Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,749

All time

Critical · Active

12,050

CVSS ≥ 9.0

New · 14 days

2,442

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 2401–2430 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-62008	high	8.8/10	WordPress Product Table For WooCommerce plugin <= 1.2.4 - PHP Object Injection vulnerability	Oct 22, 2025 10mo ago
CVE-2025-60238	critical	9.8/10	WordPress UNIVERSAM plugin <= 9.04.02 - PHP Object Injection vulnerability	Oct 22, 2025 10mo ago
CVE-2025-60234	high	8.8/10	WordPress Single Property theme <= 2.8 - PHP Object Injection vulnerability	Oct 22, 2025 10mo ago
CVE-2025-60232	critical	9.8/10	WordPress KBx Pro Ultimate plugin <= 8.0.5 - PHP Object Injection vulnerability	Oct 22, 2025 10mo ago
CVE-2025-60228	high	8.8/10	WordPress Knowledge Base theme <= 2.9 - PHP Object Injection vulnerability	Oct 22, 2025 10mo ago
CVE-2025-60226	critical	9.8/10	WordPress White Rabbit theme <= 1.5.2 - PHP Object Injection vulnerability	Oct 22, 2025 10mo ago
CVE-2025-60225	critical	9.8/10	WordPress BugsPatrol theme <= 1.5.0 - PHP Object Injection vulnerability	Oct 22, 2025 10mo ago
CVE-2025-60224	critical	9.8/10	WordPress Subscribe to Download plugin <= 2.0.9 - PHP Object Injection vulnerability	Oct 22, 2025 10mo ago
CVE-2025-60221	critical	9.8/10	WordPress Captivate Sync Plugin <= 3.0.3 - PHP Object Injection Vulnerability	Oct 22, 2025 10mo ago
CVE-2025-60216	critical	9.8/10	WordPress Addison theme < 1.4.8 - PHP Object Injection vulnerability	Oct 22, 2025 10mo ago
CVE-2025-60215	high	8.8/10	WordPress Kriya theme <= 3.4 - PHP Object Injection Vulnerability	Oct 22, 2025 10mo ago
CVE-2025-60214	critical	9.8/10	WordPress Goldenblatt theme < 1.3.0 - PHP Object Injection vulnerability	Oct 22, 2025 10mo ago
CVE-2025-60213	critical	9.8/10	WordPress Scape theme <= 1.5.13 - PHP Object Injection vulnerability	Oct 22, 2025 10mo ago
CVE-2025-60212	high	8.8/10	WordPress VEDA Theme <= 4.2 - PHP Object Injection Vulnerability	Oct 22, 2025 10mo ago
CVE-2025-60210	critical	9.8/10	WordPress Everest Forms - Frontend Listing plugin <= 1.0.5 - PHP Object Injection Vulnerability	Oct 22, 2025 10mo ago
CVE-2025-60209	critical	9.8/10	WordPress Connector for Gravity Forms and Google Sheets plugin <= 1.2.6 - PHP Object Injection vulnerability	Oct 22, 2025 10mo ago
CVE-2025-60039	critical	9.8/10	WordPress Noisa theme <= 2.6.0 - PHP Object Injection vulnerability	Oct 22, 2025 10mo ago
CVE-2025-52740	high	8.8/10	WordPress Boldermail Plugin <= 2.4.0 - PHP Object Injection Vulnerability	Oct 22, 2025 10mo ago
CVE-2025-52737	high	8.8/10	WordPress WP Store Locator plugin <= 2.2.260 - PHP Object Injection vulnerability	Oct 22, 2025 10mo ago
CVE-2025-49380	critical	9.8/10	WordPress WooCommerce Vehicle Parts Finder plugin <= 3.7 - PHP Object Injection vulnerability	Oct 22, 2025 10mo ago
CVE-2025-32283	high	8.8/10	WordPress Solar Energy theme <= 3.5 - PHP Object Injection Vulnerability	Oct 22, 2025 10mo ago
CVE-2025-31634	high	8.8/10	WordPress Insurance theme <= 3.5 - PHP Object Injection Vulnerability	Oct 22, 2025 10mo ago
CVE-2016-15048	critical	10.0/10	AMTT HiBOS Command Injection RCE via server_ping.php	Oct 22, 2025 10mo ago
CVE-2025-62598	medium	6.9/10	WeGIA Vulnerable to Reflected Cross-Site Scripting via Endpoint 'pessoa/editar_info_pessoal.php' Parameter 'action'	Oct 21, 2025 10mo ago
CVE-2025-62597	medium	6.9/10	WeGIA Vulnerable to Reflected Cross-Site Scripting via Endpoint 'pessoa/editar_info_pessoal.php' Parameter 'sql'	Oct 21, 2025 10mo ago
CVE-2025-62429	high	7.2/10	ClipBucket v5 executes arbitrary PHP code	Oct 20, 2025 10mo ago
CVE-2025-11944	medium	5.1/10	givanz Vvveb Raw SQL import.php import sql injection	Oct 19, 2025 10mo ago
CVE-2025-11941	medium	5.3/10	e107 CMS Avatar image.php path traversal	Oct 19, 2025 10mo ago
CVE-2025-11939	medium	5.1/10	ChurchCRM Backup Restore RestoreJob.php path traversal	Oct 19, 2025 10mo ago
CVE-2025-11938	medium	6.3/10	ChurchCRM setup.php deserialization	Oct 19, 2025 10mo ago