Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,376

All time

Critical · Active

12,004

CVSS ≥ 9.0

New · 14 days

2,196

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1951–1980 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-14885	medium	5.3/10	SourceCodester Client Database Management System Leads Generation user_leads.php unrestricted upload	Dec 18, 2025 8mo ago
CVE-2025-14877	medium	6.9/10	Campcodes Supplier Management System add_retailer.php sql injection	Dec 18, 2025 8mo ago
CVE-2025-64266	high	8.8/10	WordPress Booking and Rental Manager plugin <= 2.5.4 - PHP Object Injection vulnerability	Dec 18, 2025 8mo ago
CVE-2025-64233	critical	9.8/10	WordPress Codiqa theme < 1.2.8 - PHP Object Injection vulnerability	Dec 18, 2025 8mo ago
CVE-2025-64227	critical	9.8/10	WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - PHP Object Injection vulnerability	Dec 18, 2025 8mo ago
CVE-2025-64206	critical	9.8/10	WordPress Jannah theme <= 7.6.0 - PHP Object Injection vulnerability	Dec 18, 2025 8mo ago
CVE-2025-60180	critical	9.8/10	WordPress WP Gravity Forms Salesforce plugin <= 1.5.1 - PHP Object Injection vulnerability	Dec 18, 2025 8mo ago
CVE-2025-60084	high	8.8/10	WordPress PDF for Elementor Forms + Drag And Drop Template Builder plugin <= 6.5.0 - PHP Object Injection vulnerability	Dec 18, 2025 8mo ago
CVE-2025-60080	high	7.5/10	WordPress PDF for Gravity Forms + Drag And Drop Template Builder plugin <= 6.5.0 - PHP Object Injection vulnerability	Dec 18, 2025 8mo ago
CVE-2025-54723	critical	9.8/10	WordPress DentiCare Theme < 1.4.3 - PHP Object Injection Vulnerability	Dec 18, 2025 8mo ago
CVE-2025-14837	medium	5.1/10	ZZCMS Backend Website Settings siteconfig.php stripfxg code injection	Dec 17, 2025 8mo ago
CVE-2025-14836	medium	5.1/10	ZZCMS User Data Storage user_save.php cleartext storage in file	Dec 17, 2025 8mo ago
CVE-2025-14834	medium	5.3/10	code-projects Simple Stock System checkuser.php sql injection	Dec 17, 2025 8mo ago
CVE-2023-53929	medium	6.2/10	phpMyFAQ 3.1.12 CSV Injection via User Profile Export	Dec 17, 2025 8mo ago
CVE-2023-53928	medium	5.1/10	PHPFusion 9.10.30 Stored Cross-Site Scripting via File Manager Upload	Dec 17, 2025 8mo ago
CVE-2023-53927	medium	5.1/10	PHPJabbers Simple CMS 5.0 Stored Cross-Site Scripting via Section Creation	Dec 17, 2025 8mo ago
CVE-2023-53926	high	8.7/10	PHPJabbers Simple CMS 5.0 SQL Injection via Column Parameter	Dec 17, 2025 8mo ago
CVE-2025-14833	medium	6.9/10	code-projects Online Appointment Booking System deletemanagerclinic.php sql injection	Dec 17, 2025 8mo ago
CVE-2025-68129	medium	6.8/10	Auth0-PHP SDK has Improper Audience Validation	Dec 17, 2025 8mo ago
CVE-2025-14832	medium	6.9/10	itsourcecode Online Cake Ordering System updateproduct.php sql injection	Dec 17, 2025 8mo ago
CVE-2025-68400	critical	9.3/10	ChurchCRM vulnerable to time-based blind SQL Injection in ConfirmReportEmail.php	Dec 17, 2025 8mo ago
CVE-2025-68399	low	2.0/10	ChurchCRM has Stored Cross-Site Scripting (XSS) In GroupEditor.php	Dec 17, 2025 8mo ago
CVE-2025-68112	critical	9.6/10	ChurchCRM has SQL injection in EditEventAttendees.php	Dec 17, 2025 8mo ago
CVE-2025-34288	high	8.6/10	Nagios XI Privilege Escalation via Writable PHP Include Executed with Sudo	Dec 16, 2025 8mo ago
CVE-2023-53894	critical	9.3/10	phpfm 1.7.9 Authentication Bypass via Type Juggling Vulnerability	Dec 16, 2025 8mo ago
CVE-2025-14731	medium	5.3/10	CTCMS Content Management System Frontend/Template Management CT_Parser.php special elements used in a template engine	Dec 15, 2025 8mo ago
CVE-2025-14730	medium	5.1/10	CTCMS Content Management System Backend System Configuration Ct_Config.php code injection	Dec 15, 2025 8mo ago
CVE-2025-14729	medium	5.1/10	CTCMS Content Management System Backend App Configuration Ct_App.php save code injection	Dec 15, 2025 8mo ago
CVE-2025-14722	medium	4.8/10	vion707 DMadmin Backend AddonsController.class.php add cross site scripting	Dec 15, 2025 8mo ago
CVE-2023-53883	high	8.6/10	Webedition CMS v2.9.8.8 Remote Code Execution via PHP Page Creation	Dec 15, 2025 8mo ago