Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,749

All time

Critical · Active

12,050

CVSS ≥ 9.0

New · 14 days

2,437

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 2431–2460 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-11938	medium	6.3/10	ChurchCRM setup.php deserialization	Oct 19, 2025 10mo ago
CVE-2017-20208	critical	9.8/10	RegistrationMagic - Custom Registration Forms <= 3.7.9.2 - PHP Object Injection	Oct 18, 2025 10mo ago
CVE-2017-20207	critical	9.8/10	Flickr Gallery <= 1.5.2 - Unauthenticated PHP Object Injection	Oct 18, 2025 10mo ago
CVE-2017-20206	critical	9.8/10	Appointments <= 2.2.1 - Unauthenticated PHP Object Injection	Oct 18, 2025 10mo ago
CVE-2025-58051	medium	6.5/10	Nextcloud Tables app allowed to include local file via PhpSpreadsheet when importing a table	Oct 16, 2025 10mo ago
CVE-2023-7304	critical	9.3/10	Ruijie RG-UAC nmc_sync.php Command Injection	Oct 15, 2025 10mo ago
CVE-2025-11736	medium	6.9/10	itsourcecode Online Examination System index.php sql injection	Oct 14, 2025 10mo ago
CVE-2025-62361	medium	4.8/10	WeGIA Open Redirect Vulnerability in `control.php` endpoint `nextPage` parameter (metodo=listarTodos nomeClasse=AlmoxarifeControle)	Oct 13, 2025 10mo ago
CVE-2025-62360	critical	9.4/10	WeGIA SQL Injection via 'id_dependente' param at endpoint `/html/funcionario/dependente_documento.php`	Oct 13, 2025 10mo ago
CVE-2025-62358	medium	5.4/10	WeGIA Reflected XSS to Account TakeOver at /html/configuracao/configuracao_geral.php via log parameter	Oct 13, 2025 10mo ago
CVE-2025-62179	high	8.6/10	WeGIA SQL Injection via 'cpf' param at endpoint `/html/funcionario/cadastro_funcionario_pessoa_existente.php`	Oct 13, 2025 10mo ago
CVE-2025-62178	low	3.5/10	WeGIA Cross-Site Scripting (XSS) Reflected endpoint '/html/atendido/cadastro_atendido_parentesco_pessoa_nova.php' parameter 'idatendido'	Oct 13, 2025 10mo ago
CVE-2025-62177	high	8.6/10	WeGIA vulnerable to SQL Injection via 'id_funcionario' param at endpoint `/html/funcionario/dependente_listar.php`	Oct 13, 2025 10mo ago
CVE-2025-11668	medium	5.1/10	code-projects Automated Voting System update_user.php sql injection	Oct 13, 2025 10mo ago
CVE-2025-11667	medium	5.3/10	code-projects Automated Voting System add_candidate_modal.php. sql injection	Oct 13, 2025 10mo ago
CVE-2025-11664	medium	5.1/10	Campcodes Online Beauty Parlor Management System search-appointment.php sql injection	Oct 13, 2025 10mo ago
CVE-2025-11663	medium	5.1/10	Campcodes Online Beauty Parlor Management System manage-services.php sql injection	Oct 13, 2025 10mo ago
CVE-2025-11662	medium	6.9/10	SourceCodester Best Salon Management System booking.php sql injection	Oct 13, 2025 10mo ago
CVE-2025-11660	medium	6.9/10	ProjectsAndPrograms School Management System uploadSllyabus.php unrestricted upload	Oct 13, 2025 10mo ago
CVE-2025-11659	medium	6.9/10	ProjectsAndPrograms School Management System uploadNotes.php unrestricted upload	Oct 13, 2025 10mo ago
CVE-2025-11658	medium	6.9/10	ProjectsAndPrograms School Management System changeSllyabus.php unrestricted upload	Oct 13, 2025 10mo ago
CVE-2025-11657	medium	6.9/10	ProjectsAndPrograms School Management System createNotice.php unrestricted upload	Oct 13, 2025 10mo ago
CVE-2025-11656	medium	6.9/10	ProjectsAndPrograms School Management System editNotes.php unrestricted upload	Oct 13, 2025 10mo ago
CVE-2025-11654	medium	6.9/10	yousaf530 Inferno Online Clothing Store log.php sql injection	Oct 13, 2025 10mo ago
CVE-2025-11628	medium	5.1/10	jimit105 Project-Online-Shopping-Website Product Inventory delete.php sql injection	Oct 12, 2025 10mo ago
CVE-2025-11615	medium	6.9/10	SourceCodester Best Salon Management System add_invoice.php sql injection	Oct 11, 2025 10mo ago
CVE-2025-11614	medium	6.9/10	SourceCodester Best Salon Management System edit-appointment.php sql injection	Oct 11, 2025 10mo ago
CVE-2025-11613	medium	5.3/10	code-projects Simple Food Ordering System addcategory.php sql injection	Oct 11, 2025 10mo ago
CVE-2025-11612	medium	5.3/10	code-projects Simple Food Ordering System addproduct.php sql injection	Oct 11, 2025 10mo ago
CVE-2025-11611	medium	5.3/10	SourceCodester Simple Inventory System user.php sql injection	Oct 11, 2025 10mo ago