Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,715

All time

Critical · Active

12,045

CVSS ≥ 9.0

New · 14 days

2,431

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 2311–2340 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-8871	medium	5.6/10	Everest Forms (Pro) <= 1.9.7 - Unauthenticated PHP Object Injection via PHAR Deserialization in Form Signature	Nov 5, 2025 9mo ago
CVE-2025-55155	medium	5.4/10	MantisBT: Authentication bypass for some passwords due to PHP type juggling	Nov 4, 2025 9mo ago
CVE-2025-47776	high	8.8/10	MantisBT: Authentication bypass for some passwords due to PHP type juggling	Nov 4, 2025 9mo ago
CVE-2025-12493	critical	9.8/10	ShopLentor <= 3.2.5 - Unauthenticated Local PHP File Inclusion via 'load_template'	Nov 4, 2025 9mo ago
CVE-2025-12617	medium	6.9/10	itsourcecode Billing System login_crud.php sql injection	Nov 3, 2025 9mo ago
CVE-2025-12616	medium	6.3/10	PHPGurukul News Portal settings.py insertion of sensitive information into debugging code	Nov 3, 2025 9mo ago
CVE-2025-12615	low	2.3/10	PHPGurukul News Portal settings.py hard-coded key	Nov 3, 2025 9mo ago
CVE-2025-12614	medium	5.1/10	SourceCodester Best House Rental Management System admin_class.php delete_payment sql injection	Nov 3, 2025 9mo ago
CVE-2025-12612	medium	5.3/10	Campcodes School Fees Payment Management System ajax.php sql injection	Nov 3, 2025 9mo ago
CVE-2025-12610	medium	5.1/10	CodeAstro Gym Management System view-progress-report.php sql injection	Nov 3, 2025 9mo ago
CVE-2025-12609	medium	5.1/10	CodeAstro Gym Management System update-progress.php sql injection	Nov 3, 2025 9mo ago
CVE-2025-12608	medium	6.9/10	itsourcecode Online Loan Management System manage_user.php sql injection	Nov 3, 2025 9mo ago
CVE-2025-12607	medium	6.9/10	itsourcecode Online Loan Management System manage_payment.php sql injection	Nov 3, 2025 9mo ago
CVE-2025-12606	medium	6.9/10	itsourcecode Online Loan Management System manage_borrower.php sql injection	Nov 2, 2025 9mo ago
CVE-2025-12605	medium	6.9/10	itsourcecode Online Loan Management System manage_loan.php sql injection	Nov 2, 2025 9mo ago
CVE-2025-12604	medium	6.9/10	itsourcecode Online Loan Management System load_fields.php sql injection	Nov 2, 2025 9mo ago
CVE-2025-12598	medium	5.1/10	SourceCodester Best House Rental Management System admin_class.php save_tenant sql injection	Nov 2, 2025 9mo ago
CVE-2025-12597	medium	5.1/10	SourceCodester Best House Rental Management System admin_class.php save_category sql injection	Nov 2, 2025 9mo ago
CVE-2025-12594	medium	5.1/10	code-projects Simple Online Hotel Reservation System add_account.php sql injection	Nov 2, 2025 9mo ago
CVE-2025-12593	medium	5.1/10	code-projects Simple Online Hotel Reservation System Photo edit_room.php unrestricted upload	Nov 2, 2025 9mo ago
CVE-2025-64356	medium	4.3/10	WordPress Insert PHP Code Snippet plugin <= 1.4.3 - Broken Access Control vulnerability	Oct 31, 2025 9mo ago
CVE-2020-36856	critical	9.4/10	Nagios XI < 5.6.14 Authenticated RCE command_test.php via address	Oct 30, 2025 9mo ago
CVE-2025-12378	medium	6.9/10	code-projects Simple Food Ordering System addproduct.php unrestricted upload	Oct 28, 2025 10mo ago
CVE-2025-12347	medium	5.3/10	MaxSite CMS save-file-ajax.php unrestricted upload	Oct 28, 2025 10mo ago
CVE-2025-12346	medium	5.3/10	MaxSite CMS HTTP Header uploads-require-maxsite.php unrestricted upload	Oct 28, 2025 10mo ago
CVE-2025-12342	medium	6.9/10	Serdar Bayram Ghost Hot Spot Login Auth.php sql injection	Oct 28, 2025 10mo ago
CVE-2025-12339	medium	6.9/10	Campcodes Retro Basketball Shoes Online Store admin_football.php sql injection	Oct 28, 2025 10mo ago
CVE-2025-12337	medium	6.9/10	Campcodes Retro Basketball Shoes Online Store admin_feature.php sql injection	Oct 28, 2025 10mo ago
CVE-2025-12336	medium	6.9/10	Campcodes Retro Basketball Shoes Online Store admin_index.php sql injection	Oct 28, 2025 10mo ago
CVE-2025-12335	medium	5.3/10	code-projects E-Commerce Website supplier_update.php cross site scripting	Oct 27, 2025 10mo ago