Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

336,921

All time

Critical · Active

10,649

CVSS ≥ 9.0

New · 14 days

1,567

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1801–1830 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-41748	high	7.1/10	Reflected XSS vulnerability in pxc_Dot1xCfg.php	Dec 9, 2025 6mo ago
CVE-2025-41749	high	7.1/10	Reflected XSS vulnerability in port_util.php	Dec 9, 2025 6mo ago
CVE-2025-41750	high	7.1/10	Reflected XSS vulnerability in pxc_PortCfg.php	Dec 9, 2025 6mo ago
CVE-2025-41751	high	7.1/10	Reflected XSS vulnerability in pxc_portCntr.php	Dec 9, 2025 6mo ago
CVE-2025-41752	high	7.1/10	Reflected XSS vulnerability in pxc_portSfp.php	Dec 9, 2025 6mo ago
CVE-2025-14285	medium	6.9/10	code-projects Employee Profile Management System edit_personnel.php sql injection	Dec 9, 2025 6mo ago
CVE-2025-14276	medium	6.3/10	Ilevia EVE X1 Server leaf_search.php command injection	Dec 8, 2025 6mo ago
CVE-2025-14258	medium	6.9/10	itsourcecode Student Management System newsubject.php sql injection	Dec 8, 2025 6mo ago
CVE-2025-14257	medium	6.9/10	itsourcecode Student Management System newrecord.php sql injection	Dec 8, 2025 6mo ago
CVE-2025-14256	medium	6.9/10	itsourcecode Student Management System newcurriculm.php sql injection	Dec 8, 2025 6mo ago
CVE-2025-14250	medium	6.9/10	code-projects Online Ordering System user_contact.php sql injection	Dec 8, 2025 6mo ago
CVE-2025-14249	medium	6.9/10	code-projects Online Ordering System user_school.php sql injection	Dec 8, 2025 6mo ago
CVE-2025-14248	medium	6.9/10	code-projects Simple Shopping Cart adminlogin.php sql injection	Dec 8, 2025 6mo ago
CVE-2025-14247	medium	5.3/10	code-projects Simple Shopping Cart additems.php sql injection	Dec 8, 2025 6mo ago
CVE-2025-14246	medium	5.3/10	code-projects Simple Shopping Cart settings.php sql injection	Dec 8, 2025 6mo ago
CVE-2025-14245	medium	6.9/10	IdeaCMS Coupon.php whereRaw sql injection	Dec 8, 2025 6mo ago
CVE-2025-14244	medium	4.8/10	GreenCMS Menu Management CustomController.class.php cross site scripting	Dec 8, 2025 6mo ago
CVE-2025-14230	medium	5.3/10	code-projects Daily Time Recording System add_payroll.php sql injection	Dec 8, 2025 6mo ago
CVE-2025-14227	medium	5.3/10	Philipinho Simple-PHP-Blog edit.php sql injection	Dec 8, 2025 6mo ago
CVE-2025-14226	medium	6.9/10	itsourcecode Student Management System edit_user.php sql injection	Dec 8, 2025 6mo ago
CVE-2025-14223	medium	6.9/10	code-projects Simple Leave Manager request.php sql injection	Dec 8, 2025 6mo ago
CVE-2025-14222	medium	5.3/10	code-projects Employee Profile Management System print_personnel_report.php sql injection	Dec 8, 2025 6mo ago
CVE-2025-14219	medium	5.1/10	Campcodes Retro Basketball Shoes Online Store admin_running.php unrestricted upload	Dec 8, 2025 6mo ago
CVE-2025-14218	medium	6.9/10	code-projects Currency Exchange System editotheraccount.php sql injection	Dec 8, 2025 6mo ago
CVE-2025-14217	medium	6.9/10	code-projects Currency Exchange System edittrns.php sql injection	Dec 8, 2025 6mo ago
CVE-2025-14216	medium	6.9/10	code-projects Currency Exchange System viewserial.php sql injection	Dec 8, 2025 6mo ago
CVE-2025-14215	medium	6.9/10	code-projects Currency Exchange System edit.php sql injection	Dec 8, 2025 6mo ago
CVE-2025-14214	medium	5.3/10	itsourcecode Student Information System section_edit1.php sql injection	Dec 8, 2025 6mo ago
CVE-2025-14212	medium	6.9/10	projectworlds Advanced Library Management System member_search.php sql injection	Dec 8, 2025 6mo ago
CVE-2025-14211	medium	6.9/10	projectworlds Advanced Library Management System delete_book.php sql injection	Dec 8, 2025 6mo ago