Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,370

All time

Critical · Active

12,004

CVSS ≥ 9.0

New · 14 days

2,212

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1801–1830 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-0592	medium	6.9/10	code-projects Online Product Reservation System User Registration register_code.php sql injection	Jan 5, 2026 7mo ago
CVE-2026-0591	medium	5.3/10	code-projects Online Product Reservation System Cart Update update.php sql injection	Jan 5, 2026 7mo ago
CVE-2026-0590	medium	5.3/10	code-projects Online Product Reservation System POST Parameter delete.php sql injection	Jan 5, 2026 7mo ago
CVE-2026-0588	medium	5.1/10	Xinhu Rainrock RockOA API rockfun.php cross site scripting	Jan 5, 2026 7mo ago
CVE-2026-0587	medium	5.1/10	Xinhu Rainrock RockOA Cover Image rock_page_gong.php cross site scripting	Jan 5, 2026 7mo ago
CVE-2026-0586	medium	5.3/10	code-projects Online Product Reservation System prod.php cross site scripting	Jan 5, 2026 7mo ago
CVE-2025-31047	high	8.8/10	WordPress Themify Edmin theme <= 2.0.0 - PHP Object Injection Vulnerability	Jan 5, 2026 7mo ago
CVE-2026-0585	medium	6.9/10	code-projects Online Product Reservation System GET Parameter order_view.php sql injection	Jan 5, 2026 7mo ago
CVE-2026-0584	medium	5.3/10	code-projects Online Product Reservation System left_cart.php sql injection	Jan 5, 2026 7mo ago
CVE-2026-0583	medium	6.9/10	code-projects Online Product Reservation System User Login login.php sql injection	Jan 5, 2026 7mo ago
CVE-2026-0582	medium	5.3/10	itsourcecode Society Management System edit_activity_query.php sql injection	Jan 5, 2026 7mo ago
CVE-2025-15458	medium	6.9/10	bg5sbk MiniCMS Article post-edit.php improper authentication	Jan 5, 2026 7mo ago
CVE-2025-15457	medium	6.9/10	bg5sbk MiniCMS Trash File Restore post.php improper authentication	Jan 5, 2026 7mo ago
CVE-2025-15456	medium	6.9/10	bg5sbk MiniCMS Publish page-edit.php improper authentication	Jan 5, 2026 7mo ago
CVE-2025-15455	medium	6.9/10	bg5sbk MiniCMS File Recovery Request page.php delete_page improper authentication	Jan 5, 2026 7mo ago
CVE-2026-0579	medium	6.9/10	code-projects Online Product Reservation System POST Parameter edit.php sql injection	Jan 4, 2026 7mo ago
CVE-2026-0578	medium	6.9/10	code-projects Online Product Reservation System delete.php sql injection	Jan 4, 2026 7mo ago
CVE-2026-0577	medium	5.3/10	code-projects Online Product Reservation System prod.php unrestricted upload	Jan 4, 2026 7mo ago
CVE-2026-0576	medium	6.9/10	code-projects Online Product Reservation System Parameter prod.php sql injection	Jan 4, 2026 7mo ago
CVE-2026-0575	medium	6.9/10	code-projects Online Product Reservation System Administrator Login adminlogin.php sql injection	Jan 4, 2026 7mo ago
CVE-2026-0570	medium	6.9/10	code-projects Online Music Site Feedback.php sql injection	Jan 2, 2026 7mo ago
CVE-2026-0569	medium	6.9/10	code-projects Online Music Site AlbumByCategory.php sql injection	Jan 2, 2026 7mo ago
CVE-2026-0568	medium	6.9/10	code-projects Online Music Site ViewSongs.php sql injection	Jan 2, 2026 7mo ago
CVE-2026-0567	medium	6.9/10	code-projects Content Management System pages.php sql injection	Jan 2, 2026 7mo ago
CVE-2026-0566	medium	5.1/10	code-projects Content Management System edit_posts.php unrestricted upload	Jan 2, 2026 7mo ago
CVE-2025-15438	medium	5.1/10	PluXml Media Management medias.php __destruct deserialization	Jan 2, 2026 7mo ago
CVE-2026-0565	medium	6.9/10	code-projects Content Management System delete.php sql injection	Jan 2, 2026 7mo ago
CVE-2026-0547	medium	5.3/10	PHPGurukul Online Course Registration Student Registration edit-student-profile.php unrestricted upload	Jan 2, 2026 7mo ago
CVE-2026-0546	medium	6.9/10	code-projects Content Management System search.php sql injection	Jan 2, 2026 7mo ago
CVE-2025-15426	medium	6.9/10	jackying H-ui.admin preview.php unrestricted upload	Jan 2, 2026 7mo ago