Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

336,960

All time

Critical · Active

10,649

CVSS ≥ 9.0

New · 14 days

1,577

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 2041–2070 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-12860	medium	5.1/10	DedeBIZ freelist_main.php sql injection	Nov 7, 2025 7mo ago
CVE-2025-12859	medium	5.1/10	DedeBIZ templets_one_edit.php sql injection	Nov 7, 2025 7mo ago
CVE-2025-12857	medium	5.1/10	code-projects Responsive Hotel Site roombook.php sql injection	Nov 7, 2025 7mo ago
CVE-2025-12856	medium	5.1/10	code-projects Responsive Hotel Site reservation.php sql injection	Nov 7, 2025 7mo ago
CVE-2025-12855	medium	5.1/10	code-projects Responsive Hotel Site newsletterdel.php sql injection	Nov 7, 2025 7mo ago
CVE-2025-12853	medium	5.1/10	SourceCodester Best House Rental Management System admin_class.php delete_house sql injection	Nov 7, 2025 7mo ago
CVE-2025-62035	high	8.8/10	WordPress Togo theme < 1.0.4 - PHP Object Injection vulnerability	Nov 6, 2025 8mo ago
CVE-2025-60245	critical	9.8/10	WordPress WP User Manager plugin <= 2.9.12 - PHP Object Injection vulnerability	Nov 6, 2025 8mo ago
CVE-2025-58998	critical	9.8/10	WordPress s2Member Plugin <= 250701 - PHP Object Injection Vulnerability	Nov 6, 2025 8mo ago
CVE-2025-58619	high	8.8/10	WordPress Falang multilanguage Plugin <= 1.3.65 - PHP Object Injection Vulnerability	Nov 6, 2025 8mo ago
CVE-2025-53586	high	8.8/10	WordPress WeMusic Theme <= 1.9.1 - PHP Object Injection Vulnerability	Nov 6, 2025 8mo ago
CVE-2025-49393	critical	9.8/10	WordPress Sign-up Sheets Plugin <= 2.3.2 - PHP Object Injection Vulnerability	Nov 6, 2025 8mo ago
CVE-2025-49386	high	8.8/10	WordPress Preserve Code Formatting Plugin <= 4.0.1 - PHP Object Injection Vulnerability	Nov 6, 2025 8mo ago
CVE-2025-48086	medium	5.5/10	WordPress Ajax Search Lite plugin <= 4.13.3 - PHP Object Injection vulnerability	Nov 6, 2025 8mo ago
CVE-2025-8871	medium	5.6/10	Everest Forms (Pro) <= 1.9.7 - Unauthenticated PHP Object Injection via PHAR Deserialization in Form Signature	Nov 5, 2025 8mo ago
CVE-2025-55155	medium	5.4/10	MantisBT: Authentication bypass for some passwords due to PHP type juggling	Nov 4, 2025 8mo ago
CVE-2025-47776	high	8.8/10	MantisBT: Authentication bypass for some passwords due to PHP type juggling	Nov 4, 2025 8mo ago
CVE-2025-12493	critical	9.8/10	ShopLentor <= 3.2.5 - Unauthenticated Local PHP File Inclusion via 'load_template'	Nov 4, 2025 8mo ago
CVE-2025-12617	medium	6.9/10	itsourcecode Billing System login_crud.php sql injection	Nov 3, 2025 8mo ago
CVE-2025-12616	medium	6.3/10	PHPGurukul News Portal settings.py insertion of sensitive information into debugging code	Nov 3, 2025 8mo ago
CVE-2025-12615	low	2.3/10	PHPGurukul News Portal settings.py hard-coded key	Nov 3, 2025 8mo ago
CVE-2025-12614	medium	5.1/10	SourceCodester Best House Rental Management System admin_class.php delete_payment sql injection	Nov 3, 2025 8mo ago
CVE-2025-12612	medium	5.3/10	Campcodes School Fees Payment Management System ajax.php sql injection	Nov 3, 2025 8mo ago
CVE-2025-12610	medium	5.1/10	CodeAstro Gym Management System view-progress-report.php sql injection	Nov 3, 2025 8mo ago
CVE-2025-12609	medium	5.1/10	CodeAstro Gym Management System update-progress.php sql injection	Nov 3, 2025 8mo ago
CVE-2025-12608	medium	6.9/10	itsourcecode Online Loan Management System manage_user.php sql injection	Nov 3, 2025 8mo ago
CVE-2025-12607	medium	6.9/10	itsourcecode Online Loan Management System manage_payment.php sql injection	Nov 3, 2025 8mo ago
CVE-2025-12606	medium	6.9/10	itsourcecode Online Loan Management System manage_borrower.php sql injection	Nov 2, 2025 8mo ago
CVE-2025-12605	medium	6.9/10	itsourcecode Online Loan Management System manage_loan.php sql injection	Nov 2, 2025 8mo ago
CVE-2025-12604	medium	6.9/10	itsourcecode Online Loan Management System load_fields.php sql injection	Nov 2, 2025 8mo ago