Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

336,998

All time

Critical · Active

10,649

CVSS ≥ 9.0

New · 14 days

1,608

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 2551–2580 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-10409	medium	5.3/10	SourceCodester Student Grading System rms.php sql injection	Sep 14, 2025 9mo ago
CVE-2025-10408	medium	5.3/10	SourceCodester Student Grading System edit_user.php sql injection	Sep 14, 2025 9mo ago
CVE-2025-10407	medium	5.3/10	SourceCodester Student Grading System view_user.php sql injection	Sep 14, 2025 9mo ago
CVE-2025-10405	medium	6.9/10	itsourcecode Baptism Information Management System listbaptism.php sql injection	Sep 14, 2025 9mo ago
CVE-2025-10404	medium	6.9/10	itsourcecode Baptism Information Management System rptbaptismal.php sql injection	Sep 14, 2025 9mo ago
CVE-2025-10403	medium	6.9/10	PHPGurukul Beauty Parlour Management System view-enquiry.php sql injection	Sep 14, 2025 9mo ago
CVE-2025-10402	medium	6.9/10	PHPGurukul Beauty Parlour Management System readenq.php sql injection	Sep 14, 2025 9mo ago
CVE-2025-10400	medium	5.3/10	SourceCodester Food Ordering Management System ticket-message.php sql injection	Sep 14, 2025 9mo ago
CVE-2025-10396	medium	6.9/10	SourceCodester Pet Grooming Management Software edit_role.php sql injection	Sep 14, 2025 9mo ago
CVE-2025-10391	medium	5.3/10	CRMEB OutAccountServices.php testOutUrl server-side request forgery	Sep 14, 2025 9mo ago
CVE-2025-10390	medium	5.3/10	CRMEB UserAddressServices.php editAddress improper authorization	Sep 14, 2025 9mo ago
CVE-2025-10389	medium	5.3/10	CRMEB Administrator Password SystemAdminServices.php save improper authorization	Sep 14, 2025 9mo ago
CVE-2025-10387	medium	5.3/10	codesiddhant Jasmin Ransomware handshake.php sql injection	Sep 14, 2025 9mo ago
CVE-2025-10373	medium	5.1/10	Portabilis i-Educar educar_turma_tipo_cad.php cross site scripting	Sep 13, 2025 9mo ago
CVE-2025-10372	medium	5.1/10	Portabilis i-Educar educar_modulo_cad.php cross site scripting	Sep 13, 2025 9mo ago
CVE-2025-10371	medium	6.9/10	eCharge Hardy Barth Salia PLCC api.php unrestricted upload	Sep 13, 2025 9mo ago
CVE-2025-10370	medium	5.1/10	MiczFlor RPi-Jukebox-RFID userScripts.php cross site scripting	Sep 13, 2025 9mo ago
CVE-2025-10369	medium	5.1/10	MiczFlor RPi-Jukebox-RFID cardRegisterNew.php cross site scripting	Sep 13, 2025 9mo ago
CVE-2025-10368	medium	5.1/10	MiczFlor RPi-Jukebox-RFID manageFilesFolders.php cross site scripting	Sep 13, 2025 9mo ago
CVE-2025-10367	medium	5.1/10	MiczFlor RPi-Jukebox-RFID cardEdit.php cross site scripting	Sep 13, 2025 9mo ago
CVE-2025-10366	medium	5.1/10	MiczFlor RPi-Jukebox-RFID inc.setWlanIpMail.php cross site scripting	Sep 13, 2025 9mo ago
CVE-2025-10340	medium	5.1/10	WhatCD Gazelle Commit Message change_log.php cross site scripting	Sep 13, 2025 9mo ago
CVE-2025-10332	medium	5.1/10	cdevroe unmark info.php cross site scripting	Sep 13, 2025 9mo ago
CVE-2025-10331	medium	5.1/10	cdevroe unmark Marks.php cross site scripting	Sep 13, 2025 9mo ago
CVE-2025-10330	medium	5.3/10	cdevroe unmark searchform.php cross site scripting	Sep 12, 2025 9mo ago
CVE-2025-10329	medium	5.3/10	cdevroe unmark Marks.php server-side request forgery	Sep 12, 2025 9mo ago
CVE-2025-10328	medium	5.3/10	MiczFlor RPi-Jukebox-RFID playsinglefile.php os command injection	Sep 12, 2025 9mo ago
CVE-2025-10327	medium	5.3/10	MiczFlor RPi-Jukebox-RFID shuffle.php os command injection	Sep 12, 2025 9mo ago
CVE-2025-10326	medium	5.3/10	MiczFlor RPi-Jukebox-RFID single.php os command injection	Sep 12, 2025 9mo ago
CVE-2025-10253	medium	5.1/10	openDCIM SVG File uploadifive.php cross site scripting	Sep 11, 2025 9mo ago