Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

337,001

All time

Critical · Active

10,649

CVSS ≥ 9.0

New · 14 days

1,611

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 2581–2610 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-10253	medium	5.1/10	openDCIM SVG File uploadifive.php cross site scripting	Sep 11, 2025 9mo ago
CVE-2025-10251	medium	5.3/10	FoxCMS Images.php batchCope sql injection	Sep 11, 2025 9mo ago
CVE-2025-40696	medium	5.1/10	Cross Site Scripting in PHPGurukul Online Fire Reporting System	Sep 11, 2025 9mo ago
CVE-2025-40695	medium	5.1/10	Cross Site Scripting in PHPGurukul Online Fire Reporting System	Sep 11, 2025 9mo ago
CVE-2025-40694	medium	5.1/10	Cross Site Scripting in PHPGurukul Online Fire Reporting System	Sep 11, 2025 9mo ago
CVE-2025-40693	medium	5.1/10	Cross Site Scripting in PHPGurukul Online Fire Reporting System	Sep 11, 2025 9mo ago
CVE-2025-40692	critical	9.3/10	SQL injection in PHPGurukul Online Fire Reporting System	Sep 11, 2025 9mo ago
CVE-2025-40691	critical	9.3/10	SQL injection in PHPGurukul Online Fire Reporting System	Sep 11, 2025 9mo ago
CVE-2025-40690	critical	9.3/10	SQL injection in PHPGurukul Online Fire Reporting System	Sep 11, 2025 9mo ago
CVE-2025-40689	critical	9.3/10	SQL injection in PHPGurukul Online Fire Reporting System	Sep 11, 2025 9mo ago
CVE-2025-40687	critical	9.3/10	SQL injection in PHPGurukul Online Fire Reporting System	Sep 11, 2025 9mo ago
CVE-2025-9632	medium	4.3/10	PhpList Subber <= 1.1 - Cross-Site Request Forgery	Sep 11, 2025 9mo ago
CVE-2025-8417	high	8.1/10	Catalog Importer, Scraper & Crawler <= 5.1.4 - Unauthenticated PHP Code Injection	Sep 11, 2025 9mo ago
CVE-2025-10246	medium	5.1/10	lokibhardwaj PHP-Code-For-Unlimited-File-Upload f.php cross site scripting	Sep 11, 2025 9mo ago
CVE-2025-10233	medium	5.3/10	kalcaddle kodbox editor.class.php fileSave path traversal	Sep 10, 2025 9mo ago
CVE-2025-10232	medium	5.3/10	299ko FileManagerAPIController.php delete path traversal	Sep 10, 2025 9mo ago
CVE-2025-5005	medium	6.9/10	Shanghai Lingdang Information Technology Lingdang CRM index_event.php server-side request forgery	Sep 9, 2025 9mo ago
CVE-2025-53303	high	8.8/10	WordPress ThemeMove Core Plugin <= 1.4.2 - PHP Object Injection Vulnerability	Sep 9, 2025 9mo ago
CVE-2025-48101	high	8.8/10	WordPress Constant Contact for WordPress Plugin <= 4.1.1 - PHP Object Injection Vulnerability	Sep 9, 2025 9mo ago
CVE-2025-47579	critical	9.0/10	WordPress Photography Theme <= 7.7.2 - PHP Object Injection Vulnerability	Sep 9, 2025 9mo ago
CVE-2025-10122	medium	5.1/10	Maccms10 Database.php rep sql injection	Sep 9, 2025 10mo ago
CVE-2025-10118	medium	6.9/10	itsourcecode E-Logbook with Health Monitoring System for COVID-19 login.php sql injection	Sep 9, 2025 10mo ago
CVE-2025-10117	medium	5.1/10	SourceCodester Simple To-Do List System Add New Task fetch_tasks.php cross site scripting	Sep 9, 2025 10mo ago
CVE-2025-10116	medium	6.9/10	SiempreCMS file_upload.php unrestricted upload	Sep 9, 2025 10mo ago
CVE-2025-10115	medium	6.9/10	SiempreCMS user_search_ajax.php sql injection	Sep 9, 2025 10mo ago
CVE-2025-10114	medium	6.9/10	PHPGurukul Small CRM profile.php sql injection	Sep 9, 2025 10mo ago
CVE-2025-10113	medium	6.9/10	itsourcecode Student Information Management System index.php sql injection	Sep 9, 2025 10mo ago
CVE-2025-10112	medium	6.9/10	itsourcecode Student Information Management System index.php sql injection	Sep 8, 2025 10mo ago
CVE-2025-10111	medium	6.9/10	itsourcecode Student Information Management System index.php sql injection	Sep 8, 2025 10mo ago
CVE-2025-58454	high	8.9/10	WeGIA vulnerable to Blind Time-Based SQL Injection in endpoint 'listar_despachos.php' parameter 'id_memorando'	Sep 8, 2025 10mo ago