Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

336,924

All time

Critical · Active

10,649

CVSS ≥ 9.0

New · 14 days

1,570

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1831–1860 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-14210	medium	6.9/10	projectworlds Advanced Library Management System delete_member.php sql injection	Dec 8, 2025 6mo ago
CVE-2025-14209	medium	6.9/10	Campcodes School File Management System update_query.php sql injection	Dec 8, 2025 6mo ago
CVE-2025-14207	medium	6.9/10	tushar-2223 Hotel-Management-System invoiceprint.php sql injection	Dec 8, 2025 6mo ago
CVE-2025-14206	medium	6.9/10	SourceCodester Online Student Clearance System Fee Table delete-fee.php improper authorization	Dec 8, 2025 6mo ago
CVE-2025-14205	medium	4.8/10	code-projects Chamber of Commerce Membership Management System Your Info membership_profile.php cross site scripting	Dec 7, 2025 6mo ago
CVE-2025-14203	medium	5.3/10	code-projects Question Paper Generator selectquestionuser.php sql injection	Dec 7, 2025 6mo ago
CVE-2025-14201	medium	4.8/10	alokjaiswal Hotel-Management-services-using-MYSQL-and-php dishsub.php cross site scripting	Dec 7, 2025 6mo ago
CVE-2025-14200	medium	5.1/10	alokjaiswal Hotel-Management-services-using-MYSQL-and-php Request Pending usersub.php cross site scripting	Dec 7, 2025 6mo ago
CVE-2025-14195	medium	5.3/10	code-projects Employee Profile Management System add_file_query.php unrestricted upload	Dec 7, 2025 6mo ago
CVE-2025-14194	medium	5.1/10	code-projects Employee Profile Management System view_personnel.php cross site scripting	Dec 7, 2025 6mo ago
CVE-2025-14193	medium	5.3/10	code-projects Employee Profile Management System view_personnel.php sql injection	Dec 7, 2025 6mo ago
CVE-2025-14192	medium	6.9/10	RashminDungrani online-banking auth_login.php sql injection	Dec 7, 2025 6mo ago
CVE-2025-14189	medium	6.9/10	Chanjet CRM jxf_dump_table_demo.php sql injection	Dec 7, 2025 6mo ago
CVE-2025-13626	medium	6.1/10	myLCO <= 0.8.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']	Dec 6, 2025 7mo ago
CVE-2025-14091	medium	6.9/10	TrippWasTaken PHP-Guitar-Shop Product Details product.php sql injection	Dec 5, 2025 7mo ago
CVE-2025-14090	medium	5.1/10	AMTT Hotel Broadband Operation System cardmake_down.php sql injection	Dec 5, 2025 7mo ago
CVE-2025-13515	medium	6.1/10	Nouri.sh Newsletter <= 1.0.1.3 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']	Dec 5, 2025 7mo ago
CVE-2025-13623	medium	6.1/10	Twitscription <= 0.1.1 - Reflected Cross-Site Scripting via admin.php PATH_INFO	Dec 5, 2025 7mo ago
CVE-2025-13622	medium	6.1/10	Jabbernotification <= 0.99-RC2 - Reflected Cross-Site Scripting via admin.php PATH_INFO	Dec 5, 2025 7mo ago
CVE-2025-13625	medium	6.1/10	WP-SOS-Donate Donation Sidebar Plugin <= 0.9.2 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']	Dec 5, 2025 7mo ago
CVE-2025-13512	medium	6.1/10	CoSign Single Signon <= 0.3.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']	Dec 5, 2025 7mo ago
CVE-2025-66571	critical	9.3/10	UNA CMS 9.0.0-RC1 - 14.0.0-RC4 PHP Object Injection	Dec 4, 2025 7mo ago
CVE-2024-58276	high	8.7/10	Obi08-Enrollment System 1.0 login.php SQL Injection	Dec 4, 2025 7mo ago
CVE-2025-14008	medium	5.1/10	dayrui XunRuiCMS Project Domain Change Test admin79f2ec220c7e.php server-side request forgery	Dec 4, 2025 7mo ago
CVE-2025-14007	low	2.0/10	dayrui XunRuiCMS Domain Name Binding admin79f2ec220c7e.php cross site scripting	Dec 4, 2025 7mo ago
CVE-2025-14006	medium	5.1/10	dayrui XunRuiCMS Add Data Validation admind45f74adbd95.php cross site scripting	Dec 4, 2025 7mo ago
CVE-2025-14005	medium	4.8/10	dayrui XunRuiCMS Add Display Name Field admind45f74adbd95.php cross site scripting	Dec 4, 2025 7mo ago
CVE-2025-14004	medium	5.1/10	dayrui XunRuiCMS Email Setting admind45f74adbd95.php server-side request forgery	Dec 4, 2025 7mo ago
CVE-2025-13513	medium	6.1/10	Clik stats <= 0.8 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']	Dec 4, 2025 7mo ago
CVE-2025-13795	medium	4.8/10	codingWithElias School Management System Edit Student Info student-view.php cross site scripting	Nov 30, 2025 7mo ago