Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,376

All time

Critical · Active

12,004

CVSS ≥ 9.0

New · 14 days

2,197

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1921–1950 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-15011	medium	6.9/10	code-projects Simple Stock System logout.php sql injection	Dec 22, 2025 8mo ago
CVE-2025-15005	medium	6.3/10	CouchCMS reCAPTCHA config.example.php hard-coded key	Dec 22, 2025 8mo ago
CVE-2025-15004	medium	5.3/10	DedeCMS freelist_main.php sql injection	Dec 22, 2025 8mo ago
CVE-2025-15003	medium	5.1/10	SeaCMS admin_video.php sql injection	Dec 21, 2025 8mo ago
CVE-2025-15002	medium	6.9/10	SeaCMS mysqli.class.php sql injection	Dec 21, 2025 8mo ago
CVE-2025-14991	medium	4.8/10	Campcodes Complete Online Beauty Parlor Management System bwdates-reports-details.php cross site scripting	Dec 21, 2025 8mo ago
CVE-2025-14990	medium	6.9/10	Campcodes Complete Online Beauty Parlor Management System view-appointment.php sql injection	Dec 21, 2025 8mo ago
CVE-2025-14071	high	7.5/10	Live Composer – Free WordPress Website Builder <= 2.0.2 - Authenticated (Contributor+) PHP Object Injection via dslc_module_posts_output Shortcode	Dec 21, 2025 8mo ago
CVE-2025-14989	medium	6.9/10	Campcodes Complete Online Beauty Parlor Management System search-invoices.php sql injection	Dec 20, 2025 8mo ago
CVE-2025-13624	medium	6.1/10	Overstock Affiliate Links <= 1.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']	Dec 20, 2025 8mo ago
CVE-2025-14968	medium	6.9/10	code-projects Simple Stock System update.php sql injection	Dec 19, 2025 8mo ago
CVE-2025-14967	medium	6.9/10	itsourcecode Student Management System candidates_report.php sql injection	Dec 19, 2025 8mo ago
CVE-2025-14966	medium	5.1/10	FastAdmin Backend Controller Backend.php selectpage sql injection	Dec 19, 2025 8mo ago
CVE-2025-14962	medium	5.3/10	code-projects Simple Stock System chatuser.php cross site scripting	Dec 19, 2025 8mo ago
CVE-2025-14961	medium	6.9/10	code-projects Simple Blood Donor Management System editedcampaign.php sql injection	Dec 19, 2025 8mo ago
CVE-2025-14960	medium	6.9/10	code-projects Simple Blood Donor Management System editeddonor.php sql injection	Dec 19, 2025 8mo ago
CVE-2025-14959	medium	6.9/10	code-projects Simple Stock System signup.php sql injection	Dec 19, 2025 8mo ago
CVE-2025-14952	medium	6.9/10	Campcodes Supplier Management System add_category.php sql injection	Dec 19, 2025 8mo ago
CVE-2025-14951	medium	6.9/10	code-projects Scholars Tracking System home.php sql injection	Dec 19, 2025 8mo ago
CVE-2025-14950	medium	6.9/10	code-projects Scholars Tracking System delete_post.php sql injection	Dec 19, 2025 8mo ago
CVE-2025-14940	medium	6.9/10	code-projects Scholars Tracking System delete_user.php sql injection	Dec 19, 2025 8mo ago
CVE-2025-14939	medium	5.1/10	code-projects Online Appointment Booking System deletemanager.php sql injection	Dec 19, 2025 8mo ago
CVE-2025-14900	medium	5.1/10	CodeAstro Real Estate Management System Administrator Endpoint userdelete.php sql injection	Dec 19, 2025 8mo ago
CVE-2025-14899	medium	5.1/10	CodeAstro Real Estate Management System Administrator Endpoint stateadd.php sql injection	Dec 19, 2025 8mo ago
CVE-2025-14898	medium	5.1/10	CodeAstro Real Estate Management System Administrator Endpoint userbuilderdelete.php sql injection	Dec 18, 2025 8mo ago
CVE-2025-14897	medium	5.1/10	CodeAstro Real Estate Management System Administrator Endpoint useragentdelete.php sql injection	Dec 18, 2025 8mo ago
CVE-2025-14889	medium	5.3/10	Campcodes Advanced Voting Management System Password voters_edit.php improper authorization	Dec 18, 2025 8mo ago
CVE-2023-53944	high	7.1/10	EasyPHP Webserver 14.1 Path Traversal via Directory Traversal Sequences	Dec 18, 2025 8mo ago
CVE-2023-53941	critical	9.3/10	EasyPHP Webserver 14.1 Remote Code Execution	Dec 18, 2025 8mo ago
CVE-2023-53935	medium	5.3/10	WBiz Desk 1.2 SQL Injection Vulnerability via ticket.php Parameter	Dec 18, 2025 8mo ago