Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,158

All time

Critical · Active

11,973

CVSS ≥ 9.0

New · 14 days

2,676

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 211–240 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-14756	medium	6.9/10	code-projects Hotel and Tourism Reservation Tour Management add_tour.php sql injection	Jul 5, 2026 1mo ago
CVE-2026-14751	medium	5.3/10	mjperpinosa stumasy search_scratch_data.php search_scratch_data sql injection	Jul 5, 2026 1mo ago
CVE-2026-14750	medium	6.9/10	mjperpinosa stumasy accessing_dictionary_authorization.php accessing_dictionary_authorization sql injection	Jul 5, 2026 1mo ago
CVE-2026-14746	medium	6.9/10	code-projects Real State Services addprojectrent.php sql injection	Jul 5, 2026 1mo ago
CVE-2026-14745	medium	6.9/10	code-projects Real State Services single-list_rent.php sql injection	Jul 5, 2026 1mo ago
CVE-2026-14744	medium	6.9/10	code-projects Real State Services normalHomeRent.php sql injection	Jul 5, 2026 1mo ago
CVE-2026-14736	medium	6.9/10	Ruijie RG-UAC user_auth_commit.php unrestricted upload	Jul 5, 2026 1mo ago
CVE-2026-14735	medium	6.9/10	code-projects Smart Parking System parkings.php sql injection	Jul 5, 2026 1mo ago
CVE-2026-14734	medium	6.9/10	SourceCodester Class and Exam Timetabling System edit_product.php sql injection	Jul 5, 2026 1mo ago
CVE-2026-14730	medium	5.3/10	itsourcecode Hospital Management System patientprofile.php sql injection	Jul 5, 2026 1mo ago
CVE-2026-14717	medium	5.3/10	itsourcecode Hospital Management System patientlogin.php sql injection	Jul 5, 2026 1mo ago
CVE-2026-14713	medium	6.9/10	SourceCodester Pizzafy E-Commerce System ajax.php confirm_order sql injection	Jul 5, 2026 1mo ago
CVE-2026-14706	medium	5.3/10	code-projects Online Examination Quiz Creation Feature update.php sql injection	Jul 5, 2026 1mo ago
CVE-2026-14705	medium	6.9/10	code-projects Online Examination head.php sql injection	Jul 5, 2026 1mo ago
CVE-2026-14703	medium	5.3/10	itsourcecode Hospital Management System patientorder.php sql injection	Jul 5, 2026 1mo ago
CVE-2026-14698	medium	5.3/10	SourceCodester Syllabus-Aligned Learning Management and Examination System upload_files.php unrestricted upload	Jul 5, 2026 1mo ago
CVE-2026-14695	medium	6.9/10	SourceCodester Multi-Vendor Online Grocery Management System Registration Users.php save_client sql injection	Jul 5, 2026 1mo ago
CVE-2026-14694	medium	5.3/10	SourceCodester Multi-Vendor Online Grocery Management System POST Parameter Master.php cancel_order sql injection	Jul 5, 2026 1mo ago
CVE-2026-14693	medium	5.3/10	SourceCodester Multi-Vendor Online Grocery Management System Master.php cancel_order improper authorization	Jul 5, 2026 1mo ago
CVE-2026-14692	medium	5.3/10	SourceCodester Multi-Vendor Online Grocery Management System POST Parameter Master.php save_shop_type sql injection	Jul 5, 2026 1mo ago
CVE-2026-14691	medium	5.3/10	SourceCodester Multi-Vendor Online Grocery Management System Setting SystemSettings.php update_settings_info code injection	Jul 5, 2026 1mo ago
CVE-2026-14690	medium	6.9/10	SourceCodester Multi-Vendor Online Grocery Management System Users.php save_users improper authorization	Jul 5, 2026 1mo ago
CVE-2026-14689	medium	5.3/10	CodeAstro Apartment Visitor Management System add-apartment.php sql injection	Jul 5, 2026 1mo ago
CVE-2026-14657	medium	5.3/10	code-projects Assessment Management Database Query marking-scheme.php sql injection	Jul 4, 2026 1mo ago
CVE-2026-14656	medium	5.3/10	code-projects Assessment Management remove-user.php cross site scripting	Jul 4, 2026 1mo ago
CVE-2026-14655	medium	4.8/10	code-projects Assessment Management view-users.php cross site scripting	Jul 4, 2026 1mo ago
CVE-2026-14654	medium	6.9/10	SourceCodester Simple and Nice Shopping Cart Script girlsproductdeletequery.php sql injection	Jul 4, 2026 1mo ago
CVE-2026-14649	medium	6.9/10	code-projects Online Voting System saveVote.php test_input sql injection	Jul 4, 2026 1mo ago
CVE-2026-14648	medium	6.9/10	code-projects Online Voting System Login authentication.php test_input sql injection	Jul 4, 2026 1mo ago
CVE-2026-14640	medium	6.9/10	CodeAstro Apartment Visitor Management System Login index.php sql injection	Jul 4, 2026 1mo ago