Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,380

All time

Critical · Active

12,007

CVSS ≥ 9.0

New · 14 days

2,199

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 2041–2070 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-14522	medium	5.3/10	baowzh hfly upload_json.php unrestricted upload	Dec 11, 2025 8mo ago
CVE-2025-14515	medium	6.9/10	Campcodes Supplier Management System add_unit.php sql injection	Dec 11, 2025 8mo ago
CVE-2025-14514	medium	6.9/10	Campcodes Supplier Management System add_distributor.php sql injection	Dec 11, 2025 8mo ago
CVE-2021-47704	high	8.7/10	OpenBMCS SQL Injection via obix_test.php	Dec 9, 2025 8mo ago
CVE-2021-47703	medium	6.9/10	OpenBMCS Server Side Request Forgery (SSRF) via /php/query.php	Dec 9, 2025 8mo ago
CVE-2021-47702	medium	5.3/10	OpenBMCS Cross Site Request Forgery (CSRF) via sendFeedback.php	Dec 9, 2025 8mo ago
CVE-2025-14337	medium	6.9/10	itsourcecode Student Management System new_grade.php sql injection	Dec 9, 2025 8mo ago
CVE-2025-14336	medium	6.9/10	itsourcecode Student Management System promote.php sql injection	Dec 9, 2025 8mo ago
CVE-2025-14335	medium	6.9/10	itsourcecode Student Management System new_school_year.php sql injection	Dec 9, 2025 8mo ago
CVE-2025-14334	medium	6.9/10	itsourcecode Student Management System new_adviser.php sql injection	Dec 9, 2025 8mo ago
CVE-2025-67535	medium	6.6/10	WordPress WP Maps plugin <= 4.8.6 - PHP Object Injection vulnerability	Dec 9, 2025 8mo ago
CVE-2025-41695	high	7.1/10	Reflected XSS vulnerability in dyn_conn.php	Dec 9, 2025 8mo ago
CVE-2025-41745	high	7.1/10	Reflected XSS vulnerability in pxc_portCntr2.php	Dec 9, 2025 8mo ago
CVE-2025-41746	high	7.1/10	Reflected XSS vulnerability in pxc_portSecCfg.php	Dec 9, 2025 8mo ago
CVE-2025-41747	high	7.1/10	Reflected XSS vulnerability in pxc_vlanIntfCfg.php	Dec 9, 2025 8mo ago
CVE-2025-41748	high	7.1/10	Reflected XSS vulnerability in pxc_Dot1xCfg.php	Dec 9, 2025 8mo ago
CVE-2025-41749	high	7.1/10	Reflected XSS vulnerability in port_util.php	Dec 9, 2025 8mo ago
CVE-2025-41750	high	7.1/10	Reflected XSS vulnerability in pxc_PortCfg.php	Dec 9, 2025 8mo ago
CVE-2025-41751	high	7.1/10	Reflected XSS vulnerability in pxc_portCntr.php	Dec 9, 2025 8mo ago
CVE-2025-41752	high	7.1/10	Reflected XSS vulnerability in pxc_portSfp.php	Dec 9, 2025 8mo ago
CVE-2025-14285	medium	6.9/10	code-projects Employee Profile Management System edit_personnel.php sql injection	Dec 9, 2025 8mo ago
CVE-2025-14276	medium	6.3/10	Ilevia EVE X1 Server leaf_search.php command injection	Dec 8, 2025 8mo ago
CVE-2025-14258	medium	6.9/10	itsourcecode Student Management System newsubject.php sql injection	Dec 8, 2025 8mo ago
CVE-2025-14257	medium	6.9/10	itsourcecode Student Management System newrecord.php sql injection	Dec 8, 2025 8mo ago
CVE-2025-14256	medium	6.9/10	itsourcecode Student Management System newcurriculm.php sql injection	Dec 8, 2025 8mo ago
CVE-2025-14250	medium	6.9/10	code-projects Online Ordering System user_contact.php sql injection	Dec 8, 2025 8mo ago
CVE-2025-14249	medium	6.9/10	code-projects Online Ordering System user_school.php sql injection	Dec 8, 2025 8mo ago
CVE-2025-14248	medium	6.9/10	code-projects Simple Shopping Cart adminlogin.php sql injection	Dec 8, 2025 8mo ago
CVE-2025-14247	medium	5.3/10	code-projects Simple Shopping Cart additems.php sql injection	Dec 8, 2025 8mo ago
CVE-2025-14246	medium	5.3/10	code-projects Simple Shopping Cart settings.php sql injection	Dec 8, 2025 8mo ago