Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

336,921

All time

Critical · Active

10,649

CVSS ≥ 9.0

New · 14 days

1,567

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1771–1800 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-14137	medium	6.1/10	Simple AL Slider <= 1.2.10 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']	Dec 12, 2025 6mo ago
CVE-2025-14132	medium	6.1/10	Category Dropdown List <= 1.0 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']	Dec 12, 2025 6mo ago
CVE-2025-13988	medium	6.1/10	评论小秘书 <= 1.3.2 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']	Dec 12, 2025 6mo ago
CVE-2025-14044	high	8.1/10	Visitor Logic Lite <= 1.0.3 - Unauthenticated PHP Object Injection via 'lpblocks' Cookie	Dec 12, 2025 6mo ago
CVE-2025-14129	medium	6.1/10	Like DisLike Voting <= 1.0.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']	Dec 12, 2025 6mo ago
CVE-2025-14125	medium	6.1/10	Complag <= 1.0.2 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']	Dec 12, 2025 6mo ago
CVE-2024-58312	high	8.7/10	xbtitFM 4.1.18 Unauthenticated Path Traversal in nfogen.php	Dec 11, 2025 6mo ago
CVE-2024-58309	high	8.7/10	xbtitFM 4.1.18 Unauthenticated SQL Injection in shoutedit.php	Dec 11, 2025 6mo ago
CVE-2024-58296	medium	5.3/10	CE Phoenix v3.0.1 Stored Cross-Site Scripting via admin/currencies.php	Dec 11, 2025 6mo ago
CVE-2025-14537	medium	6.9/10	code-projects Class and Exam Timetable Management preview7.php sql injection	Dec 11, 2025 6mo ago
CVE-2025-14536	medium	6.9/10	code-projects Class and Exam Timetable Management Login index.php sql injection	Dec 11, 2025 6mo ago
CVE-2025-14530	medium	5.1/10	SourceCodester Real Estate Property Listing App property.php unrestricted upload	Dec 11, 2025 6mo ago
CVE-2025-14529	medium	6.9/10	Campcodes Retro Basketball Shoes Online Store admin_running.php sql injection	Dec 11, 2025 6mo ago
CVE-2025-14528	medium	6.9/10	D-Link DIR-803 Configuration getcfg.php information disclosure	Dec 11, 2025 6mo ago
CVE-2025-14527	medium	6.9/10	projectworlds Advanced Library Management System view_book.php sql injection	Dec 11, 2025 6mo ago
CVE-2025-14522	medium	5.3/10	baowzh hfly upload_json.php unrestricted upload	Dec 11, 2025 6mo ago
CVE-2025-14515	medium	6.9/10	Campcodes Supplier Management System add_unit.php sql injection	Dec 11, 2025 6mo ago
CVE-2025-14514	medium	6.9/10	Campcodes Supplier Management System add_distributor.php sql injection	Dec 11, 2025 6mo ago
CVE-2021-47704	high	8.7/10	OpenBMCS SQL Injection via obix_test.php	Dec 9, 2025 6mo ago
CVE-2021-47703	medium	6.9/10	OpenBMCS Server Side Request Forgery (SSRF) via /php/query.php	Dec 9, 2025 6mo ago
CVE-2021-47702	medium	5.3/10	OpenBMCS Cross Site Request Forgery (CSRF) via sendFeedback.php	Dec 9, 2025 6mo ago
CVE-2025-14337	medium	6.9/10	itsourcecode Student Management System new_grade.php sql injection	Dec 9, 2025 6mo ago
CVE-2025-14336	medium	6.9/10	itsourcecode Student Management System promote.php sql injection	Dec 9, 2025 6mo ago
CVE-2025-14335	medium	6.9/10	itsourcecode Student Management System new_school_year.php sql injection	Dec 9, 2025 6mo ago
CVE-2025-14334	medium	6.9/10	itsourcecode Student Management System new_adviser.php sql injection	Dec 9, 2025 6mo ago
CVE-2025-67535	medium	6.6/10	WordPress WP Maps plugin <= 4.8.6 - PHP Object Injection vulnerability	Dec 9, 2025 6mo ago
CVE-2025-41695	high	7.1/10	Reflected XSS vulnerability in dyn_conn.php	Dec 9, 2025 6mo ago
CVE-2025-41745	high	7.1/10	Reflected XSS vulnerability in pxc_portCntr2.php	Dec 9, 2025 6mo ago
CVE-2025-41746	high	7.1/10	Reflected XSS vulnerability in pxc_portSecCfg.php	Dec 9, 2025 6mo ago
CVE-2025-41747	high	7.1/10	Reflected XSS vulnerability in pxc_vlanIntfCfg.php	Dec 9, 2025 6mo ago