Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,715

All time

Critical · Active

12,045

CVSS ≥ 9.0

New · 14 days

2,415

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 2371–2400 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-12282	medium	4.8/10	code-projects Client Details System manage-users.php cross site scripting	Oct 27, 2025 10mo ago
CVE-2025-12281	medium	4.8/10	code-projects Client Details System clientview.php cross site scripting	Oct 27, 2025 10mo ago
CVE-2025-12280	medium	4.8/10	code-projects Client Details System update-clients.php cross site scripting	Oct 27, 2025 10mo ago
CVE-2025-12279	medium	4.8/10	code-projects Client Details System welcome.php cross site scripting	Oct 27, 2025 10mo ago
CVE-2025-12277	medium	6.9/10	Abdullah-Hasan-Sajjad Online-School studentLogin.php sql injection	Oct 27, 2025 10mo ago
CVE-2025-12263	medium	5.3/10	code-projects Online Event Judging System edit_judge.php sql injection	Oct 27, 2025 10mo ago
CVE-2025-12262	medium	5.3/10	code-projects Online Event Judging System edit_criteria.php sql injection	Oct 27, 2025 10mo ago
CVE-2025-12261	medium	5.3/10	CodeAstro Gym Management System remove-announcement.php sql injection	Oct 27, 2025 10mo ago
CVE-2025-12257	medium	6.9/10	SourceCodester Online Student Result System view_result.php sql injection	Oct 27, 2025 10mo ago
CVE-2025-12256	medium	5.3/10	code-projects Online Event Judging System edit_contestant.php sql injection	Oct 27, 2025 10mo ago
CVE-2025-12255	medium	5.3/10	code-projects Online Event Judging System add_contestant.php sql injection	Oct 27, 2025 10mo ago
CVE-2025-12254	medium	5.3/10	code-projects Online Event Judging System add_judge.php sql injection	Oct 27, 2025 10mo ago
CVE-2025-12253	medium	6.9/10	AMTT Hotel Broadband Operation System get_expiredtime.php sql injection	Oct 27, 2025 10mo ago
CVE-2025-12252	medium	5.3/10	code-projects Online Event Judging System action.php sql injection	Oct 27, 2025 10mo ago
CVE-2025-12248	medium	6.9/10	CLTPHP search.html sql injection	Oct 27, 2025 10mo ago
CVE-2025-12244	medium	5.3/10	code-projects Simple E-Banking System register.php cross site scripting	Oct 27, 2025 10mo ago
CVE-2025-12243	medium	5.3/10	code-projects Client Details System GET Parameter welcome.php sql injection	Oct 27, 2025 10mo ago
CVE-2025-12242	medium	5.3/10	CodeAstro Gym Management System check-attendance.php sql injection	Oct 27, 2025 10mo ago
CVE-2025-12238	medium	5.3/10	code-projects Automated Voting System user.php sql injection	Oct 27, 2025 10mo ago
CVE-2025-12237	medium	6.9/10	projectworlds Advanced Library Management System index.php sql injection	Oct 27, 2025 10mo ago
CVE-2025-12227	medium	5.1/10	projectworlds Gate Pass Management System add-pass.php cross site scripting	Oct 27, 2025 10mo ago
CVE-2025-12226	medium	5.1/10	SourceCodester Best House Rental Management System admin_class.php save_house sql injection	Oct 27, 2025 10mo ago
CVE-2025-12224	medium	5.1/10	Iqbolshoh php-business-website contact.php cross site scripting	Oct 27, 2025 10mo ago
CVE-2025-12215	medium	6.9/10	projectworlds Online Shopping System login_submit.php sql injection	Oct 27, 2025 10mo ago
CVE-2025-12208	medium	6.9/10	SourceCodester Best House Rental Management System admin_class.php login2 sql injection	Oct 27, 2025 10mo ago
CVE-2025-12203	medium	5.3/10	givanz Vvveb Code Editor functions.php sanitizeFileName path traversal	Oct 27, 2025 10mo ago
CVE-2025-12202	medium	5.3/10	ajayrandhawa User-Management-PHP-MYSQL web cross-site request forgery	Oct 27, 2025 10mo ago
CVE-2025-12201	medium	5.1/10	ajayrandhawa User-Management-PHP-MYSQL User Management edit-user.php unrestricted upload	Oct 27, 2025 10mo ago
CVE-2025-62396	medium	5.3/10	Moodle: router (r.php) could expose application directories	Oct 23, 2025 10mo ago
CVE-2025-62025	critical	9.8/10	WordPress JobSearch plugin < 3.0.8 - PHP Object Injection vulnerability	Oct 22, 2025 10mo ago