Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,380

All time

Critical · Active

12,007

CVSS ≥ 9.0

New · 14 days

2,200

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 2011–2040 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-14589	medium	5.3/10	code-projects Prison Management System search.php sql injection	Dec 13, 2025 8mo ago
CVE-2025-14588	medium	6.9/10	itsourcecode Student Management System update_program.php sql injection	Dec 13, 2025 8mo ago
CVE-2025-14587	medium	6.9/10	itsourcecode Online Pet Shop Management System available.php sql injection	Dec 13, 2025 8mo ago
CVE-2025-14476	high	8.8/10	Doubly <= 1.0.46 - Authenticated (Subscriber+) PHP Object Injection via ZIP File Import	Dec 13, 2025 8mo ago
CVE-2025-14584	medium	6.9/10	itsourcecode COVID Tracking System Admin Login login.php sql injection	Dec 12, 2025 8mo ago
CVE-2025-14583	medium	6.9/10	campcodes Online Student Enrollment System register.php unrestricted upload	Dec 12, 2025 8mo ago
CVE-2025-14582	medium	5.1/10	campcodes Online Student Enrollment System index.php unrestricted upload	Dec 12, 2025 8mo ago
CVE-2025-14580	medium	5.1/10	Qualitor viewDocumento.php cross site scripting	Dec 12, 2025 8mo ago
CVE-2025-14578	medium	6.9/10	itsourcecode Student Management System update_account.php sql injection	Dec 12, 2025 8mo ago
CVE-2025-14571	medium	6.9/10	projectworlds Advanced Library Management System borrow_book.php sql injection	Dec 12, 2025 8mo ago
CVE-2025-14570	medium	6.9/10	projectworlds Advanced Library Management System view_admin.php sql injection	Dec 12, 2025 8mo ago
CVE-2025-14568	medium	5.3/10	haxxorsid Stock-Management-System User.php sql injection	Dec 12, 2025 8mo ago
CVE-2025-14566	medium	6.9/10	kidaze CourseSelectionSystem reg.php sql injection	Dec 12, 2025 8mo ago
CVE-2025-14565	medium	6.9/10	kidaze CourseSelectionSystem login1.php sql injection	Dec 12, 2025 8mo ago
CVE-2025-14138	medium	6.1/10	WPLG Default Mail From <= 1.0.0 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']	Dec 12, 2025 8mo ago
CVE-2025-14137	medium	6.1/10	Simple AL Slider <= 1.2.10 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']	Dec 12, 2025 8mo ago
CVE-2025-14132	medium	6.1/10	Category Dropdown List <= 1.0 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']	Dec 12, 2025 8mo ago
CVE-2025-13988	medium	6.1/10	评论小秘书 <= 1.3.2 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']	Dec 12, 2025 8mo ago
CVE-2025-14044	high	8.1/10	Visitor Logic Lite <= 1.0.3 - Unauthenticated PHP Object Injection via 'lpblocks' Cookie	Dec 12, 2025 8mo ago
CVE-2025-14129	medium	6.1/10	Like DisLike Voting <= 1.0.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']	Dec 12, 2025 8mo ago
CVE-2025-14125	medium	6.1/10	Complag <= 1.0.2 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']	Dec 12, 2025 8mo ago
CVE-2024-58312	high	8.7/10	xbtitFM 4.1.18 Unauthenticated Path Traversal in nfogen.php	Dec 11, 2025 8mo ago
CVE-2024-58309	high	8.7/10	xbtitFM 4.1.18 Unauthenticated SQL Injection in shoutedit.php	Dec 11, 2025 8mo ago
CVE-2024-58296	medium	5.3/10	CE Phoenix v3.0.1 Stored Cross-Site Scripting via admin/currencies.php	Dec 11, 2025 8mo ago
CVE-2025-14537	medium	6.9/10	code-projects Class and Exam Timetable Management preview7.php sql injection	Dec 11, 2025 8mo ago
CVE-2025-14536	medium	6.9/10	code-projects Class and Exam Timetable Management Login index.php sql injection	Dec 11, 2025 8mo ago
CVE-2025-14530	medium	5.1/10	SourceCodester Real Estate Property Listing App property.php unrestricted upload	Dec 11, 2025 8mo ago
CVE-2025-14529	medium	6.9/10	Campcodes Retro Basketball Shoes Online Store admin_running.php sql injection	Dec 11, 2025 8mo ago
CVE-2025-14528	medium	6.9/10	D-Link DIR-803 Configuration getcfg.php information disclosure	Dec 11, 2025 8mo ago
CVE-2025-14527	medium	6.9/10	projectworlds Advanced Library Management System view_book.php sql injection	Dec 11, 2025 8mo ago