Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,373

All time

Critical · Active

12,004

CVSS ≥ 9.0

New · 14 days

2,196

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1861–1890 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-14509	high	7.2/10	Lucky Wheel for WooCommerce – Spin a Sale <= 1.1.13 - Authenticated (Administrator+) PHP Code Injection via Conditional Tags	Dec 30, 2025 7mo ago
CVE-2025-15244	medium	6.3/10	PHPEMS Purchase Request race condition	Dec 30, 2025 7mo ago
CVE-2025-15243	medium	6.9/10	code-projects Simple Stock System login.php sql injection	Dec 30, 2025 7mo ago
CVE-2025-15242	low	2.3/10	PHPEMS Coupon race condition	Dec 30, 2025 7mo ago
CVE-2025-15214	medium	4.8/10	Campcodes Park Ticketing System admin_class.php save_pricing cross site scripting	Dec 30, 2025 7mo ago
CVE-2025-15213	medium	5.3/10	code-projects Student File Management System File Download download.php improper authorization	Dec 30, 2025 7mo ago
CVE-2025-15212	medium	5.3/10	code-projects Refugee Food Management System regfood.php sql injection	Dec 30, 2025 7mo ago
CVE-2025-15211	medium	5.3/10	code-projects Refugee Food Management System refugee.php sql injection	Dec 30, 2025 7mo ago
CVE-2025-15210	medium	5.3/10	code-projects Refugee Food Management System editrefugee.php sql injection	Dec 29, 2025 7mo ago
CVE-2025-15209	medium	5.3/10	code-projects Refugee Food Management System editfood.php sql injection	Dec 29, 2025 7mo ago
CVE-2025-15208	medium	6.9/10	code-projects Refugee Food Management System editrefugee.php sql injection	Dec 29, 2025 7mo ago
CVE-2025-15207	medium	6.9/10	Campcodes Supplier Management System view_products.php sql injection	Dec 29, 2025 7mo ago
CVE-2025-15206	medium	6.9/10	Campcodes Supplier Management System add_area.php sql injection	Dec 29, 2025 7mo ago
CVE-2025-15205	medium	5.3/10	code-projects Student File Management System download.php sql injection	Dec 29, 2025 7mo ago
CVE-2025-15199	medium	5.3/10	code-projects College Notes Uploading System userprofile.php unrestricted upload	Dec 29, 2025 7mo ago
CVE-2025-15198	medium	6.9/10	code-projects College Notes Uploading System login.php sql injection	Dec 29, 2025 7mo ago
CVE-2025-15197	medium	5.1/10	code-projects/anirbandutta9 Content Management System/News-Buzz editposts.php unrestricted upload	Dec 29, 2025 7mo ago
CVE-2025-15196	medium	6.9/10	code-projects Assessment Management login.php sql injection	Dec 29, 2025 7mo ago
CVE-2025-15195	medium	6.9/10	code-projects Assessment Management add-module.php sql injection	Dec 29, 2025 7mo ago
CVE-2025-69200	high	7.5/10	phpMyFAQ has unauthenticated config backup download via /api/setup/backup	Dec 29, 2025 7mo ago
CVE-2025-68951	medium	5.4/10	phpMyFAQ has stored XSS in admin "List of users" via display_name HTML entity decoding (html_entity_decode) + Twig \|raw	Dec 29, 2025 7mo ago
CVE-2025-15188	medium	4.8/10	Campcodes Complete Online Beauty Parlor Management System search-invoices.php cross site scripting	Dec 29, 2025 7mo ago
CVE-2025-15187	medium	5.1/10	GreenCMS File DataController.class.php path traversal	Dec 29, 2025 7mo ago
CVE-2025-15186	medium	6.9/10	code-projects Refugee Food Management System addusers.php sql injection	Dec 29, 2025 7mo ago
CVE-2025-15185	medium	6.9/10	code-projects Refugee Food Management System refugeesreport.php sql injection	Dec 29, 2025 7mo ago
CVE-2025-15184	medium	6.9/10	code-projects Refugee Food Management System refugeesreport2.php sql injection	Dec 29, 2025 7mo ago
CVE-2025-15183	medium	6.9/10	code-projects Refugee Food Management System viewtakenfd.php sql injection	Dec 29, 2025 7mo ago
CVE-2025-15182	medium	6.9/10	code-projects Refugee Food Management System served.php sql injection	Dec 29, 2025 7mo ago
CVE-2025-15181	medium	6.9/10	code-projects Refugee Food Management System pagenateRefugeesList.php sql injection	Dec 29, 2025 7mo ago
CVE-2025-15169	medium	5.1/10	BiggiDroid Simple PHP CMS editsite.php sql injection	Dec 29, 2025 8mo ago