Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,132

All time

Critical · Active

11,967

CVSS ≥ 9.0

New · 14 days

2,669

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 151–180 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-59521	high	7.2/10	WordPress Real Testimonials plugin <= 3.1.15 - PHP Object Injection vulnerability	Jul 13, 2026 1mo ago
CVE-2026-59518	critical	9.8/10	WordPress Directorist plugin <= 8.8.2 - PHP Object Injection vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57770	critical	9.8/10	WordPress Grand Photography theme <= 5.7.8 - PHP Object Injection vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57744	critical	9.8/10	WordPress RT-Theme 18 \| Extensions plugin <= 2.5 - PHP Object Injection vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57738	critical	9.8/10	WordPress 777 theme <= 1.13.0 - PHP Object Injection vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57724	critical	9.8/10	WordPress Kirki plugin <= 6.0.12 - PHP Object Injection vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57713	high	8.8/10	WordPress Events Manager plugin <= 7.3.6 - PHP Object Injection vulnerability	Jul 13, 2026 1mo ago
CVE-2026-57371	high	8.8/10	WordPress WPJAM Basic plugin <= 7.0 - PHP Object Injection vulnerability	Jul 13, 2026 1mo ago
CVE-2026-15540	medium	5.3/10	SourceCodester Online Book Store System Administrative index.php php file inclusion	Jul 13, 2026 1mo ago
CVE-2026-15539	medium	5.1/10	SourceCodester Online Book Store System Book Image Upload Feature index.php books unrestricted upload	Jul 13, 2026 1mo ago
CVE-2026-15533	medium	5.1/10	DedeCMS Column Management search.php code injection	Jul 13, 2026 1mo ago
CVE-2026-15530	medium	6.9/10	WuzhiCMS Attachment API index.php listimage information disclosure	Jul 13, 2026 1mo ago
CVE-2026-15523	medium	5.3/10	CodeAstro Simple Online Leave Management System dashboard.php sql injection	Jul 13, 2026 1mo ago
CVE-2026-15516	medium	6.3/10	MacCMS Pro Installation Index.php step5 authorization	Jul 13, 2026 1mo ago
CVE-2026-15514	medium	6.9/10	Metasoft 美特软件 MetaCRM PHPRPC Remote Call rpc.jsp RPCService.query sql injection	Jul 12, 2026 1mo ago
CVE-2026-15502	medium	5.3/10	AojiaoZero Antaris PayPal IPN Payment ipn.php _rewardPurchase sql injection	Jul 12, 2026 1mo ago
CVE-2026-15498	medium	6.9/10	sergomanov SmartHomeAdatum Login users.php sql injection	Jul 12, 2026 1mo ago
CVE-2026-15493	medium	5.1/10	Akpali9 Attendance-Management-System absent.php cross site scripting	Jul 12, 2026 1mo ago
CVE-2026-15490	medium	6.9/10	RafyMrX TOKO-ONLINE-ROTI add.php sql injection	Jul 12, 2026 1mo ago
CVE-2026-55803	—	—	Drupal core - Critical - PHP object injection - SA-CORE-2026-005	Jul 10, 2026 1mo ago
CVE-2026-13244	—	—	Tealium iQ Tag Management - Critical - PHP object injection - SA-CONTRIB-2026-064	Jul 10, 2026 1mo ago
CVE-2026-55810	—	—	Plotly.js Graphing - Critical - PHP object injection - SA-CONTRIB-2026-050	Jul 10, 2026 1mo ago
CVE-2026-55809	—	—	Flag attendance field - Critical - PHP object injection - SA-CONTRIB-2026-049	Jul 10, 2026 1mo ago
CVE-2026-12535	—	—	Formatter Field - Critical - PHP object injection - SA-CONTRIB-2026-048	Jul 10, 2026 1mo ago
CVE-2026-39903	high	7.1/10	Simple Machines Forum Authorization Bypass via AttachmentApprove.php	Jul 10, 2026 1mo ago
CVE-2026-57994	medium	6.9/10	phpMyFAQ - Information Disclosure of Inactive FAQ Content via Public API Endpoints	Jul 10, 2026 1mo ago
CVE-2026-57961	medium	5.1/10	phpMyFAQ - Authenticated Path Traversal in PDF Export via concatenatePaths Function	Jul 10, 2026 1mo ago
CVE-2026-59856	high	8.4/10	Vim: Arbitrary Code Execution via PHP Omni-Completion	Jul 9, 2026 1mo ago
CVE-2026-58143	high	8.7/10	Cotonti Siena 0.9.26 CSRF via admin.php Config Update Endpoint	Jul 9, 2026 1mo ago
CVE-2026-60120	medium	5.1/10	Bagisto < 2.4.4 Stored XSS via CSTI in create.blade.php	Jul 9, 2026 1mo ago