Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,373

All time

Critical · Active

12,004

CVSS ≥ 9.0

New · 14 days

2,196

Newly disclosed

Feed last synced

32 mins ago

Data freshness

Showing 1831–1860 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-15423	medium	5.3/10	EmpireSoft EmpireCMS connect.php CheckSaveTranFiletype unrestricted upload	Jan 2, 2026 7mo ago
CVE-2025-15422	medium	6.9/10	EmpireSoft EmpireCMS IP Address connect.php egetip protection mechanism	Jan 2, 2026 7mo ago
CVE-2025-15410	medium	6.9/10	code-projects Online Guitar Store login.php sql injection	Jan 1, 2026 7mo ago
CVE-2025-15409	medium	6.9/10	code-projects Online Guitar Store Delete_product.php sql injection	Jan 1, 2026 7mo ago
CVE-2025-15408	medium	6.9/10	code-projects Online Guitar Store Create_product.php sql injection	Jan 1, 2026 7mo ago
CVE-2025-15407	medium	6.9/10	code-projects Online Guitar Store Create_category.php sql injection	Jan 1, 2026 7mo ago
CVE-2025-15406	medium	5.3/10	PHPGurukul Online Course Registration authorization	Jan 1, 2026 7mo ago
CVE-2025-15405	medium	5.3/10	PHPEMS cross-site request forgery	Jan 1, 2026 7mo ago
CVE-2025-15404	medium	5.3/10	campcodes School File Management System save_file.php unrestricted upload	Jan 1, 2026 7mo ago
CVE-2026-0544	medium	6.9/10	itsourcecode School Management System index.php sql injection	Jan 1, 2026 7mo ago
CVE-2025-15398	medium	6.3/10	Uasoft badaso Token BadasoAuthController.php forgetPassword password recovery	Dec 31, 2025 7mo ago
CVE-2025-15394	medium	5.1/10	iCMS POST Parameter ConfigAdmincp.php save code injection	Dec 31, 2025 7mo ago
CVE-2025-15393	medium	5.3/10	Kohana KodiCMS Layout API Endpoint file.php save code injection	Dec 31, 2025 7mo ago
CVE-2025-15392	medium	5.3/10	Kohana KodiCMS Search API Endpoint page.php like sql injection	Dec 31, 2025 7mo ago
CVE-2019-25262	medium	5.1/10	elinicksic Razgover Chat Message send.php cross site scripting	Dec 31, 2025 7mo ago
CVE-2025-15390	medium	5.3/10	PHPGurukul Small CRM edit-user.php authorization	Dec 31, 2025 7mo ago
CVE-2025-15375	medium	5.3/10	EyouCMS arcpagelist Ajax.php unserialize deserialization	Dec 31, 2025 7mo ago
CVE-2025-15374	medium	5.1/10	EyouCMS Ask Module Ask.php cross site scripting	Dec 31, 2025 7mo ago
CVE-2025-15373	medium	5.3/10	EyouCMS function.php saveRemote server-side request forgery	Dec 31, 2025 7mo ago
CVE-2025-15223	medium	5.3/10	Philipinho Simple-PHP-Blog login.php cross site scripting	Dec 31, 2025 7mo ago
CVE-2022-50795	high	8.5/10	SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via traceroute.php	Dec 30, 2025 7mo ago
CVE-2022-50793	high	8.7/10	SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Authenticated Command Injection via www-data-handler.php	Dec 30, 2025 7mo ago
CVE-2022-50791	high	8.5/10	SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via ping.php	Dec 30, 2025 7mo ago
CVE-2022-50789	high	8.5/10	SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via dns.php	Dec 30, 2025 7mo ago
CVE-2025-15354	medium	6.9/10	itsourcecode Society Management System add_admin.php sql injection	Dec 30, 2025 7mo ago
CVE-2025-15353	medium	6.9/10	itsourcecode Society Management System edit_admin_query.php edit_admin_query sql injection	Dec 30, 2025 7mo ago
CVE-2025-15264	medium	6.9/10	FeehiCMS TimThumb timthumb.php server-side request forgery	Dec 30, 2025 7mo ago
CVE-2025-15263	medium	6.9/10	BiggiDroid Simple PHP CMS Admin Login login.php sql injection	Dec 30, 2025 7mo ago
CVE-2025-15262	medium	5.1/10	BiggiDroid Simple PHP CMS Site Logo edit.php unrestricted upload	Dec 30, 2025 7mo ago
CVE-2025-15250	medium	5.1/10	08CMS Novel System Template mtpls.inc.php code injection	Dec 30, 2025 7mo ago