Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,373

All time

Critical · Active

12,004

CVSS ≥ 9.0

New · 14 days

2,195

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1891–1920 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-15168	medium	6.9/10	itsourcecode Student Management System statistical.php sql injection	Dec 29, 2025 8mo ago
CVE-2025-15167	medium	6.9/10	itsourcecode Online Cake Ordering System detailtransac.php sql injection	Dec 29, 2025 8mo ago
CVE-2025-15166	medium	6.9/10	itsourcecode Online Cake Ordering System updatesupplier.php sql injection	Dec 29, 2025 8mo ago
CVE-2025-15165	medium	6.9/10	itsourcecode Online Cake Ordering System updatecustomer.php sql injection	Dec 29, 2025 8mo ago
CVE-2025-15154	medium	6.9/10	PbootCMS Header handle.php get_user_ip less trusted source	Dec 28, 2025 8mo ago
CVE-2025-15148	medium	5.1/10	CmsEasy Backend Template Management template_admin.php savetemp_action code injection	Dec 28, 2025 8mo ago
CVE-2025-15144	medium	5.3/10	dayrui XunRuiCMS JSONP Callback Init.php dr_exit_msg cross site scripting	Dec 28, 2025 8mo ago
CVE-2025-15143	medium	5.1/10	EyouCMS Backend Template Management FilemanagerLogic.php sql injection	Dec 28, 2025 8mo ago
CVE-2025-15142	medium	6.9/10	9786 phpok3w show.php sql injection	Dec 28, 2025 8mo ago
CVE-2025-15140	medium	6.9/10	saiftheboss7 onlinemcqexam quesadd.php sql injection	Dec 28, 2025 8mo ago
CVE-2025-15138	medium	5.1/10	prasathmani TinyFileManager tinyfilemanager.php path traversal	Dec 28, 2025 8mo ago
CVE-2025-15130	medium	5.1/10	shanyu SyCms Administrative Panel FileManageController.class.php addPost code injection	Dec 28, 2025 8mo ago
CVE-2025-15129	medium	5.3/10	ChenJinchuang Lin-CMS-TP5 File Upload LocalUploader.php upload code injection	Dec 28, 2025 8mo ago
CVE-2025-15127	medium	6.9/10	FantasticLBP Hotels_Server Room.php sql injection	Dec 28, 2025 8mo ago
CVE-2025-15110	medium	5.1/10	jackq XCMS Backend ProductImageController.class.php upload unrestricted upload	Dec 27, 2025 8mo ago
CVE-2025-15109	medium	6.9/10	jackq XCMS upload.php unrestricted upload	Dec 27, 2025 8mo ago
CVE-2025-15078	medium	6.9/10	itsourcecode Student Management System list_report.php sql injection	Dec 25, 2025 8mo ago
CVE-2025-15077	medium	6.9/10	itsourcecode Student Management System form137.php sql injection	Dec 25, 2025 8mo ago
CVE-2025-15075	medium	6.9/10	itsourcecode Student Management System student_p.php sql injection	Dec 25, 2025 8mo ago
CVE-2025-15074	medium	6.9/10	itsourcecode Online Frozen Foods Ordering System customer_details.php sql injection	Dec 25, 2025 8mo ago
CVE-2025-15073	medium	6.9/10	itsourcecode Online Frozen Foods Ordering System contact_us.php sql injection	Dec 24, 2025 8mo ago
CVE-2025-68038	high	7.2/10	WordPress Icegram Express Pro plugin < 5.9.14 - PHP Object Injection vulnerability	Dec 24, 2025 8mo ago
CVE-2025-15053	medium	6.9/10	code-projects Student Information System searchresults.php sql injection	Dec 24, 2025 8mo ago
CVE-2025-15052	medium	5.1/10	code-projects Student Information System profile.php cross site scripting	Dec 24, 2025 8mo ago
CVE-2025-15050	medium	5.3/10	code-projects Student File Management System save_file.php unrestricted upload	Dec 24, 2025 8mo ago
CVE-2025-15049	medium	6.9/10	code-projects Online Farm System addProduct.php sql injection	Dec 23, 2025 8mo ago
CVE-2025-13698	medium	4.5/10	Deciso OPNsense diag_backup.php filename Directory Traversal Arbitrary File Creation Vulnerability	Dec 23, 2025 8mo ago
CVE-2025-15034	medium	6.9/10	itsourcecode Student Management System record.php sql injection	Dec 23, 2025 8mo ago
CVE-2025-15014	medium	5.3/10	loganhong php loganSite Article article_detail.php sql injection	Dec 22, 2025 8mo ago
CVE-2025-15012	medium	6.9/10	code-projects Refugee Food Management System home.php sql injection	Dec 22, 2025 8mo ago