Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,382

All time

Critical · Active

12,007

CVSS ≥ 9.0

New · 14 days

2,196

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 2071–2100 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-14245	medium	6.9/10	IdeaCMS Coupon.php whereRaw sql injection	Dec 8, 2025 8mo ago
CVE-2025-14244	medium	4.8/10	GreenCMS Menu Management CustomController.class.php cross site scripting	Dec 8, 2025 8mo ago
CVE-2025-14230	medium	5.3/10	code-projects Daily Time Recording System add_payroll.php sql injection	Dec 8, 2025 8mo ago
CVE-2025-14227	medium	5.3/10	Philipinho Simple-PHP-Blog edit.php sql injection	Dec 8, 2025 8mo ago
CVE-2025-14226	medium	6.9/10	itsourcecode Student Management System edit_user.php sql injection	Dec 8, 2025 8mo ago
CVE-2025-14223	medium	6.9/10	code-projects Simple Leave Manager request.php sql injection	Dec 8, 2025 8mo ago
CVE-2025-14222	medium	5.3/10	code-projects Employee Profile Management System print_personnel_report.php sql injection	Dec 8, 2025 8mo ago
CVE-2025-14219	medium	5.1/10	Campcodes Retro Basketball Shoes Online Store admin_running.php unrestricted upload	Dec 8, 2025 8mo ago
CVE-2025-14218	medium	6.9/10	code-projects Currency Exchange System editotheraccount.php sql injection	Dec 8, 2025 8mo ago
CVE-2025-14217	medium	6.9/10	code-projects Currency Exchange System edittrns.php sql injection	Dec 8, 2025 8mo ago
CVE-2025-14216	medium	6.9/10	code-projects Currency Exchange System viewserial.php sql injection	Dec 8, 2025 8mo ago
CVE-2025-14215	medium	6.9/10	code-projects Currency Exchange System edit.php sql injection	Dec 8, 2025 8mo ago
CVE-2025-14214	medium	5.3/10	itsourcecode Student Information System section_edit1.php sql injection	Dec 8, 2025 8mo ago
CVE-2025-14212	medium	6.9/10	projectworlds Advanced Library Management System member_search.php sql injection	Dec 8, 2025 8mo ago
CVE-2025-14211	medium	6.9/10	projectworlds Advanced Library Management System delete_book.php sql injection	Dec 8, 2025 8mo ago
CVE-2025-14210	medium	6.9/10	projectworlds Advanced Library Management System delete_member.php sql injection	Dec 8, 2025 8mo ago
CVE-2025-14209	medium	6.9/10	Campcodes School File Management System update_query.php sql injection	Dec 8, 2025 8mo ago
CVE-2025-14207	medium	6.9/10	tushar-2223 Hotel-Management-System invoiceprint.php sql injection	Dec 8, 2025 8mo ago
CVE-2025-14206	medium	6.9/10	SourceCodester Online Student Clearance System Fee Table delete-fee.php improper authorization	Dec 8, 2025 8mo ago
CVE-2025-14205	medium	4.8/10	code-projects Chamber of Commerce Membership Management System Your Info membership_profile.php cross site scripting	Dec 7, 2025 8mo ago
CVE-2025-14203	medium	5.3/10	code-projects Question Paper Generator selectquestionuser.php sql injection	Dec 7, 2025 8mo ago
CVE-2025-14201	medium	4.8/10	alokjaiswal Hotel-Management-services-using-MYSQL-and-php dishsub.php cross site scripting	Dec 7, 2025 8mo ago
CVE-2025-14200	medium	5.1/10	alokjaiswal Hotel-Management-services-using-MYSQL-and-php Request Pending usersub.php cross site scripting	Dec 7, 2025 8mo ago
CVE-2025-14195	medium	5.3/10	code-projects Employee Profile Management System add_file_query.php unrestricted upload	Dec 7, 2025 8mo ago
CVE-2025-14194	medium	5.1/10	code-projects Employee Profile Management System view_personnel.php cross site scripting	Dec 7, 2025 8mo ago
CVE-2025-14193	medium	5.3/10	code-projects Employee Profile Management System view_personnel.php sql injection	Dec 7, 2025 8mo ago
CVE-2025-14192	medium	6.9/10	RashminDungrani online-banking auth_login.php sql injection	Dec 7, 2025 8mo ago
CVE-2025-14189	medium	6.9/10	Chanjet CRM jxf_dump_table_demo.php sql injection	Dec 7, 2025 8mo ago
CVE-2025-13626	medium	6.1/10	myLCO <= 0.8.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']	Dec 6, 2025 8mo ago
CVE-2025-14091	medium	6.9/10	TrippWasTaken PHP-Guitar-Shop Product Details product.php sql injection	Dec 5, 2025 8mo ago