Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

704

Newly disclosed

Feed last synced

11 hrs ago

Data freshness

Showing 181–210 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-10185	medium	6.9/10	SourceCodester Hospitals Patient Records Management System Users.php save sql injection	May 31, 2026 27d ago
CVE-2026-10184	medium	6.9/10	SourceCodester Hospitals Patient Records Management System Users.php delete sql injection	May 31, 2026 27d ago
CVE-2026-10178	medium	6.9/10	code-projects Online Music Site AdminEditAlbum.php sql injection	May 31, 2026 27d ago
CVE-2026-10172	medium	5.3/10	Bdtask Multi-Store Inventory Management System Component Module.php upload unrestricted upload	May 31, 2026 27d ago
CVE-2026-10171	medium	5.1/10	code-projects Online Music Site AdminUpdateAlbum.php sql injection	May 31, 2026 27d ago
CVE-2026-10170	medium	5.3/10	code-projects Visitor Management System phone_0.php sql injection	May 31, 2026 27d ago
CVE-2026-10169	medium	6.3/10	OUSL-GROUP-BrinaryBrains School Student Management System Forgot Password Endpoint Login.php ajax_forgot_password password recovery	May 31, 2026 27d ago
CVE-2026-10168	medium	5.3/10	OUSL-GROUP-BrinaryBrains School Student Management System Parents.php marks resource injection	May 31, 2026 27d ago
CVE-2026-10167	medium	6.9/10	OUSL-GROUP-BrinaryBrains School Student Management System MY_Controller Login.php sign_auth_cookie improper authentication	May 31, 2026 27d ago
CVE-2026-10155	medium	5.1/10	Bdtask Multi-Store Inventory Management System Accounts Report Accounts.php accounts_report_search sql injection	May 30, 2026 27d ago
CVE-2026-10154	medium	5.3/10	Dolibarr ERP CRM messaging.php authorization	May 30, 2026 27d ago
CVE-2018-25424	high	8.8/10	Gate Pass Management System 2.1 SQL Injection via login-exec.php	May 30, 2026 28d ago
CVE-2018-25422	high	8.8/10	MOGG web simulator Script All Version SQL Injection via play.php	May 30, 2026 28d ago
CVE-2018-25420	high	8.8/10	AiOPMSD Final 1.0.0 SQL Injection via watch.php	May 30, 2026 28d ago
CVE-2018-25419	high	8.8/10	AiOPMSD Final 1.0.0 SQL Injection via genre.php	May 30, 2026 28d ago
CVE-2018-25418	high	8.8/10	AiOPMSD Final 1.0.0 SQL Injection via year.php	May 30, 2026 28d ago
CVE-2018-25417	high	8.8/10	AiOPMSD Final 1.0.0 SQL Injection via quality.php	May 30, 2026 28d ago
CVE-2018-25416	high	8.8/10	AiOPMSD Final 1.0.0 SQL Injection via country.php	May 30, 2026 28d ago
CVE-2018-25414	high	8.8/10	AiOPMSD Final 1.0.0 SQL Injection via actor.php	May 30, 2026 28d ago
CVE-2018-25413	high	8.8/10	AiOPMSD Final 1.0.0 SQL Injection via search.php	May 30, 2026 28d ago
CVE-2018-25412	critical	9.3/10	Delta Sql 1.8.2 Arbitrary File Upload via docs_upload.php	May 30, 2026 28d ago
CVE-2018-25411	high	8.8/10	MGB OpenSource Guestbook 0.7.0.2 SQL Injection via email.php	May 30, 2026 28d ago
CVE-2018-25410	high	7.1/10	SIM-PKH 2.4.1 SQL Injection via media.php id Parameter	May 30, 2026 28d ago
CVE-2018-25409	high	8.7/10	SIM-PKH 2.4.1 Arbitrary File Upload via aksi_pengurus.php	May 30, 2026 28d ago
CVE-2018-25407	high	8.8/10	eNdonesia Portal 8.7 SQL Injection via mod.php	May 30, 2026 28d ago
CVE-2018-25406	high	8.8/10	eNdonesia Portal 8.7 SQL Injection via mod.php	May 30, 2026 28d ago
CVE-2018-25405	high	8.8/10	eNdonesia Portal 8.7 SQL Injection via mod.php	May 30, 2026 28d ago
CVE-2026-7465	high	8.8/10	Spectra Gutenberg Blocks <= 2.19.25 - Authenticated (Contributor+) Remote Code Execution via Arbitrary PHP Function Call via Block Attributes	May 30, 2026 28d ago
CVE-2026-10110	medium	6.9/10	code-projects Student Details Management System index.php sql injection	May 30, 2026 28d ago
CVE-2026-48557	high	8.7/10	Spatie Laravel Media Library < 11.23.0 File Upload Restriction Bypass via FileAdder.php	May 29, 2026 29d ago