Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

336,969

All time

Critical · Active

10,649

CVSS ≥ 9.0

New · 14 days

1,585

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 2131–2160 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-12255	medium	5.3/10	code-projects Online Event Judging System add_contestant.php sql injection	Oct 27, 2025 8mo ago
CVE-2025-12254	medium	5.3/10	code-projects Online Event Judging System add_judge.php sql injection	Oct 27, 2025 8mo ago
CVE-2025-12253	medium	6.9/10	AMTT Hotel Broadband Operation System get_expiredtime.php sql injection	Oct 27, 2025 8mo ago
CVE-2025-12252	medium	5.3/10	code-projects Online Event Judging System action.php sql injection	Oct 27, 2025 8mo ago
CVE-2025-12248	medium	6.9/10	CLTPHP search.html sql injection	Oct 27, 2025 8mo ago
CVE-2025-12244	medium	5.3/10	code-projects Simple E-Banking System register.php cross site scripting	Oct 27, 2025 8mo ago
CVE-2025-12243	medium	5.3/10	code-projects Client Details System GET Parameter welcome.php sql injection	Oct 27, 2025 8mo ago
CVE-2025-12242	medium	5.3/10	CodeAstro Gym Management System check-attendance.php sql injection	Oct 27, 2025 8mo ago
CVE-2025-12238	medium	5.3/10	code-projects Automated Voting System user.php sql injection	Oct 27, 2025 8mo ago
CVE-2025-12237	medium	6.9/10	projectworlds Advanced Library Management System index.php sql injection	Oct 27, 2025 8mo ago
CVE-2025-12227	medium	5.1/10	projectworlds Gate Pass Management System add-pass.php cross site scripting	Oct 27, 2025 8mo ago
CVE-2025-12226	medium	5.1/10	SourceCodester Best House Rental Management System admin_class.php save_house sql injection	Oct 27, 2025 8mo ago
CVE-2025-12224	medium	5.1/10	Iqbolshoh php-business-website contact.php cross site scripting	Oct 27, 2025 8mo ago
CVE-2025-12215	medium	6.9/10	projectworlds Online Shopping System login_submit.php sql injection	Oct 27, 2025 8mo ago
CVE-2025-12208	medium	6.9/10	SourceCodester Best House Rental Management System admin_class.php login2 sql injection	Oct 27, 2025 8mo ago
CVE-2025-12203	medium	5.3/10	givanz Vvveb Code Editor functions.php sanitizeFileName path traversal	Oct 27, 2025 8mo ago
CVE-2025-12202	medium	5.3/10	ajayrandhawa User-Management-PHP-MYSQL web cross-site request forgery	Oct 27, 2025 8mo ago
CVE-2025-12201	medium	5.1/10	ajayrandhawa User-Management-PHP-MYSQL User Management edit-user.php unrestricted upload	Oct 27, 2025 8mo ago
CVE-2025-62396	medium	5.3/10	Moodle: router (r.php) could expose application directories	Oct 23, 2025 8mo ago
CVE-2025-62025	critical	9.8/10	WordPress JobSearch plugin < 3.0.8 - PHP Object Injection vulnerability	Oct 22, 2025 8mo ago
CVE-2025-62008	high	8.8/10	WordPress Product Table For WooCommerce plugin <= 1.2.4 - PHP Object Injection vulnerability	Oct 22, 2025 8mo ago
CVE-2025-60238	critical	9.8/10	WordPress UNIVERSAM plugin <= 9.04.02 - PHP Object Injection vulnerability	Oct 22, 2025 8mo ago
CVE-2025-60234	high	8.8/10	WordPress Single Property theme <= 2.8 - PHP Object Injection vulnerability	Oct 22, 2025 8mo ago
CVE-2025-60232	critical	9.8/10	WordPress KBx Pro Ultimate plugin <= 8.0.5 - PHP Object Injection vulnerability	Oct 22, 2025 8mo ago
CVE-2025-60228	high	8.8/10	WordPress Knowledge Base theme <= 2.9 - PHP Object Injection vulnerability	Oct 22, 2025 8mo ago
CVE-2025-60226	critical	9.8/10	WordPress White Rabbit theme <= 1.5.2 - PHP Object Injection vulnerability	Oct 22, 2025 8mo ago
CVE-2025-60225	critical	9.8/10	WordPress BugsPatrol theme <= 1.5.0 - PHP Object Injection vulnerability	Oct 22, 2025 8mo ago
CVE-2025-60224	critical	9.8/10	WordPress Subscribe to Download plugin <= 2.0.9 - PHP Object Injection vulnerability	Oct 22, 2025 8mo ago
CVE-2025-60221	critical	9.8/10	WordPress Captivate Sync Plugin <= 3.0.3 - PHP Object Injection Vulnerability	Oct 22, 2025 8mo ago
CVE-2025-60216	critical	9.8/10	WordPress Addison theme < 1.4.8 - PHP Object Injection vulnerability	Oct 22, 2025 8mo ago