Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

336,969

All time

Critical · Active

10,649

CVSS ≥ 9.0

New · 14 days

1,585

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 2101–2130 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-62524	medium	5.3/10	PILOS Exposes PHP version	Oct 27, 2025 8mo ago
CVE-2025-12315	medium	5.1/10	code-projects Food Ordering System menu.php sql injection	Oct 27, 2025 8mo ago
CVE-2025-12314	medium	5.1/10	code-projects Food Ordering System deleteitem.php sql injection	Oct 27, 2025 8mo ago
CVE-2025-12312	medium	4.8/10	PHPGurukul Curfew e-Pass Management System view-pass-detail.php cross site scripting	Oct 27, 2025 8mo ago
CVE-2025-12311	medium	4.8/10	PHPGurukul Curfew e-Pass Management System edit-category-detail.php cross site scripting	Oct 27, 2025 8mo ago
CVE-2025-12309	medium	6.9/10	code-projects Nero Social Networking Site friendprofile.php sql injection	Oct 27, 2025 8mo ago
CVE-2025-12308	medium	6.9/10	code-projects Nero Social Networking Site deletemessage.php sql injection	Oct 27, 2025 8mo ago
CVE-2025-12307	medium	6.9/10	code-projects Nero Social Networking Site addfriend.php sql injection	Oct 27, 2025 8mo ago
CVE-2025-12306	medium	6.9/10	code-projects Nero Social Networking Site acceptoffres.php sql injection	Oct 27, 2025 8mo ago
CVE-2025-12303	medium	4.8/10	PHPGurukul Curfew e-Pass Management System admin-profile.php cross site scripting	Oct 27, 2025 8mo ago
CVE-2025-12302	medium	5.3/10	code-projects Simple Food Ordering System editproduct.php cross site scripting	Oct 27, 2025 8mo ago
CVE-2025-12301	medium	6.9/10	code-projects Simple Food Ordering System editproduct.php unrestricted upload	Oct 27, 2025 8mo ago
CVE-2025-12300	medium	5.3/10	code-projects Simple Food Ordering System addcategory.php cross site scripting	Oct 27, 2025 8mo ago
CVE-2025-12299	medium	5.3/10	code-projects Simple Food Ordering System addproduct.php cross site scripting	Oct 27, 2025 8mo ago
CVE-2025-12298	medium	5.3/10	code-projects Simple Food Ordering System editcategory.php cross site scripting	Oct 27, 2025 8mo ago
CVE-2025-12294	medium	5.1/10	SourceCodester Point of Sales delete_category.php sql injection	Oct 27, 2025 8mo ago
CVE-2025-12293	medium	6.9/10	SourceCodester Point of Sales category.php sql injection	Oct 27, 2025 8mo ago
CVE-2025-12292	medium	6.9/10	SourceCodester Point of Sales index.php sql injection	Oct 27, 2025 8mo ago
CVE-2025-12291	medium	5.1/10	ashymuzuro Full-Ecommece-Website/Muzuro Ecommerce System Add Product index.php unrestricted upload	Oct 27, 2025 8mo ago
CVE-2025-34292	critical	9.4/10	BeWelcome/Rox PHP Object Injection RCE	Oct 27, 2025 8mo ago
CVE-2025-12282	medium	4.8/10	code-projects Client Details System manage-users.php cross site scripting	Oct 27, 2025 8mo ago
CVE-2025-12281	medium	4.8/10	code-projects Client Details System clientview.php cross site scripting	Oct 27, 2025 8mo ago
CVE-2025-12280	medium	4.8/10	code-projects Client Details System update-clients.php cross site scripting	Oct 27, 2025 8mo ago
CVE-2025-12279	medium	4.8/10	code-projects Client Details System welcome.php cross site scripting	Oct 27, 2025 8mo ago
CVE-2025-12277	medium	6.9/10	Abdullah-Hasan-Sajjad Online-School studentLogin.php sql injection	Oct 27, 2025 8mo ago
CVE-2025-12263	medium	5.3/10	code-projects Online Event Judging System edit_judge.php sql injection	Oct 27, 2025 8mo ago
CVE-2025-12262	medium	5.3/10	code-projects Online Event Judging System edit_criteria.php sql injection	Oct 27, 2025 8mo ago
CVE-2025-12261	medium	5.3/10	CodeAstro Gym Management System remove-announcement.php sql injection	Oct 27, 2025 8mo ago
CVE-2025-12257	medium	6.9/10	SourceCodester Online Student Result System view_result.php sql injection	Oct 27, 2025 8mo ago
CVE-2025-12256	medium	5.3/10	code-projects Online Event Judging System edit_contestant.php sql injection	Oct 27, 2025 8mo ago