Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

337,018

All time

Critical · Active

10,651

CVSS ≥ 9.0

New · 14 days

1,622

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 2641–2670 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-10062	medium	6.9/10	itsourcecode Student Information Management System login.php sql injection	Sep 6, 2025 10mo ago
CVE-2025-10032	medium	5.3/10	Campcodes Grocery Sales and Inventory System index.php cross site scripting	Sep 6, 2025 10mo ago
CVE-2025-10031	medium	6.9/10	Campcodes Grocery Sales and Inventory System ajax.php sql injection	Sep 6, 2025 10mo ago
CVE-2025-10030	medium	6.9/10	Campcodes Grocery Sales and Inventory System ajax.php sql injection	Sep 6, 2025 10mo ago
CVE-2025-10029	medium	5.1/10	itsourcecode POS Point of Sale System complex_header_2.php cross site scripting	Sep 6, 2025 10mo ago
CVE-2025-10028	medium	5.1/10	itsourcecode POS Point of Sale System 6776.php cross site scripting	Sep 6, 2025 10mo ago
CVE-2025-10027	medium	5.1/10	itsourcecode POS Point of Sale System 2512.php cross site scripting	Sep 5, 2025 10mo ago
CVE-2025-10026	medium	5.1/10	itsourcecode POS Point of Sale System -complex_header.php cross site scripting	Sep 5, 2025 10mo ago
CVE-2025-10025	medium	6.9/10	PHPGurukul Online Course Registration semester.php sql injection	Sep 5, 2025 10mo ago
CVE-2025-10012	medium	5.3/10	Portabilis i-Educar educar_historico_escolar_lst.php sql injection	Sep 5, 2025 10mo ago
CVE-2025-58839	high	7.2/10	WordPress eDS Responsive Menu Plugin <= 1.2 - PHP Object Injection Vulnerability	Sep 5, 2025 10mo ago
CVE-2025-9942	medium	5.3/10	CodeAstro Real Estate Management System submitproperty.php unrestricted upload	Sep 4, 2025 10mo ago
CVE-2025-9941	medium	5.3/10	CodeAstro Real Estate Management System register.php unrestricted upload	Sep 4, 2025 10mo ago
CVE-2025-9940	medium	5.1/10	CodeAstro Real Estate Management System feature.php cross site scripting	Sep 4, 2025 10mo ago
CVE-2025-9939	medium	5.1/10	CodeAstro Real Estate Management System propertyview.php cross site scripting	Sep 4, 2025 10mo ago
CVE-2025-9933	medium	6.9/10	PHPGurukul Beauty Parlour Management System view-appointment.php sql injection	Sep 3, 2025 10mo ago
CVE-2025-9932	medium	6.9/10	PHPGurukul Beauty Parlour Management System update-image.php sql injection	Sep 3, 2025 10mo ago
CVE-2025-9930	medium	6.9/10	1000projects Beauty Parlour Management System contact-us.php sql injection	Sep 3, 2025 10mo ago
CVE-2025-9929	medium	4.8/10	code-projects Responsive Blog Site blogs_view.php cross site scripting	Sep 3, 2025 10mo ago
CVE-2025-9928	medium	6.9/10	projectworlds Travel Management System viewcategory.php sql injection	Sep 3, 2025 10mo ago
CVE-2025-9927	medium	6.9/10	projectworlds Travel Management System viewpackage.php sql injection	Sep 3, 2025 10mo ago
CVE-2025-9926	medium	6.9/10	projectworlds Travel Management System viewsubcategory.php sql injection	Sep 3, 2025 10mo ago
CVE-2025-9925	medium	6.9/10	projectworlds Travel Management System detail.php sql injection	Sep 3, 2025 10mo ago
CVE-2025-9924	medium	6.9/10	projectworlds Travel Management System enquiry.php sql injection	Sep 3, 2025 10mo ago
CVE-2025-9923	medium	5.3/10	Campcodes Sales and Inventory System index.php cross site scripting	Sep 3, 2025 10mo ago
CVE-2025-9922	medium	5.3/10	Campcodes Sales and Inventory System index.php cross site scripting	Sep 3, 2025 10mo ago
CVE-2025-9921	medium	4.8/10	code-projects POS Pharmacy System products.php cross site scripting	Sep 3, 2025 10mo ago
CVE-2025-9920	medium	5.1/10	Campcodes Recruitment Management System index.php include file inclusion	Sep 3, 2025 10mo ago
CVE-2025-9919	medium	6.9/10	1000projects Beauty Parlour Management System bwdates-reports-details.php sql injection	Sep 3, 2025 10mo ago
CVE-2025-58644	high	7.2/10	WordPress LTL Freight Quotes - TQL Edition Plugin <= 1.2.6 - PHP Object Injection Vulnerability	Sep 3, 2025 10mo ago