Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

703

Newly disclosed

Feed last synced

13 hrs ago

Data freshness

Showing 241–270 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-9609	medium	5.1/10	QianFox FoxCMS Admin.php edit password recovery	May 27, 2026 1mo ago
CVE-2026-9607	medium	5.3/10	itsourcecode Courier Management System parcel_list.php sql injection	May 27, 2026 1mo ago
CVE-2026-9606	medium	6.9/10	itsourcecode Courier Management System manage_user.php sql injection	May 26, 2026 1mo ago
CVE-2026-9603	medium	6.9/10	SourceCodester eDoc Doctor Appointment System delete-session.php authorization	May 26, 2026 1mo ago
CVE-2026-9584	medium	6.9/10	code-projects Project Management System Login chk.php sql injection	May 26, 2026 1mo ago
CVE-2026-9583	medium	5.3/10	SourceCodester CET Automated Grading System with AI Predictive Analytics SQL index.php information exposure	May 26, 2026 1mo ago
CVE-2026-9575	medium	6.9/10	itsourcecode Student Transcript Processing System index.php sql injection	May 26, 2026 1mo ago
CVE-2026-9574	medium	6.9/10	itsourcecode Student Transcript Processing System trans.php sql injection	May 26, 2026 1mo ago
CVE-2026-9573	medium	6.9/10	itsourcecode Student Transcript Processing System index.php sql injection	May 26, 2026 1mo ago
CVE-2026-46620	medium	6.5/10	e107: CSRF in comment.php moderation endpoints via token-optional validation in session_handler::check()	May 26, 2026 1mo ago
CVE-2026-45247	critical	9.3/10	Mirasvit Cache Warmer for Magento < 1.11.12 PHP Object Injection	May 26, 2026 1mo ago
CVE-2026-9542	medium	5.3/10	CodeAstro Leave Management System add_staff.php sql injection	May 26, 2026 1mo ago
CVE-2026-9528	medium	6.9/10	itsourcecode Electronic Judging System delete_judge.php sql injection	May 26, 2026 1mo ago
CVE-2026-9527	medium	5.3/10	itsourcecode Electronic Judging System judges.php cross site scripting	May 26, 2026 1mo ago
CVE-2026-9526	medium	6.9/10	itsourcecode Electronic Judging System edit_team.php sql injection	May 26, 2026 1mo ago
CVE-2026-9525	medium	6.9/10	itsourcecode Electronic Judging System edit_judge.php sql injection	May 26, 2026 1mo ago
CVE-2026-9518	medium	5.3/10	hemant6488 CodeIgniter-StudentManagementSystem Students Controller view_students.php addStudent cross site scripting	May 26, 2026 1mo ago
CVE-2026-9485	medium	5.1/10	SourceCodester Student Grades Management System students.php cross site scripting	May 25, 2026 1mo ago
CVE-2026-9484	medium	5.3/10	SourceCodester Student Grades Management System classroom.php removeStudentFromClassroom improper authorization	May 25, 2026 1mo ago
CVE-2026-9483	medium	5.3/10	SourceCodester Student Grades Management System grades.php improper authorization	May 25, 2026 1mo ago
CVE-2026-9474	medium	6.9/10	yashpokharna2555 StudentManagementSystem studentdel.php confirm_logged_in sql injection	May 25, 2026 1mo ago
CVE-2026-9471	medium	5.1/10	yashpokharna2555 StudentManagementSystem student.php cross site scripting	May 25, 2026 1mo ago
CVE-2026-9470	medium	6.9/10	yashpokharna2555 StudentManagementSystem student_trans.php confirm_logged_in sql injection	May 25, 2026 1mo ago
CVE-2026-9469	medium	6.9/10	yashpokharna2555 StudentManagementSystem success.php sql injection	May 25, 2026 1mo ago
CVE-2018-25370	medium	6.9/10	Admidio 3.3.5 Cross-Site Request Forgery via roles_function.php	May 25, 2026 1mo ago
CVE-2018-25364	high	8.8/10	Twitter-Clone 1 SQL Injection via search.php	May 25, 2026 1mo ago
CVE-2018-25363	medium	5.3/10	Twitter-Clone 1 Cross-Site Request Forgery via tweetdel.php	May 25, 2026 1mo ago
CVE-2018-25362	high	8.8/10	Twitter-Clone 1 SQL Injection via follow.php	May 25, 2026 1mo ago
CVE-2026-9451	medium	5.3/10	code-projects Employee Management System applyleaveprocess.php sql injection	May 25, 2026 1mo ago
CVE-2026-9450	medium	5.3/10	code-projects Employee Management System psubmit.php sql injection	May 25, 2026 1mo ago