHP CMS editsite.php unrestricted upload	Jan 9, 2026 7mo ago