Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,132

All time

Critical · Active

11,967

CVSS ≥ 9.0

New · 14 days

2,658

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 181–210 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-58143	high	8.7/10	Cotonti Siena 0.9.26 CSRF via admin.php Config Update Endpoint	Jul 9, 2026 1mo ago
CVE-2026-60120	medium	5.1/10	Bagisto < 2.4.4 Stored XSS via CSTI in create.blade.php	Jul 9, 2026 1mo ago
CVE-2026-55590	medium	5.1/10	CakePHP: Open redirect weakness via backslash bypass	Jul 9, 2026 1mo ago
CVE-2026-15202	medium	5.3/10	YzmCMS Header yzmphp.php get_url cross site scripting	Jul 9, 2026 1mo ago
CVE-2026-15191	medium	5.3/10	mettle sendportal Campaign Creation Endpoint CampaignStoreRequest.php authorization	Jul 9, 2026 1mo ago
CVE-2026-15190	medium	6.9/10	SourceCodester Simple and Nice Shopping Cart Script login.php sql injection	Jul 9, 2026 1mo ago
CVE-2026-15135	medium	6.9/10	code-projects Online Food Order System edit_food_items.php sql injection	Jul 8, 2026 1mo ago
CVE-2026-15134	medium	6.9/10	CodeAstro Simple Online Leave Management System index.php sql injection	Jul 8, 2026 1mo ago
CVE-2026-43921	high	8.9/10	FOSSBilling vulnerable to arbitrary PHP code injection via unescaped config serialization	Jul 6, 2026 1mo ago
CVE-2026-14799	medium	5.3/10	CodeAstro Ecommerce Website my_account.php sql injection	Jul 6, 2026 1mo ago
CVE-2026-14798	medium	5.3/10	CodeAstro Apartment Visitor Management System visitor-entry.php sql injection	Jul 6, 2026 1mo ago
CVE-2026-14797	medium	5.3/10	CodeAstro Apartment Visitor Management System edit-apartment.php sql injection	Jul 6, 2026 1mo ago
CVE-2026-14796	medium	5.3/10	CodeAstro Apartment Visitor Management System report.php sql injection	Jul 6, 2026 1mo ago
CVE-2026-14795	medium	5.3/10	CodeAstro Apartment Visitor Management System action-visitor.php sql injection	Jul 6, 2026 1mo ago
CVE-2026-14793	medium	5.3/10	Craft CMS reorder-sets Endpoint GlobalsController.php actionReorderSets authorization	Jul 6, 2026 1mo ago
CVE-2026-14791	medium	5.1/10	crater-invoice-inc crater Invoice Note InvoicesRequest.php getFormattedString cross site scripting	Jul 6, 2026 1mo ago
CVE-2026-14778	medium	6.9/10	SourceCodester Onlne Examination & Learning Management System Enrollment Management ajax_enroll.php improper authorization	Jul 5, 2026 1mo ago
CVE-2026-14776	medium	5.3/10	SourceCodester Onlne Examination & Learning Management System Filename Extension upload_files.php pathinfo unrestricted upload	Jul 5, 2026 1mo ago
CVE-2026-14775	medium	5.3/10	SourceCodester Onlne Examination & Learning Management System process_lesson.php unrestricted upload	Jul 5, 2026 1mo ago
CVE-2026-14774	medium	5.3/10	itsourcecode Hospital Management System paymentdischarge.php sql injection	Jul 5, 2026 1mo ago
CVE-2026-14773	medium	5.3/10	itsourcecode Hospital Management System payment.php sql injection	Jul 5, 2026 1mo ago
CVE-2026-14771	medium	6.9/10	SourceCodester Class and Exam Timetabling System edit_exam1.php sql injection	Jul 5, 2026 1mo ago
CVE-2026-14770	medium	6.9/10	SourceCodester Class and Exam Timetabling System edit_room.php sql injection	Jul 5, 2026 1mo ago
CVE-2026-14769	medium	6.9/10	code-projects Real State Services pay.php sql injection	Jul 5, 2026 1mo ago
CVE-2026-14768	medium	6.9/10	code-projects Real State Services builderHome.php sql injection	Jul 5, 2026 1mo ago
CVE-2026-14767	medium	5.3/10	CodeAstro Ecommerce Website POST Parameter confirm.php sql injection	Jul 5, 2026 1mo ago
CVE-2026-14766	medium	5.3/10	CodeAstro Apartment Visitor Management System POST Parameter search-result.php sql injection	Jul 5, 2026 1mo ago
CVE-2026-14764	medium	6.9/10	code-projects Hotel and Tourism Reservation Event Management add_event.php sql injection	Jul 5, 2026 1mo ago
CVE-2026-14763	medium	6.9/10	code-projects Hotel and Tourism Reservation Tour Reservations tour_reserves.php sql injection	Jul 5, 2026 1mo ago
CVE-2026-14762	medium	6.9/10	code-projects Hotel and Tourism Reservation Room Management rooms.php sql injection	Jul 5, 2026 1mo ago