Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

336,969

All time

Critical · Active

10,649

CVSS ≥ 9.0

New · 14 days

1,585

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 2161–2190 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-60224	critical	9.8/10	WordPress Subscribe to Download plugin <= 2.0.9 - PHP Object Injection vulnerability	Oct 22, 2025 8mo ago
CVE-2025-60221	critical	9.8/10	WordPress Captivate Sync Plugin <= 3.0.3 - PHP Object Injection Vulnerability	Oct 22, 2025 8mo ago
CVE-2025-60216	critical	9.8/10	WordPress Addison theme < 1.4.8 - PHP Object Injection vulnerability	Oct 22, 2025 8mo ago
CVE-2025-60215	high	8.8/10	WordPress Kriya theme <= 3.4 - PHP Object Injection Vulnerability	Oct 22, 2025 8mo ago
CVE-2025-60214	critical	9.8/10	WordPress Goldenblatt theme < 1.3.0 - PHP Object Injection vulnerability	Oct 22, 2025 8mo ago
CVE-2025-60213	critical	9.8/10	WordPress Scape theme <= 1.5.13 - PHP Object Injection vulnerability	Oct 22, 2025 8mo ago
CVE-2025-60212	high	8.8/10	WordPress VEDA Theme <= 4.2 - PHP Object Injection Vulnerability	Oct 22, 2025 8mo ago
CVE-2025-60210	critical	9.8/10	WordPress Everest Forms - Frontend Listing plugin <= 1.0.5 - PHP Object Injection Vulnerability	Oct 22, 2025 8mo ago
CVE-2025-60209	critical	9.8/10	WordPress Connector for Gravity Forms and Google Sheets plugin <= 1.2.6 - PHP Object Injection vulnerability	Oct 22, 2025 8mo ago
CVE-2025-60039	critical	9.8/10	WordPress Noisa theme <= 2.6.0 - PHP Object Injection vulnerability	Oct 22, 2025 8mo ago
CVE-2025-52740	high	8.8/10	WordPress Boldermail Plugin <= 2.4.0 - PHP Object Injection Vulnerability	Oct 22, 2025 8mo ago
CVE-2025-52737	high	8.8/10	WordPress WP Store Locator plugin <= 2.2.260 - PHP Object Injection vulnerability	Oct 22, 2025 8mo ago
CVE-2025-49380	critical	9.8/10	WordPress WooCommerce Vehicle Parts Finder plugin <= 3.7 - PHP Object Injection vulnerability	Oct 22, 2025 8mo ago
CVE-2025-32283	high	8.8/10	WordPress Solar Energy theme <= 3.5 - PHP Object Injection Vulnerability	Oct 22, 2025 8mo ago
CVE-2025-31634	high	8.8/10	WordPress Insurance theme <= 3.5 - PHP Object Injection Vulnerability	Oct 22, 2025 8mo ago
CVE-2016-15048	critical	10.0/10	AMTT HiBOS Command Injection RCE via server_ping.php	Oct 22, 2025 8mo ago
CVE-2025-62598	medium	6.9/10	WeGIA Vulnerable to Reflected Cross-Site Scripting via Endpoint 'pessoa/editar_info_pessoal.php' Parameter 'action'	Oct 21, 2025 8mo ago
CVE-2025-62597	medium	6.9/10	WeGIA Vulnerable to Reflected Cross-Site Scripting via Endpoint 'pessoa/editar_info_pessoal.php' Parameter 'sql'	Oct 21, 2025 8mo ago
CVE-2025-62429	high	7.2/10	ClipBucket v5 executes arbitrary PHP code	Oct 20, 2025 8mo ago
CVE-2025-11944	medium	5.1/10	givanz Vvveb Raw SQL import.php import sql injection	Oct 19, 2025 8mo ago
CVE-2025-11941	medium	5.3/10	e107 CMS Avatar image.php path traversal	Oct 19, 2025 8mo ago
CVE-2025-11939	medium	5.1/10	ChurchCRM Backup Restore RestoreJob.php path traversal	Oct 19, 2025 8mo ago
CVE-2025-11938	medium	6.3/10	ChurchCRM setup.php deserialization	Oct 19, 2025 8mo ago
CVE-2017-20208	critical	9.8/10	RegistrationMagic - Custom Registration Forms <= 3.7.9.2 - PHP Object Injection	Oct 18, 2025 8mo ago
CVE-2017-20207	critical	9.8/10	Flickr Gallery <= 1.5.2 - Unauthenticated PHP Object Injection	Oct 18, 2025 8mo ago
CVE-2017-20206	critical	9.8/10	Appointments <= 2.2.1 - Unauthenticated PHP Object Injection	Oct 18, 2025 8mo ago
CVE-2025-58051	medium	6.5/10	Nextcloud Tables app allowed to include local file via PhpSpreadsheet when importing a table	Oct 16, 2025 8mo ago
CVE-2023-7304	critical	9.3/10	Ruijie RG-UAC nmc_sync.php Command Injection	Oct 15, 2025 8mo ago
CVE-2025-11736	medium	6.9/10	itsourcecode Online Examination System index.php sql injection	Oct 14, 2025 8mo ago
CVE-2025-62361	medium	4.8/10	WeGIA Open Redirect Vulnerability in `control.php` endpoint `nextPage` parameter (metodo=listarTodos nomeClasse=AlmoxarifeControle)	Oct 13, 2025 8mo ago