Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,612

All time

Critical · Active

12,039

CVSS ≥ 9.0

New · 14 days

2,351

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 2281–2310 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-12939	medium	5.3/10	SourceCodester Interview Management System addCandidate.php sql injection	Nov 10, 2025 9mo ago
CVE-2025-12938	medium	6.9/10	projectworlds Online Admission System process_login.php sql injection	Nov 10, 2025 9mo ago
CVE-2025-12933	medium	5.3/10	SourceCodester Baby Care System updatewelcome.php sql injection	Nov 10, 2025 9mo ago
CVE-2025-12932	medium	5.1/10	SourceCodester Baby Care System admin.php sql injection	Nov 10, 2025 9mo ago
CVE-2025-12931	medium	5.3/10	SourceCodester Food Ordering System edit-orders.php sql injection	Nov 10, 2025 9mo ago
CVE-2025-12930	medium	5.3/10	SourceCodester Food Ordering System view-ticket.php sql injection	Nov 10, 2025 9mo ago
CVE-2025-12929	medium	6.9/10	SourceCodester Survey Application System LoginRegistration.php update_user sql injection	Nov 10, 2025 9mo ago
CVE-2025-12928	medium	6.9/10	code-projects Online Job Search Engine login.php sql injection	Nov 10, 2025 9mo ago
CVE-2025-12927	medium	5.1/10	DedeBIZ archives_add.php sql injection	Nov 10, 2025 9mo ago
CVE-2025-12926	medium	5.3/10	SourceCodester Farm Management System review.php sql injection	Nov 10, 2025 9mo ago
CVE-2025-12920	medium	4.8/10	qianfox FoxCMS Product.php edit cross site scripting	Nov 9, 2025 9mo ago
CVE-2025-12913	medium	5.1/10	code-projects Responsive Hotel Site roomdel.php sql injection	Nov 8, 2025 9mo ago
CVE-2025-12099	high	7.2/10	Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.3.8 - Authenticated (Administrator+) PHP Object Injection via 'import_all_courses'	Nov 8, 2025 9mo ago
CVE-2025-12873	medium	5.1/10	Campcodes School File Management update_user.php sql injection	Nov 7, 2025 9mo ago
CVE-2025-12862	medium	5.3/10	projectworlds Online Notes Sharing Platform userprofile.php unrestricted upload	Nov 7, 2025 9mo ago
CVE-2025-12861	medium	5.1/10	DedeBIZ spec_add.php sql injection	Nov 7, 2025 9mo ago
CVE-2025-12860	medium	5.1/10	DedeBIZ freelist_main.php sql injection	Nov 7, 2025 9mo ago
CVE-2025-12859	medium	5.1/10	DedeBIZ templets_one_edit.php sql injection	Nov 7, 2025 9mo ago
CVE-2025-12857	medium	5.1/10	code-projects Responsive Hotel Site roombook.php sql injection	Nov 7, 2025 9mo ago
CVE-2025-12856	medium	5.1/10	code-projects Responsive Hotel Site reservation.php sql injection	Nov 7, 2025 9mo ago
CVE-2025-12855	medium	5.1/10	code-projects Responsive Hotel Site newsletterdel.php sql injection	Nov 7, 2025 9mo ago
CVE-2025-12853	medium	5.1/10	SourceCodester Best House Rental Management System admin_class.php delete_house sql injection	Nov 7, 2025 9mo ago
CVE-2025-62035	high	8.8/10	WordPress Togo theme < 1.0.4 - PHP Object Injection vulnerability	Nov 6, 2025 9mo ago
CVE-2025-60245	critical	9.8/10	WordPress WP User Manager plugin <= 2.9.12 - PHP Object Injection vulnerability	Nov 6, 2025 9mo ago
CVE-2025-58998	critical	9.8/10	WordPress s2Member Plugin <= 250701 - PHP Object Injection Vulnerability	Nov 6, 2025 9mo ago
CVE-2025-58619	high	8.8/10	WordPress Falang multilanguage Plugin <= 1.3.65 - PHP Object Injection Vulnerability	Nov 6, 2025 9mo ago
CVE-2025-53586	high	8.8/10	WordPress WeMusic Theme <= 1.9.1 - PHP Object Injection Vulnerability	Nov 6, 2025 9mo ago
CVE-2025-49393	critical	9.8/10	WordPress Sign-up Sheets Plugin <= 2.3.2 - PHP Object Injection Vulnerability	Nov 6, 2025 9mo ago
CVE-2025-49386	high	8.8/10	WordPress Preserve Code Formatting Plugin <= 4.0.1 - PHP Object Injection Vulnerability	Nov 6, 2025 9mo ago
CVE-2025-48086	medium	5.5/10	WordPress Ajax Search Lite plugin <= 4.13.3 - PHP Object Injection vulnerability	Nov 6, 2025 9mo ago