Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

336,983

All time

Critical · Active

10,649

CVSS ≥ 9.0

New · 14 days

1,594

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 2311–2340 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-11351	medium	5.3/10	code-projects Online Hotel Reservation System editpicexec.php unrestricted upload	Oct 7, 2025 9mo ago
CVE-2025-11350	medium	6.9/10	Campcodes Online Apartment Visitor Management System bwdates-reports-details.php sql injection	Oct 7, 2025 9mo ago
CVE-2025-11349	medium	6.9/10	Campcodes Online Apartment Visitor Management System search-visitor.php sql injection	Oct 7, 2025 9mo ago
CVE-2025-11348	medium	6.9/10	Campcodes Online Apartment Visitor Management System index.php sql injection	Oct 7, 2025 9mo ago
CVE-2025-11347	medium	6.9/10	code-projects Student Crud Operation Add Student Page/Edit Student add.php move_uploaded_file unrestricted upload	Oct 7, 2025 9mo ago
CVE-2025-11343	medium	6.9/10	code-projects Student Crud Operation delete.php sql injection	Oct 6, 2025 9mo ago
CVE-2025-11342	medium	5.1/10	code-projects Online Course Registration edit-course.php sql injection	Oct 6, 2025 9mo ago
CVE-2025-11334	medium	6.9/10	Campcodes Online Apartment Visitor Management System visitor-detail.php sql injection	Oct 6, 2025 9mo ago
CVE-2025-11333	medium	4.8/10	langleyfcu Online Banking System Add Customer customer_add_action.php cross site scripting	Oct 6, 2025 9mo ago
CVE-2025-11332	medium	5.1/10	CmsEasy URL view.php cross site scripting	Oct 6, 2025 9mo ago
CVE-2025-11331	medium	5.1/10	IdeaCMS Website Name Config.php command injection	Oct 6, 2025 9mo ago
CVE-2025-11330	medium	5.3/10	PHPGurukul Beauty Parlour Management System sales-reports-detail.php sql injection	Oct 6, 2025 9mo ago
CVE-2025-11329	medium	6.9/10	code-projects Online Course Registration manage-students.php sql injection	Oct 6, 2025 9mo ago
CVE-2025-11319	medium	5.3/10	nahiduddinahammed Hospital-Management-System-Website delete.php sql injection	Oct 6, 2025 9mo ago
CVE-2025-11291	medium	5.3/10	ixmaps website2017 HTTP GET Request map.php cross site scripting	Oct 5, 2025 9mo ago
CVE-2025-59943	high	8.1/10	phpMyFAQ duplicate email registration allows multiple accounts with the same email	Oct 3, 2025 9mo ago
CVE-2025-61665	high	8.7/10	WeGIA: Broken Access Control in `get_relatorios_socios.php` Endpoint	Oct 2, 2025 9mo ago
CVE-2025-61606	medium	4.8/10	WeGIA: Open Redirect Vulnerability in `control.php` endpoint	Oct 2, 2025 9mo ago
CVE-2025-61605	critical	9.4/10	WeGIA: SQL Injection (Blind Time-Based) Vulnerability in /pet/profile_pet.php Endpoint	Oct 2, 2025 9mo ago
CVE-2025-61604	high	7.1/10	WeGIA: Cross-Site Request Forgery (CSRF) Vulnerability in `control.php` Endpoint	Oct 2, 2025 9mo ago
CVE-2025-58769	low	3.3/10	auth0-PHP: Improper File Type Handling in Bulk User Import	Oct 1, 2025 9mo ago
CVE-2025-34182	medium	5.1/10	Deciso OPNsense < 25.7.4 /interfaces_ppps_edit.php ptpid Stored XSS	Oct 1, 2025 9mo ago
CVE-2025-34228	high	8.8/10	Vasion Print (formerly PrinterLogic) SSRF via Lexmark update.php	Sep 29, 2025 9mo ago
CVE-2025-34229	medium	6.9/10	Vasion Print (formerly PrinterLogic) Blind SSRF via HP installApp.php	Sep 29, 2025 9mo ago
CVE-2025-34230	medium	6.9/10	Vasion Print (formerly PrinterLogic) Blind SSRF via HP log_off_single_sign_on.php	Sep 29, 2025 9mo ago
CVE-2025-34231	high	8.8/10	Vasion Print (formerly PrinterLogic) SSRF via HP badgeSetup.php	Sep 29, 2025 9mo ago
CVE-2025-34232	medium	6.9/10	Vasion Print (formerly PrinterLogic) Blind SSRF via Lexmark dellCheck.php	Sep 29, 2025 9mo ago
CVE-2025-11141	medium	5.1/10	Ruijie NBR2100G-E branch_passw.php listAction os command injection	Sep 29, 2025 9mo ago
CVE-2025-11138	medium	5.3/10	mirweiye wenkucms common.php createPathOne os command injection	Sep 29, 2025 9mo ago
CVE-2025-11136	medium	5.1/10	YiFang CMS Backend File.php webUploader unrestricted upload	Sep 29, 2025 9mo ago